*Attendees*
Chris Misra, U. Mass (chair)
Jack Suess, UMBC
Jim Pepin, Clemson
Mike Van Norman, UCLA
Doug Pearson, REN-ISAC/Indiana U.
Deke Kassabian, U. Penn
Terry Gray, U. Washington
Chas DiFatta, CMU
Mark Poepping, CMU
Ken Klingenstein, Internet2
Joe St. Sauver, Internet2/U. Oregon
Steve Olshansky, Internet2 (scribe)

*Discussion*

*NetGuru/CNN (Campus Networking N*) discussion post-JointTechs*
There was a good NetGuru meeting, good energy, good discussion. One thread had to do with reinvention, producing similar software on campuses which has similar functionality but not everything needed by all. Is there a way to polish some of these tools, go through a requirements process to develop best of breed tools? VM management was one example.

CNN was deemed a worthwhile activity, and should be rostered in the Internet2 networks area rather than Middleware or Security. Internet2 network services staff have expressed interest. This will be presented to the strategic planning process for prioritization.

NetGuru seems to be at a good size now, but there are more people who would like to participate. Is it possible to expand it and remain as productive? CNN could function as an effective practices group. How would this feed back into the CETF (Campus Expectations Task Force) efforts, which will be revisited by the strategic planning process?
http://www.internet2.edu/cetf/

There was interest in working on a half- to full-day MPLS workshop, and discussions are going forward including looking into obtaining lab support from a vendor. One of the questions arising has to do whether the benefit of doing MPLS is worth the effort to implement it.

*REN-ISAC update/business plan/etc.*
Jack and Doug discussed the business plan discussions, moving toward a paid membership model, and referenced the PPT sent to the list before the call.

The Executive Advisory Group has been discussing the business model and plan. Membership is expanding (200+ institutions, 400+ individuals). Indiana U. has been supporting it to date, with some substantial help from Internet2.

One of the areas of discussion has to do with instituting an institutional membership model, at a lower level of trusted access, in addition to the vetted individual membership currently in place. A subscription model, as opposed to membership, may be preferable as it would be lighter weight and less burdensome to at least some institutions.

Q: Would value-added services or products be considered? E.g. Penetration testing?
A: Perhaps later. There may be a number of services that could be offered on an ala-carte basis.

*Internet2 Strategic Planning*
Updates available at http://www.internet2.edu/strategicplanning/

*Upcoming Meetings*
CAMP: Bridging Security and Identity Management (sold out)
February 13-15 Tempe AZ
http://www.educause.edu/camp081/
Incident response approaches in a federated environment is an issue percolating… Coordinating incident response between organizations, given e-discovery data sharing issues, adds another layer of complexity.

Spring Internet2 Member Meeting
April 21-23, Arlington VA
http://events.internet2.edu/2008/spring-mm/

Educause/Internet2 Security Professionals Conference
May 4-6, Arlington VA
http://www.educause.edu/sec08/