Minutes Salsa-CSI2 Conference Call
July 19, 2007
 
**Attending**

Chris Misra, University of Massachusetts (Chair)
Joel Rosenblatt, Columbia University
Brian Smith-Sweeney, New York University
Elliott Kendall, Brandeis University
Paul Asadoorian, OSHEAN
Doug Pearson, REN-ISAC
Phil Denault, Worcester Polytechnic Institute
Steve Olshansky, Internet2
Dean Woodbeck, Internet2 (scribe)
 
**Action Items**
 
[AI] {Doug} will follow-up with Scott Pinkerton from Argonne National Lab about possible collaborations on tools for sharing security information.
 
[AI} {Chris} will share his summer intern’s data hash coding results with CSI2 and Phil will review.
 
**Joint Techs Conference**
 
http://jointtechs.es.net/Illinois2007/
Doug reported on the Joint Techs conference, held July 15-19, at Fermilab in Batavia, Illinois. The program, with links to recorded sessions, is available here:
 
http://events.internet2.edu/2007/jt-batavia/agenda.cfm?event=272&day=&track=&details=
 
He mentioned these security-related presentations.
 
Scott Pinkerton from the Argonne National Lab (ANL) reported on a tool for sharing information about the IP addresses of known bad actors in an effort to improve operational response to incidents. The tool is XML-based and directed toward intrusion detection sensor data. The session, “Federated Model for Cybersecurity,” was recorded and is available here:
 
http://events.internet2.edu/2007/jt-batavia/sessionDetails.cfm?session=3374&event=272
 
Doug talked with Scott about RENOIR and CSI2. Scott is interested in exploring possible collaborations. [AI] {Doug} will follow-up with him.
 
Sean Siler, IPv6 program manager for Microsoft, did a short presentation and a longer BoF about IPv6 support in Windows Vista. Both sessions are recorded and available from the conference program page. Doug mentioned that the BoF was a good technical session. Siler also discussed Teredo, an address assignment and automatic tunneling technology that provides unicast IPv6 connectivity across the IPv4 Internet. More information is here:
 
http://www.microsoft.com/technet/network/ipv6/teredo.mspx
 
Siler made the point that this is not a business solution, but a home solution, but that it is enabled in all Vista machines, which raises security vulnerabilities.
 
**Data hashing **
 
Doug is exploring some alternative thoughts about data hashing and anoymization, based on information from the GFIRST conference. He will follow-up and report during a later call.
 
Chris reported that his intern, who has been doing some coding this summer and is now documenting the code. Chris will share the results with CSI2 and Phil will review.
 
**New Members **
 
Wyman Miles and Daniel Adinolfi, both from Cornell, have joined the CSI2 working group. Chris continues to follow-up with other potential members.
 
**Security Metrics**
 
Joel reported that will chair working groups on security metrics for both EDUCAUSE and the Institute for Applied Network Security.
 
**CU Spider**
 
Cornell University’s (CU) Spider security software project has shown some success and will likely be hosted on the Internet2 servers (for access to wikis and other resources) and will fall under CSI2 for administrative purposes. Discussions of CU Spider could become a part of these phone calls. Current site for reference is http://www.cit.cornell.edu/security/tools/, but it will be moving to Internet2 in the near future.
 
**Shared Darknet**
 
David Ripley will be more actively following-up with those who express an interest in providing data to the Shared Darknet.
 
Doug will participate in a phone call July 20 concerning ATLAS, Arbor’s threat analysis network. Depending on the results of the call, REN-ISAC may begin testing the service.
 
**Next call August 2, 2007**