*Attendees*
Mark Poepping, CMU (chair)
Terry Gray, U. Washington
Jim Pepin, Clemson
Joe St. Sauver, Internet2/U. Oregon
Mike Van Norman, UCLA
Ken Klingenstein, Internet2
Renee Frost, Internet2
Rodney Petersen, Educause
Deke Kassabian, U. Penn
Chas DiFatta, CMU
Steve Olshansky, Internet2 (scribe)
*Action Items*
{Joe} will send separate notes to the list about the DoE and JointTechs meetings he attended, and about a recent FTC hearing about P2P file sharing
*Discussion*
- Membership revisit
Mark will be following up with a candidate discussed on a previous call and will report back to the list
- Joe gave a detailed report from the DoE workshop he attended in Maryland July 23-24, 2007, sponsored by (1) the office of science and (2) the office of electricity delivery and energy reliability. He will be sending out a separate note to the list with more details about this.
A report will be forthcoming, most likely publicly released. Public details and presentations are available at http://cybersecurity.colostate.edu/
- Internet2 update
Internet2 has announced the membership of the new advisory councils. The one probably most directly relevant to us is the Applications, Middleware & Services Advisory Council (AMSAC), and Ken is serving as the liaison to this council. There are 15 members of each council, 3 each representing CIOs, regionals, researchers, and industry, and 3 more to be appointed. Details at http://www.internet2.edu/elections/
The merger planning team is expected to release a vision statement soon, and a definitive MoU is expected fairly soon thereafter.
- Joint Techs debrief
http://jointtechs.es.net/Illinois2007/
Attendance was ~190. Security was on the agenda for the last morning, details on the agenda http://events.internet2.edu/2007/jt-batavia/agenda.cfm?event=272&day=&track=&details=
There look to be some opportunities for synergy/collaboration between some work at Fermilab and RENOIR. Joe will be following up with some details in a separate note to the list.
- I2MM topics/sessions
Stay tuned for details to come...
http://events.internet2.edu/2007/fall-mm/
- DNSSEC update
Campus deployments and testbeds are happening, including NIST, but are fairly few in number.
http://www.dnssec-deployment.org/internet2/
http://www-x.antd.nist.gov/dnssec/
Joint Techs: Introduction to the US Government DNSSEC Pilot
http://events.internet2.edu/2007/jt-batavia/sessionDetails.cfm?session=3375&event=272
The DNS admins are usually not the regular security staff, thus it would be helpful to look at ways to connect with them ongoing.
FISMA (Federal Information Security Management Act) is expected to be a driver, and presumably will become more of a push in a year or so. On campuses, most of the data they get from gov't agencies often de-identified by the time the campuses get it, thus FISMA isn't really a factor in many cases. http://csrc.nist.gov/sec-cert/
- FWNA update
There have been some technology developments in Europe that address some concerns recently raised on the WG list. There doesn't seem to be much urgency around this at the CIO level in the US, unlike Europe, so some education and demonstrations may be in helpful.
There is still some sentiment among some campuses that they have addressed some kind of guest access already, so why bother with this?
- Future work
There may be some upcoming external funding opportunities, so it would be useful to do some planning about what we might want to do with some additional resources. More on this to come, but good to be thinking about in the interim...
- Security, IdM and Tempe Camp
The topic for the next Camp in February will be looking at IdM as it relates to security topics, and aim it more at security people in addition to middleware people. The program committee is being formed now.
- Illegal File Sharing - what's been done, what's to do?
- any value in contribution for the Luker call to action?
Security is bubbling up as a topic in this context, in addition to the high profile discussions about copyright infringement.