A group dedicated to improve EdgeX security through architecture, documentation, code review, vulnerability management.
Key Working Group Facts
Working Group Creation Date: June 2, 2017
Working Group Chair: Colin Hutchinson (Kong) - Past Chairs: Malini Bhandaru (VMware) , Tingyu Zeng (Dell), Doug Gardner (ADI), David Ferriera (ForgeRock)
Security Issue Reporting Process:
- Send private email to: security-issues@lists.edgexfoundry.org
- TSC Ratified Process: EdgeX Process for Addressing Security Issues-v5.pdf. (note: use above email address for reporting)
Mailing List
- Security team’s mail alias: edgex-tsc-security@lists.edgexfoundry.org
- To subscribe or unsubscribe via the World Wide Web, visit: https://lists.edgexfoundry.org/g/EdgeX-TSC-Security
Meeting Time
- Security Working Group meetings are open to the public, and are held weekly.
- Security Working Group meetings are held on Wednesday's at 9am PT (find your local time here)
- To subscribe to the meeting invitation, please visit Community Meetings & Calendar
-----
Dial-In Info:EdgeX Working Group 2 is inviting you to a scheduled Zoom meeting.
Topic: EdgeX: Security Working Group - Weekly Call
Time: Sep 23, 2020 09:00 AM Pacific Time (US and Canada)
Every week on Wed, until Sep 1, 2021, 50 occurrence(s)
Please download and import the following iCalendar (.ics) files to your calendar system.
Weekly: https://zoom.us/meeting/uJMrdeigpz8sWyzbcGd_m1I0R3ETQGBasw/ics?icsToken=98tyKuyvqDkrEt2Rtlz9f7QtE4XqbuG5kUZXsKFeuxvaDnF6MjGlE9ZzFZB-A8-BJoin Zoom Meeting
https://zoom.us/j/576218946?pwd=UTVtMkZYL1RXSTlKZWFTRit3MFJ4Zz09Meeting ID: 576 218 946
Passcode: 497212
One tap mobile
+12532158782,,576218946# US (Tacoma)
+13462487799,,576218946# US (Houston)Dial by your location
+1 253 215 8782 US (Tacoma)
+1 346 248 7799 US (Houston)
+1 669 900 6833 US (San Jose)
+1 301 715 8592 US (Germantown)
+1 312 626 6799 US (Chicago)
+1 646 558 8656 US (New York)
855 880 1246 US Toll-free
877 369 0926 US Toll-free
Meeting ID: 576 218 946
Find your local number: https://zoom.us/u/HeDrUT7y
Meeting Minutes
- January 6, 2021: Security WG Meeting 01-06-2021;
- December 16, 2020: Security WG Meeting 16-12-2020; Meeting Recording
- December 9, 2020: Security WG Meeting 9-12-2020; Meeting Recording
- December 2, 2020: Security WG Meeting 2-12-2020; Meeting Recording
- November 18, 2020: Security WG Meeting 11-18-2020 Meeting Recording
- November 5, 2020: Meeting Recording (Extra meeting to develop Security tasks/priority list for Ireland)
- November 4, 2020: Meeting Recording
- October 28, 2020: Meeting Recording
- October 21, 2020: Security WG Meeting 10-21-2020; Meeting Recording
- September 30, 2020: Security WG Meeting 09-30-2020; Meeting Recording
- September 23, 2020: Security WG Meeting 09-23-2020; Meeting Recording
- September 9, 2020: Security WG Meeting 09-09-2020; Meeting Recording
- September 2, 2020: Security WG Meeting 09-02-2020; Meeting Recording
- August 26, 2020: Security WG Meeting 08-26-2020; Meeting Recording
- August 19, 2020:Security WG Meeting 08-19-2020; Meeting Recording
- August 12, 2020: Security WG Meeting 08-12-2020; Meeting Recording
- August 5, 2020: Security WG Meeting 08-05-2020; Meeting Recording
- July 29, 2020: Security WG Meeting 07-29-2020; Meeting Recording
- July 22, 2020: Security WG Meeting 07-22-2020; Meeting Recording
- July 15, 2020: Security WG Meeting 07-15-2020; Meeting Recording
- July 8, 2020: Security WG Meeting 07-08-2020; Meeting Recording
- June 24, 2020: Security WG Meeting 06-24-2020; Meeting Recording
- June 17, 2020: Meeting Minutes; Meeting Recording
- June 10, 2020: Meeting Minutes; Meeting Recording (Password: 8A^&HL69)
- June 3, 2020: Meeting Minutes; Meeting Recording (Password: 1Z=CI?w^)
- May 20, 2020: Meeting Minutes; Meeting Recording (Password: 1D%7$j&2)
- May 13, 2020: Meeting Minutes; Meeting Recording (Password: 6U#=Q%?^)
- May 12, 2020: Edgex-Arm integration kick-off meeting
- April 22, 2020: Meeting Minutes; Meeting Recording (Password: 6I*?$%05)
- April 15, 2020: Meeting Minutes; Meeting Recording (Access Password: y6&2?H4h)
- April 8, 2020:Meeting Minutes; Meeting Recording
- March 25, 2020: Meeting Minutes; Meeting Recording
Hanoi Release(all - for latest update of Hanoi Release Planning doc, please go here)
- March 18, 2020: Meeting Minutes; Meeting Recording
- March 11, 2020: Meeting Minutes; Meeting Recording
- March 4, 2020: Meeting Minutes; Meeting Recording
- February 26, 2020: Meeting Minutes; Meeting Recording
- February 19, 2020: Meeting Minutes; Meeting Recording
- February 12, 2020: Meeting Minutes; Meeting Recording
- February 5, 2020: Meeting Minutes; Meeting Recording
- Proposal to secure API V2 ( by Bryon Nevis) : EdgeX API 2.0 security
- January 29, 2020: Meeting Minutes; Meeting Recording
- January 22, 2020: Meeting Minutes; Meeting Recording
- January 15, 2020: Meeting Minutes; Meeting Recording
- January 8, 2020: Meeting Minutes; Meeting Recording
- December 18, 2019: Meeting Minutes; Meeting Recording
- December 11, 2019: Meeting Minutes; Meeting Recording
- December 4, 2019: Meeting Minutes; Meeting Recording
- November 20, 2019: Meeting Minutes; Meeting Recording
- November 13, 2019: Meeting Minutes; Meeting Recording
- October 30, 2019: Meeting cancelled
- October 23, 2019: Meeting Minutes; Meeting Recording
- October 16, 2019: Meeting Minutes; Meeting Recording
- October 2, 2019: Meeting Minutes; Meeting Recording
- September 25, 2019: Meeting Minutes; Meeting Recording
- September 18, 2019: Meeting Minutes; Meeting Recording
- September 11, 2019: Meeting Minutes; Meeting Recording
- September 4, 2019: Meeting Minutes; Meeting Recording
- August 28, 2019: Meeting Minutes; Meeting Recording
- August 14, 2019: Meeting Recording
- August 7, 2019: Meeting Minutes; Meeting Recording
- July 24, 2019: Meeting Minutes; Meeting Recording
- July 17, 2019: Meeting Minutes;SAST Slides;Meeting Recording
- July 10, 2019: Meeting Minutes; Meeting Recording
- June 26, 2019: Meeting Minutes Meeting Recording
- June 19, 2019: Meeting Minutes; Meeting Recording
- June 12, 2019: Meeting Minutes; Meeting Recording
- June 5, 2019: Meeting Minutes; Meeting Recording
- May 29, 2019: Meeting Minutes; Meeting Recording
- May 22, 2019: Meeting Minutes; Meeting Recording
- May 15, 2019: Meeting Minutes; Meeting Recording
- May 8, 2019: Meeting Recording
- April 24. 2019: Meeting Recording
- April 17, 2019: Meeting Minutes; EdgeX Process for Addressing Security Issues-v5.pdf; EdgeX Process for Addressing Security Issues-v5.docx; Protecting EdgeX Secrets-v7.pdf; Protecting EdgeX Secrets-v7.docx; Meeting Recording
- April 10, 2019: Meeting Minutes; Protecting EdgeX Secrets-v7.pdf; Protecting EdgeX Secrets-v7.docx; Meeting Recording
- Intel (Bryon and Jim) roadmap doc to explore; https://docs.google.com/presentation/d/17W7MghqrZUu5sIHnS4F6GtOYkPWObJP-e9Tieh2qbRI/edit?pli=1#slide=id.p
- Threat Model: https://github.com/bnevis-i/security-secret-store/pull/1
- Tingyu's design for Vault initialization program and Mongo init script: Security Store Service for MongoDB microservice.docx
- April 3, 2019: Meeting Minutes; Documents covered and requesting review: Protecting EdgeX Secrets-v6.pdf Protecting EdgeX Secrets-v6.docx EdgeX Process for Addressing Security Issues-v4.pdf; EdgeX Process for Addressing Security Issues-v4.docx; Meeting Recording
- Intel's Exploration of EdgeX security (Threat Modeling and what's next) presentation: https://docs.google.com/presentation/d/17W7MghqrZUu5sIHnS4F6GtOYkPWObJP-e9Tieh2qbRI/edit?pli=1#slide=id.g556c569946_0_6
- Intel's Threat Model for Secret Store: https://github.com/bnevis-i/security-secret-store/pull/1
- March 27, 2019:Meeting Minutes ; Meeting Recording; Documents reviewed: Protecting EdgeX Secrets-v4.pdf EdgeX Process for Addressing Security Issues-v3.pdf
- March 13 & 20th, 2019: Canceled
- March 6, 2019:Minutes; Meeting Recording
- February 27, 2019: Canceled
- February 20, 2019: Meeting Recording
- February 13, 2019: Canceled
- February 6, 2019: Canceled
- January 30, 2019: Meeting Recording
- January 16, 2019: Meeting Recording
- January 9, 2019: Meeting Recording
- December 12, 2018: Meeting Recording
- December 5, 2018: Slides and Meeting Recording
- November 28, 2018: Slides and Meeting Recording
- November 21, 2018: Canceled
- November 14, 2018: Slides and Meeting Recording
- November 7, 2018: Slides and Meeting Recording
- October 31, 2018: Canceled
- October 10, 2018: Slides and Meeting Recording
- September 26, 2018: Meeting Recording
- September 19, 2018: Meeting Recording
- September 12, 2018: Meeting Recording
- September 5, 2018: Meeting Recording
- August 31, 2018: Meeting Recording (HRoT working session); Link to TPM specs and policies
- August 29, 2018: Meeting Recording
- August 22, 2018: Meeting Recording
- August 1, 2018: Meeting Recording
- July 25, 2018: Meeting Recording
- July 11, 2018: Meeting Recording
- June 27, 2018: Meeting Recording
- June 20, 2018: Meeting Recording
- June 13, 2018: Meeting Recording
- June 6, 2018: Cancelled since F2F meeting is occurring this week.
- May 30, 2018: Slides and Meeting Recording
- May 23, 2018: Slides and Meeting Recording
- May 16, 2018: Slides and Meeting Recording
- May 9, 2018: Slides and Meeting Recording
- May 2, 2018: Slides and Meeting Recording
- April 25, 2018: Cancelled
- April 18, 2018: Cancelled
- April 11, 2018: Slides and Meeting Recording
- April 04, 2018: Slides and Meeting Recording
- March 28, 2018: Cancelled
- March 21, 2018: Slides and Meeting Recording
- March 14, 2018: Slides and Meeting Recording
- IIC Endpoint Security Best Practices Final Mar 2018 document: http://www.iiconsortium.org/pdf/Endpoint_Security_Best_Practices_Final_Mar_2018.pdf
- Snapshot of Secure Proxy + Authentication Options for EdgeX
- Snapshot of EdgeX-simple-jwt-auth--DRAFT
- March 7, 2018: Slides and Meeting Recording
- February 28, 2018: Slides and Meeting Recording
- February 21, 2018: Slides and Meeting Recording
- February 14, 2018: Slides and Meeting Recording
- February 7, 2018: Slides and Meeting Recording
- January 31, 2018: Meeting Recording
- January 24, 2018: Slides and Meeting Recording
- January 10, 2018: Meeting Recording
- January 3, 2018: Slides and Meeting Recording
- December 20, 2017: Meeting Recording
- December 13, 2017: Slides and Meeting Recording
- November 29, 2017: Slides and Meeting Recording
- November 15, 2017: Slides and Meeting Recording
- November 8, 2017: Meeting Recording
- November 1, 2017: Slides and Meeting Recording
- October 25, 2017: Slides and Meeting Recording
- October 11, 2017: Slides and Meeting Recording
- September 27, 2017: Slides and Meeting Recording
- September 20, 2017: Slides and Meeting Recording
- September 13, 2017: Slides and Meeting Recording
- September 6, 2017 Meeting - We reviewed the final outcome of the F2F meeting. Please click on this link to see the outcome and final slide deck: Link
- August 29 + 30: F2F Meeting - See 29 and 30 August 2017: Palo Alto, CA
- August 23: Meeting Recording
- August 16, 2017: Slides
- August 9, 2017: Slides
- July 7, 2017: Slides; Notes and Actions; Meeting Recording
- June 1-2, 2017: Slides
Documents
- Vault master key protection-DRAFT-v0.5.pdf
- Hardware-based Secure Storage Design - DRAFT
- Ongoing work in online document @ https://docs.google.com/document/d/1MsTNdwtZp3zA-nPhCC3COakL3e5mrhJuFByy6ja5OxU/edit?ts=5c1a5e4. Request access at this link.
- EdgeX Security Roadmap for Delhi, Edinburgh, Fuji and beyond
- Security Working Group Google Drive Folder
- Consolidated Feature Backlog Document
- FuseSecurityRequirements-Jan2017.docx