OPNFV Security Panel
0 likes217 views
The OPNFV Security Group, founded on January 22, 2015, aims to enhance security within the OPNFV ecosystem through documentation, code reviews, and vulnerability management. It has two main projects: the OPNFV Security Guide for best practices and the Inspector for secure coding and audit improvements. The group encourages collaboration and holds weekly meetings to coordinate efforts in addressing security challenges.
OPNFV Security Panel
- 1. OPNFV Security Group Luke Hinds Security Group Project Lead Principle Security Architect @ Nokia Networks
- 2. Overview • Founded Jan 22, 2015 • Four members! (room for more) • Improve OPNFV security through documentation, code / design review, upstream inter-work. • An ‘umbrella’ group to encourage development of security within the OPNFV eco-system. • Effectively handle vulnerability and threats in a co- ordinated manner. 2
- 3. Projects… OPNFV Security Guide – Best Practices – Hardening Guidelines – 'Living' document – Project Input welcomed https://etherpad.opnfv.org/p/security-guide
- 4. 4 – Improve Audit – Code Commits upstream – CADF Framework – Project Input welcomed https://wiki.opnfv.org/requirements_projects/inspector Projects… Inspector
- 5. Secure Coding Gerrit Code / Design Review: Tag ‘SecurityImpact’ opnfv-security@lists.opnfv.org 5 Secure Coding Guidelines:
- 6. Secure Coding – what we check for.. Shell Executions: >>> from subprocess import call >>> filename = input("What file would you like to display?n") What file would you like to display? non_existent; rm -rf importantFiles # >>> call("cat " + filename, shell=True) 6
- 7. Secure Coding – what we check for.. Permissions: with open('testfile.txt', 'w') as fout: fout.write("secrets!") flags = os.O_WRONLY | os.O_CREAT | os.EXLC with os.fdopen(os.open('testfile.txt', flags, 0600), 'w') as fout: fout.write("secrets!") 7 Defaults to OS permissions Can be read by All! Only the user has read permissions
- 8. Secure Coding – Live example.. 8
- 9. Vulnerability Management 9 – Coordinated response – Responsible Disclosure Process – Advisory https://wiki.opnfv.org/security/osvm
- 10. Come and join us... 10 –Every Wednesday @ 14:00 UTC –#opnfv-sec