2022-01-11 - ONAP Security: Jakarta Global Requirements and Best Practices

Topic Leader(s)

• Byung-Woo Jun
• Robert Heinemann
• Muddasar Ahmed
• Tony Hansen
• Pawel Pawlak
• Amy Zwarico

Topic Description

1 hour  Byung-Woo Jun, Robert Heinemann, Tony Hansen , Pawel Pawlak , Amy Zwarico

Proposed Agenda:

1. ONAP Security Requirements (25 mins)
   1. Version updates: package upgrades, Java/Python upgrades, infrastructure
   2. CII badging targets
   3. Integration base images
   4. Service-Mesh-Based mTLS communication between Components
   5. Authentication and Authorization Architecture
2. Deep Dive: Logging architecture leveraging open-source logging framework (35 mins)
   1. The WHY of Security Logging
      1. Security Logging for Containerized Environments
      2. Required log fields
      3. Logging Metadata needed to support great security analytics downstream
   2. The HOW of Security Logging
      1. Log Generation thru STDOUT/STDERR
      2. Log Collection, Aggregation, Persistence and Visualization Roadmap

Topic Overview

1) ONAP Security Requirements (25 mins)

1.1 Version updates: package upgrades, Java/Python upgrades, infrastructure

1.2 CII badging targets

1.3 Integration base images

1.4 Service-Mesh-Based mTLS communication between Components

1.5 Authentication and Authorization Architecture

2) Deep Dive: Logging architecture leveraging open-source logging framework (20 mins)

2.1 The WHY of Security Logging

    2.1.1 Security Logging for Containerized Environments

    2.1.2 Required log fields

    2.1.3 Logging Metadata needed to support great security analytics downstream

2.2 The HOW of Security Logging

    2.2.1 Log Generation thru STDOUT/STDERR

    2.2.2 Log Collection, Aggregation, Persistence and Visualization Roadmap

Slides & Recording

Live Interactive Session