Minutes, Salsa-CSI2 Conference Call
June 5, 2008

**Attending**

Chris Misra, University of Massachusetts-Amherst (chair)
Phil Denault, Worcester Polytechnic Institute
Wes Young, University of Buffalo
Kevin Amorin, Harvard University
Brian Smith-Sweeney, New York University
Dan Adinolfi, Cornell University
Anthony Maszeroski, University of Scranton
Joe St. Sauver, University of Oregon/Internet2
Joel Rosenblatt, Columbia University
Emily Eisbruch, Internet2
Renee Frost, Internet2
Steve Olshansky, Internet2
Dean Woodbeck, Internet2 (scribe)

**Action Items**

[AI] {Joel} will send the list of top-12 metrics, from the security metrics working group, to the CSI2 list for information and comment.

[AI] {Wes} will provide a draft IEMEF proposal to the CSI2 list for comment.

[AI] {Chris and Dan} will discuss the timing and schedule for a Spider training session offered through NERCOMP.

[AI] {Chris} will contact Rodney at EDUCAUSE and {Joel} will contact Mary Dunker to see if the EDUCAUSE Effective Practices group would be a good venue for the security standards discussion.

** Shifting Landscape**

Brian will write a 600-word article for EdTech magazine based on the shifting landscape presentation. He anticipates focusing on problem definition. Time permitting, he will send a draft to the list for comment. His deadline is June 12. He will also contact the EDUCAUSE Quarterly to determine if there is interest in a similar article. A white paper may also be on the long-term horizon.

Also in this space, the working group has discussed a tools taxonomy, outlining what people are using and what is and is not working any longer.

**Security Metrics**

The security metrics working group continues to evaluate proposed metrics, with the intent of ranking them, in terms of importance, in three categories: operational, incident and compliance. Joel reports the group has 8-10 metrics to review, then will provide a rank-ordered list. [AI] {Joel} will send the proposed top metrics to CSI2 for comment..

**RENOIR**

A grant proposal is in the works to help fund the RENOIR effort. In addition, Wes is working on IEMEF, which would collect intrusion events from various sensors and do some analysis of the data, with the possibility of intersecting with RENOIR. Wes is working on a proposal to ensure that this does not overlap with RENOIR. [AI] {Wes} will provide a draft to the CSI2 list.

**CU Spider**

The migration of CU Spider from Cornell to Internet2 is in process. [AI] {Chris and Dan} will discuss the timing and schedule for a Spider training session offered through NERCOMP. One possibility is two-day session, with one day focusing on proactive Spider use and one on reactive Spider use. Interested participants could choose one day or attend both.

**Security Standards**

The working group discussed next steps in the security standards area. The consensus is that this fits with effective practices. [AI] {Chris} will contact Rodney at EDUCAUSE and {Joel} will contact Mary Dunker to see if they concur that this would be a good fit with the EDUCAUSE Effective Practices group.

**APHIDS**

With Elliott’s departure from Brandeis, Tony will dedicate a portion of his time on the development of APHIDS. As code development continues, there is also a need to validate the use-case and outline the next steps for this concept.

**Member Meeting Proposal Deadline**

July 11 is the proposal deadline for the Internet2 Fall Member Meeting, October 13-16, in New Orleans. Working group members are asked to consider submitting proposals in the security area.

**Next call June 19, 2008, 2:00 p.m. (EDT)**