...
Key
...
Sub-Group Facts
Working Group Subgroup Creation Date: June 2 April 10, 2017 2017
Working Group Subgroup Chair: Andy Foster (IOTech)
...
Mailing Lists
- QA/Test team’s mail alias: edgex-tsc-qa-test@lists.edgexfoundry.org
- To subscribe or unsubscribe via the World Wide Web, visit: https://lists.edgexfoundry.org/g/EdgeX-TSC-QA-Test
and
- Security team’s mail alias: edgex-tsc-security@lists.edgexfoundry.org
- To subscribe or unsubscribe via the World Wide Web, visit: https://lists.edgexfoundry.org/g/EdgeX-TSC-Security
...
Discussion Forums
- #qa-test on https://chat.edgexfoundry.org/ and
and
- #security on https://chat.edgexfoundry.org/
...
Meeting Time
- QA/Test
Security Testing Meetings are are open to the public
. QA/Test Meetings are currently held jointly with the Core WG. Combined minutes and meeting recordings are available at: Core Working Group
Meeting Minutes
.
- The next Security Testing meeting will be posted here.
...
Work Items
We just had our first security testing group meeting this morning and there are two security testing guides discussed.
OWASP IoT top 10 and IoT security guidance https://www.owasp.org/index.php/IoT_Security_Guidance . OWASP is a collaboration of application security community and it’s top 10 list are well recognized and followed.
IIC Endpoint security best practices https://www.iiconsortium.org/pdf/Endpoint_Security_Best_Practices_Final_Mar_2018.pdf .It was released about two weeks ago and categorizes the aspects of security of endpoint
As an initial efforts we are trying to map these guidance into EdgeX and evolve the security testing along future EdgeX releases. Let us know if you have different idea or suggestions. A draft will be provided to reflect our approach later.
...
Meeting Minutes & Recordings
- April 10, 2018:
- April 12, 2018: Next Core WG call
- April 5, 2018: Agenda and Meeting Minutes; Meeting Recording