Page History

Versions Compared

Key

This line was added.
This line was removed.
Formatting was changed.

A group dedicated to improve EdgeX security through architecture, documentation, code review, vulnerability management.

Key Working Group Facts

Working Group Creation Date: June 2, 2017
Working Group Chair: Colin Hutchinson (Kong) - Past Chairs: Malini Bhandaru (VMware) , Tingyu Zeng (Dell), Doug Gardner (ADI), David Ferriera (ForgeRock)

Security Issue Reporting Process:

Send private email to: security-issues@lists.edgexfoundry.org
TSC Ratified Process: EdgeX Process for Addressing Security Issues-v5.pdf. (note: use above email address for reporting)

Mailing List

Security team’s mail alias: edgex-tsc-security@lists.edgexfoundry.org
To subscribe or unsubscribe via the World Wide Web, visit: https://lists.edgexfoundry.org/g/EdgeX-TSC-Security

Discussion Forum

#security on https://join.slack.com/t/edgexfoundry/shared_invite/enQtNDgyODM5ODUyODY0LWVhY2VmOTcyOWY2NjZhOWJjOGI1YzQ2NzYzZmIxYzAzN2IzYzY0NTVmMWZhZjNkMjVmODNiZGZmYTkzZDE3MTA

Meeting Time

Security Working Group meetings are open to the public, and are held weekly.
Security Working Group meetings are held on Wednesday's at 9am PT (find your local time here)
To subscribe to the meeting invitation, please visit Community Meetings & Calendar

-----

Dial-In Info:
EdgeX Working Group 2 is inviting you to a scheduled Zoom meeting.
Topic: EdgeX: Security Working Group - Weekly Call
Time: Sep 23, 2020 09:00 AM Pacific Time (US and Canada)
Every week on Wed, until Sep 1, 2021, 50 occurrence(s)

Please download and import the following iCalendar (.ics) files to your calendar system.
Weekly: https://zoom.us/meeting/uJMrdeigpz8sWyzbcGd_m1I0R3ETQGBasw/ics?icsToken=98tyKuyvqDkrEt2Rtlz9f7QtE4XqbuG5kUZXsKFeuxvaDnF6MjGlE9ZzFZB-A8-B
Join Zoom Meeting
Join from PC, Mac, Linux, iOS or Android: https://zoom.us/j/576218946
Or iPhone one-tap (US Toll): +14086380968,,576218946# or +16465588656,,576218946#
?pwd=UTVtMkZYL1RXSTlKZWFTRit3MFJ4Zz09
Meeting ID: 576 218 946
Passcode: 497212
One tap mobile
+12532158782,,576218946# US (Tacoma)
+13462487799,,576218946# US (Houston)
Dial by your location
+1 253 215 8782 US (Tacoma)
+1 346 248 7799 US (Houston)
+1 669 900 6833 US (San Jose)
+1 301 715 8592 US (Germantown)
+1 312 626 6799 US (Chicago)
Or Telephone:
Dial: +1 408 638 0968 (US Toll) or +1 646 558 8656 US (US TollNew York)
+1 855 880 1246 ( US Toll Free)-free
+1 877 369 0926 ( US Toll Free)-free
Meeting ID: 576 218 946
International numbers availableFind your local number: https://zoom.us/zoomconference?m=t6UX5OTIE0SFrIk-9MMnBPbFjE3dZ_xx/u/HeDrUT7y

Meeting Minutes

January 20, 2021: Security WG Meeting 01-20-2021; Meeting Recording
January 13, 2021: Security WG Meeting 01-13-2021; Meeting Recording
January 6, 2021: Security WG Meeting 01-06-2021; Meeting Recording
December 16, 2020: Security WG Meeting 16-12-2020; Meeting Recording
December 9, 2020: Security WG Meeting 9-12-2020; Meeting Recording
December 2, 2020: Security WG Meeting 2-12-2020; Meeting Recording
November 18, 2020: Security WG Meeting 11-18-2020 Meeting Recording
November 5, 2020: Meeting Recording (Extra meeting to develop Security tasks/priority list for Ireland)
November 4, 2020: Meeting Recording
October 28, 2020: Meeting Recording
October 21, 2020: Security WG Meeting 10-21-2020; Meeting Recording
September 30, 2020: Security WG Meeting 09-30-2020; Meeting Recording
September 23, 2020: Security WG Meeting 09-23-2020; Meeting Recording
September 9, 2020: Security WG Meeting 09-09-2020; Meeting Recording
September 2, 2020: Security WG Meeting 09-02-2020; Meeting Recording
August 26, 2020: Security WG Meeting 08-26-2020; Meeting Recording
August 19, 2020:Security WG Meeting 08-19-2020; Meeting Recording
August 12, 2020: Security WG Meeting 08-12-2020; Meeting Recording
August 5, 2020: Security WG Meeting 08-05-2020; Meeting Recording
July 29, 2020: Security WG Meeting 07-29-2020; Meeting Recording
July 22, 2020: Security WG Meeting 07-22-2020; Meeting Recording
July 15, 2020: Security WG Meeting 07-15-2020; Meeting Recording
July 8, 2020: Security WG Meeting 07-08-2020; Meeting Recording

Meeting Minutes

June 24, 2020: Security WG Meeting 06-24-2020; Meeting Recording
June 17, 2020: Meeting Minutes; Meeting Recording
June 10, 2020: Meeting Minutes; Meeting Recording (Password: 8A^&HL69)
June 3, 2020: Meeting Minutes; Meeting Recording (Password: 1Z=CI?w^)
May 20, 2020: Meeting Minutes; Meeting Recording (Password: 1D%7$j&2)
May 13, 2020: Meeting Minutes; Meeting Recording (Password: 6U#=Q%?^)
May 12, 2020: Edgex-Arm integration kick-off meeting
April 22, 2020: Meeting Minutes; Meeting Recording (Password: 6I*?$%05)
April 15, 2020: Meeting Minutes; Meeting Recording (Access Password: y6&2?H4h)
April 8, 2020:Meeting Minutes; Meeting Recording
March 25, 2020: Meeting Minutes; Meeting Recording
- ~~Hanoi Release~~ (all - for latest update of Hanoi Release Planning doc, please go here)
March 18, 2020: Meeting Minutes; Meeting Recording
March 11, 2020: Meeting Minutes; Meeting Recording
March 4, 2020: Meeting Minutes; Meeting Recording
- Security Input to EdgeX 2.0 API
February 26, 2020: Meeting Minutes; Meeting Recording
February 19, 2020: Meeting Minutes; Meeting Recording
February 12, 2020: Meeting Minutes; Meeting Recording
February 5, 2020: Meeting Minutes; Meeting Recording
- Proposal to secure API V2 ( by Bryon Nevis) : EdgeX API 2.0 security
January 29, 2020: Meeting Minutes; Meeting Recording
January 22, 2020: Meeting Minutes; Meeting Recording
January 15, 2020: Meeting Minutes; Meeting Recording
January 8, 2020: Meeting Minutes; Meeting Recording
December 18, 2019: Meeting Minutes; Meeting Recording
December 11, 2019: Meeting Minutes; Meeting Recording
December 4, 2019: Meeting Minutes; Meeting Recording
November 20, 2019: Meeting Minutes; Meeting Recording
November 13, 2019: Meeting Minutes; Meeting Recording
October 30, 2019: Meeting cancelled
October 23, 2019: Meeting Minutes; Meeting Recording
October 16, 2019: Meeting Minutes; Meeting Recording
October 2, 2019: Meeting Minutes; Meeting Recording
September 25, 2019: Meeting Minutes; Meeting Recording
September 18, 2019: Meeting Minutes; Meeting Recording
September 11, 2019: Meeting Minutes; Meeting Recording
September 4, 2019: Meeting Minutes; Meeting Recording
August 28, 2019: Meeting Minutes; Meeting Recording
August 14, 2019: Meeting Recording
August 7, 2019: Meeting Minutes; Meeting Recording
July 24, 2019: Meeting Minutes; Meeting Recording
July 17, 2019: Meeting Minutes;SAST Slides;Meeting Recording
July 10, 2019: Meeting Minutes; Meeting Recording
June 26, 2019: Meeting Minutes Meeting Recording
June 19, 2019: Meeting Minutes; Meeting Recording
June 12, 2019: Meeting Minutes; Meeting Recording
June 5, 2019: Meeting Minutes; Meeting Recording
May 29, 2019: Meeting Minutes; Meeting Recording
May 22, 2019: Meeting Minutes; Meeting Recording
May 15, 2019: Meeting Minutes; Meeting Recording
May 8, 2019: Meeting Recording
April 24. 2019: Meeting Recording
April 17, 2019: Meeting Minutes; EdgeX Process for Addressing Security Issues-v5.pdf; EdgeX Process for Addressing Security Issues-v5.docx; Protecting EdgeX Secrets-v7.pdf ; Protecting EdgeX Secrets-v7.docx; Meeting Recording
April 10, 2019: Meeting Minutes; Protecting EdgeX Secrets-v7.pdf; Protecting EdgeX Secrets-v7.docx; Meeting Recording
- Intel (Bryon and Jim) roadmap doc to explore; https://docs.google.com/presentation/d/17W7MghqrZUu5sIHnS4F6GtOYkPWObJP-e9Tieh2qbRI/edit?pli=1#slide=id.p
- Threat Model: https://github.com/bnevis-i/security-secret-store/pull/1
- Tingyu's design for Vault initialization program and Mongo init script: Security Store Service for MongoDB microservice.docx
April 3, 2019: Meeting Minutes; Documents covered and requesting review: Protecting EdgeX Secrets-v6.pdf Protecting EdgeX Secrets-v6.docx EdgeX Process for Addressing Security Issues-v4.pdf; EdgeX Process for Addressing Security Issues-v4.docx; Meeting Recording
- Intel's Exploration of EdgeX security (Threat Modeling and what's next) presentation: https://docs.google.com/presentation/d/17W7MghqrZUu5sIHnS4F6GtOYkPWObJP-e9Tieh2qbRI/edit?pli=1#slide=id.g556c569946_0_6
- Intel's Threat Model for Secret Store: https://github.com/bnevis-i/security-secret-store/pull/1
March 27, 2019:Meeting Minutes ; Meeting Recording; Documents reviewed: Protecting EdgeX Secrets-v4.pdf EdgeX Process for Addressing Security Issues-v3.pdf
March 13 & 20th, 2019: Canceled
March 6, 2019:Minutes; Meeting Recording
February 27, 2019: Canceled
February 20, 2019: Meeting Recording
February 13, 2019: Canceled
February 6, 2019: Canceled
January 30, 2019: Meeting Recording
January 16, 2019: Meeting Recording
January 9, 2019: Meeting Recording
December 12, 2018: Meeting Recording
December 5, 2018: Slides and Meeting Recording
November 28, 2018: Slides and Meeting Recording
November 21, 2018: Canceled
November 14, 2018: Slides and Meeting Recording
November 7, 2018: Slides and Meeting Recording
October 31, 2018: Canceled
October 10, 2018: Slides and Meeting Recording
September 26, 2018: Meeting Recording
September 19, 2018: Meeting Recording
September 12, 2018: Meeting Recording
September 5, 2018: Meeting Recording
August 31, 2018: Meeting Recording (HRoT working session); Link to TPM specs and policies
August 29, 2018: Meeting Recording
August 22, 2018: Meeting Recording
August 1, 2018: Meeting Recording
July 25, 2018: Meeting Recording
July 11, 2018: Meeting Recording
June 27, 2018: Meeting Recording
June 20, 2018: Meeting Recording
June 13, 2018: Meeting Recording
June 6, 2018: Cancelled since F2F meeting is occurring this week.
May 30, 2018: Slides and Meeting Recording
May 23, 2018: Slides and Meeting Recording
May 16, 2018: Slides and Meeting Recording
May 9, 2018: Slides and Meeting Recording
May 2, 2018: Slides and Meeting Recording
April 25, 2018: Cancelled
April 18, 2018: Cancelled
April 11, 2018: Slides and Meeting Recording
April 04, 2018: Slides and Meeting Recording
March 28, 2018: Cancelled
March 21, 2018: Slides and Meeting Recording
March 14, 2018: Slides and Meeting Recording
- IIC Endpoint Security Best Practices Final Mar 2018 document: http://www.iiconsortium.org/pdf/Endpoint_Security_Best_Practices_Final_Mar_2018.pdf
- Snapshot of Secure Proxy + Authentication Options for EdgeX
- Snapshot of EdgeX-simple-jwt-auth--DRAFT
March 7, 2018: Slides and Meeting Recording
February 28, 2018: Slides and Meeting Recording
- a draft copy of Simple Auth Service (.docx.odt format)
February 21, 2018: Slides and Meeting Recording
February 14, 2018: Slides and Meeting Recording
February 7, 2018: Slides and Meeting Recording
January 31, 2018: Meeting Recording
January 24, 2018: Slides and Meeting Recording
January 10, 2018: Meeting Recording
January 3, 2018: Slides and Meeting Recording
December 20, 2017: Meeting Recording
December 13, 2017: Slides and Meeting Recording
November 29, 2017: Slides and Meeting Recording
November 15, 2017: Slides and Meeting Recording
November 8, 2017: Meeting Recording
November 1, 2017: Slides and Meeting Recording
October 25, 2017: Slides and Meeting Recording
October 11, 2017: Slides and Meeting Recording
September 27, 2017: Slides and Meeting Recording
September 20, 2017: Slides and Meeting Recording
September 13, 2017: Slides and Meeting Recording
September 6, 2017 Meeting - We reviewed the final outcome of the F2F meeting. Please click on this link to see the outcome and final slide deck: Link
August 29 + 30: F2F Meeting - See 29 and 30 August 2017: Palo Alto, CA
August 23: Meeting Recording
August 16, 2017: Slides
August 9, 2017: Slides
July 7, 2017: Slides; Notes and Actions; Meeting Recording
June 1-2, 2017: Slides

Documents

Vault master key protection-DRAFT-v0.5.pdf
Hardware-based Secure Storage Design - DRAFT
- Ongoing work in online document @ https://docs.google.com/document/d/1MsTNdwtZp3zA-nPhCC3COakL3e5mrhJuFByy6ja5OxU/edit?ts=5c1a5e4. Request access at this link.
EdgeX Security Roadmap for Delhi, Edinburgh, Fuji and beyond
Security Working Group Google Drive Folder
Consolidated Feature Backlog Document
FuseSecurityRequirements-Jan2017.docx