A group dedicated to improve EdgeX security through architecture, documentation, code review, vulnerability management.
Key Working Group Facts
Working Group Creation Date: June 2, 2017
Working Group Chair: Bryon Nevis (Intel) - Past Chairs: Colin Hutchinson (Kong), Malini Bhandaru (VMware) , Tingyu Zeng (Dell), Doug Gardner (ADI), David Ferriera (ForgeRock)
Security Issue Reporting Process:
- Send private email to: security-issues@lists.edgexfoundry.org
- TSC Ratified Process: EdgeX Process for Addressing Security Issues-v5.pdf. (note: use above email address for reporting)
Mailing List
- Security team’s mail alias: edgex-tsc-security@lists.edgexfoundry.org
- To subscribe or unsubscribe via the World Wide Web, visit: https://lists.edgexfoundry.org/g/EdgeX-TSC-Security
Meeting Time
- Security Working Group meetings are open to the public, and are held weekly.
- Security Working Group meetings are held on Wednesday's at 9am PT (find your local time here)
- To subscribe to the meeting invitation, please visit Community Meetings & Calendar
-----
Dial-In Info:EdgeX Working Group 2 is inviting you to a scheduled Zoom meeting.
Topic: EdgeX: Security Working Group - Weekly Call
Time: Sep 23, 2020 09:00 AM Pacific Time (US and Canada)
Every week on Wed, until Sep 1, 2021, 50 occurrence(s)
Please download and import the following iCalendar (.ics) files to your calendar system.
Weekly: https://zoom.us/meeting/uJMrdeigpz8sWyzbcGd_m1I0R3ETQGBasw/ics?icsToken=98tyKuyvqDkrEt2Rtlz9f7QtE4XqbuG5kUZXsKFeuxvaDnF6MjGlE9ZzFZB-A8-BJoin Zoom Meeting
https://zoom.us/j/576218946?pwd=UTVtMkZYL1RXSTlKZWFTRit3MFJ4Zz09Meeting ID: 576 218 946
Passcode: 497212
One tap mobile
+12532158782,,576218946# US (Tacoma)
+13462487799,,576218946# US (Houston)Dial by your location
+1 253 215 8782 US (Tacoma)
+1 346 248 7799 US (Houston)
+1 669 900 6833 US (San Jose)
+1 301 715 8592 US (Germantown)
+1 312 626 6799 US (Chicago)
+1 646 558 8656 US (New York)
855 880 1246 US Toll-free
877 369 0926 US Toll-free
Meeting ID: 576 218 946
Find your local number: https://zoom.us/u/HeDrUT7y
Meeting Minutes
- April 5, 2023: Agenda 2023-04-05 (pdf): Meeting Recording
- March 29, 2023: Agenda 2023-03-29 (pdf): Meeting Recording
- March 22, 2023: Agenda 2023-03-22 (pdf): Meeting Recording
- March 15, 2023: Agenda 2023-03-15 (pdf): Meeting Recording
- March 8, 2023: Agenda 2023-03-08 (pdf): Meeting Recording
- March 1, 2023: Cancelled
- February 22, 2023: Cancelled
- February 15, 2023: Agenda 2023-02-15 (pdf): Meeting Recording
- February 8, 2023: Agenda 2023-02-08 (pdf): Meeting Recording
- February 1, 2023: Cancelled (no updates)
- January 25, 2023: Cancelled (no updates)
- January 18, 2023: Agenda 2023-01-18 (pdf): Meeting Recording
- January 11, 2023: Agenda 2023-01-11 (pdf): Meeting Recording
- January 4, 2023: Agenda 2023-01-04 (pdf): Meeting Recording
- December 28, 2022: Cancelled
- December 21, 2022: Cancelled
- December 14, 2022: Agenda 2022-12-14 (pdf): Meeting Recording
- December 7, 2022: Cancelled
- November 30, 2022: Agenda 2022-11-30 (pdf): Meeting Recording. OpenZiti discussion.
- November 23, 2022: Cancelled (Thanksgiving week in US)
- November 16, 2022: Preempted for Minnesota planning conference: Nov 14-17, 2022: Minnesota Planning Conference
- November 9, 2022: Agenda 2022-11-09 (pdf): Meeting Recording
- November 2, 2022: Cancelled
- October 26, 2022: Cancelled
- October 19, 2022: Cancelled
- October 12, 2022: Agenda 2022-10-12 (pdf): Meeting Recording
- October 5, 2022: Cancelled (follow suit for TSC cancellation)
- September 28, 2022: Agenda 2022-09-28 (pdf): Meeting Recording
- September 21, 2022: Cancelled (please review IOTech's threat model PR)
- September 14, 2022: Agenda 2022-09-14 (pdf): Meeting Recording
- September 7, 2022: Agenda 2022-09-07 (pdf): Meeting Recording
- August 31, 2022: Agenda 2022-08-31 (pdf): Meeting Recording
- August 24, 2022: Cancelled (no topics for today)
- August 17, 2022: Agenda 2022-08-17 (pdf): Meeting Recording
- August 10, 2022: Cancelled (chair on vacation)
- August 3, 2022: Agenda 2022-08-03 (pdf): Meeting Recording
- July 27, 2022: Cancelled (no topics for today)
- July 20, 2022: Cancelled (no topics for today)
- July 13, 2022: Agenda 2022-07-13 (pdf): Meeting Recording
- July 6, 2022: Cancelled due to conflict in chair's schedule
- June 29, 2022: Agenda 2022-06-29 (pdf): Meeting Recording
- June 22, 2022: Cancelled due to chair's planned vacation
- June 15, 2022: Agenda 2022-06-15 (pdf): Meeting Recording
- June 8, 2022: Cancelled due to conflict in chair's schedule
- June 1, 2022: Cancelled due to conflict in chair's schedule
- May 25, 2022: Agenda 2022-05-25 (pdf): Meeting Recording
- May 18, 2022: Cancelled for Levski planning conference
- May 11, 2022: Agenda 2022-05-11 (pdf): Meeting Recording - guest speaker Phillip Griffiths & Clint Dovholuk from NetFoundry
- May 4, 2022: Cancelled due to lack of quorum
- April 27, 2022: Agenda 2022-04-27 (pdf): Meeting Recording
- April 20, 2022: Cancelled for Levski prewire meeting
- April 13, 2022: Agenda 2022-04-13 (pdf): Meeting Recording
- April 6, 2022: Agenda 2022-04-06 (pdf): Meeting Recording
- March 30, 2022: Agenda 2022-03-30 (pdf): Meeting Recording
- March 23, 2022: Cancelled
- March 16, 2022: Agenda 2022-03-16 (pdf): Meeting Recording
- March 9, 2022: Agenda 2022-03-09 (pdf): Meeting Recording
- March 2, 2022: Agenda 2022-03-02 (pdf): Meeting Recording
- February 23, 2022: Agenda 2022-02-23 (pdf): Meeting Recording
- February 16, 2022: Cancelled due to lack of discussion topics
- February 9, 2022: Cancelled due to lack of discussion topics
- February 2, 2022: Agenda 2022-02-02 (pdf): Meeting Recording
- January 26, 2022: Cancelled due to meeting conflict
- January 19, 2022: Agenda 2022-01-19 (pdf): Meeting Recording
- January 12, 2022: Cancelled due to lack of agenda topics; will meet next week
- January 5, 2022: Agenda 2022-01-05 (pdf): Meeting Recording
- December 29, 2021: Cancelled for holidays
- December 22, 2021: Cancelled for holidays
- December 15, 2021: Agenda 2021-12-15 (pdf): Meeting Recording
- December 8, 2021: Agenda 2021-12-08 (pdf): Meeting Recording
- December 1, 2021: Agenda 2021-12-01 (pdf): Meeting Recording
- November 24, 2021: Cancelled for holidays
- November 17, 2021: Agenda 2021-11-17 (pdf): Meeting Recording
- November 10, 2021: Agenda 2021-11-10 (pdf): Meeting Recording
- November 3, 2021: Cancelled. See Kamakura Planning
- October 27, 2021: Cancelled
- October 20, 2021: Agenda 2021-10-20 (pdf): Meeting Recording
- October 13, 2021: Agenda 2021-10-13 (pdf): Meeting Recording
- October 6, 2021: Agenda 2021-10-06 (pdf): Meeting Recording
- September 29, 2021: Agenda 2021-09-29 (pdf): Meeting Recording
- September 22, 2021: Cancelled
- September 15, 2021: Agenda 2021-09-15 (pdf): Meeting Recording
- September 8, 2021: Agenda 2021-09-08 (pdf): Meeting Recording
- September 1, 2021: Agenda 2021-09-01 (pdf): Meeting Recording
- August 25, 2021: Agenda 2021-08-25 (pdf): Meeting Recording
- August 18, 2021: Agenda 2021-08-18 (pdf): Meeting Recording
- August 11, 2021: Cancelled
- August 4, 2021: Agenda 2021-08-04 (pdf): Meeting Recording
- July 28, 2021: Agenda 2021-07-28 (pdf): Meeting Recording
- July 21, 2021: Agenda 2021-07-14 (pdf); Meeting Recording
- July 14, 2021: Agenda 2021-07-04 (pdf); Meeting Recording
- July 7, 2021: Cancelled
- June 30, 2021: Cancelled
- June 23, 2021: Cancelled due to Jakarta virtual F2f
- June 16, 2021: Security WG Meeting 6_16_2021.docx; Meeting Recording
- June 9, 2021: Security WG Meeting 6_9_2021.docx; Meeting Recording - includes demo of LFX Security from David Deal (LF)
- June 2, 2021: Security WG Meeting 06-02-2021; Meeting Recording
- May 26, 2021: Security WG Meeting 05-26-2021; Meeting Recording
- May 19, 2021: Security WG Meeting 05-19-2021; Meeting Recording
- May 12, 2021: Security WG Meeting 05-12-2021; Meeting Recording
- May 5, 2021: Security WG Meeting 05-05-2021; Meeting Recording
- April 28, 2021: Security WG Meeting 04-28-2021; Meeting Recording
- April 21, 2021: Meeting Recording
- April 14, 2021: Security WG Meeting 4-14-2021; Meeting Recording
- April 7, 2021: Security WG Meeting 4-7-2021; Meeting Recording
- March 31, 2021: Security WG Meeting 03-31-2021; Meeting Recording
- March 24, 2021: Security WG Meeting 03-24-2021Meeting Recording
- March 17, 2021: Security WG Meeting 03-17-2021; Meeting Recording
- March 10, 2021: Security WG Meetin 03-10-2021; Meeting Recording
- March 3, 2021: Security WG Meeting 03-03-2021; Meeting Recording
- February 24, 2021: Security WG Meeting 02-24-2021; Meeting Recording
- February 17, 2021: Meeting Recording
- February 10, 2021: Security WG Meeting 2-10-2021; Meeting Recording
- February 3, 2021: Security WG Meeting 2-3-2021; Meeting Recording
- January 27, 2021: No meeting
- January 20, 2021: Security WG Meeting 01-20-2021; Meeting Recording
- January 13, 2021: Security WG Meeting 01-13-2021; Meeting Recording
- January 6, 2021: Security WG Meeting 01-06-2021; Meeting Recording
- December 16, 2020: Security WG Meeting 16-12-2020; Meeting Recording
- December 9, 2020: Security WG Meeting 9-12-2020; Meeting Recording
- December 2, 2020: Security WG Meeting 2-12-2020; Meeting Recording
- November 18, 2020: Security WG Meeting 11-18-2020 Meeting Recording
- November 5, 2020: Meeting Recording (Extra meeting to develop Security tasks/priority list for Ireland)
- November 4, 2020: Meeting Recording
- October 28, 2020: Meeting Recording
- October 21, 2020: Security WG Meeting 10-21-2020; Meeting Recording
- September 30, 2020: Security WG Meeting 09-30-2020; Meeting Recording
- September 23, 2020: Security WG Meeting 09-23-2020; Meeting Recording
- September 9, 2020: Security WG Meeting 09-09-2020; Meeting Recording
- September 2, 2020: Security WG Meeting 09-02-2020; Meeting Recording
- August 26, 2020: Security WG Meeting 08-26-2020; Meeting Recording
- August 19, 2020:Security WG Meeting 08-19-2020; Meeting Recording
- August 12, 2020: Security WG Meeting 08-12-2020; Meeting Recording
- August 5, 2020: Security WG Meeting 08-05-2020; Meeting Recording
- July 29, 2020: Security WG Meeting 07-29-2020; Meeting Recording
- July 22, 2020: Security WG Meeting 07-22-2020; Meeting Recording
- July 15, 2020: Security WG Meeting 07-15-2020; Meeting Recording
- July 8, 2020: Security WG Meeting 07-08-2020; Meeting Recording
- June 24, 2020: Security WG Meeting 06-24-2020; Meeting Recording
- June 17, 2020: Meeting Minutes; Meeting Recording
- June 10, 2020: Meeting Minutes; Meeting Recording (Password: 8A^&HL69)
- June 3, 2020: Meeting Minutes; Meeting Recording (Password: 1Z=CI?w^)
- May 20, 2020: Meeting Minutes; Meeting Recording (Password: 1D%7$j&2)
- May 13, 2020: Meeting Minutes; Meeting Recording (Password: 6U#=Q%?^)
- May 12, 2020: Edgex-Arm integration kick-off meeting
- April 22, 2020: Meeting Minutes; Meeting Recording (Password: 6I*?$%05)
- April 15, 2020: Meeting Minutes; Meeting Recording (Access Password: y6&2?H4h)
- April 8, 2020:Meeting Minutes; Meeting Recording
- March 25, 2020: Meeting Minutes; Meeting Recording
Hanoi Release(all - for latest update of Hanoi Release Planning doc, please go here)
- March 18, 2020: Meeting Minutes; Meeting Recording
- March 11, 2020: Meeting Minutes; Meeting Recording
- March 4, 2020: Meeting Minutes; Meeting Recording
- February 26, 2020: Meeting Minutes; Meeting Recording
- February 19, 2020: Meeting Minutes; Meeting Recording
- February 12, 2020: Meeting Minutes; Meeting Recording
- February 5, 2020: Meeting Minutes; Meeting Recording
- Proposal to secure API V2 ( by Bryon Nevis) : EdgeX API 2.0 security
- January 29, 2020: Meeting Minutes; Meeting Recording
- January 22, 2020: Meeting Minutes; Meeting Recording
- January 15, 2020: Meeting Minutes; Meeting Recording
- January 8, 2020: Meeting Minutes; Meeting Recording
- December 18, 2019: Meeting Minutes; Meeting Recording
- December 11, 2019: Meeting Minutes; Meeting Recording
- December 4, 2019: Meeting Minutes; Meeting Recording
- November 20, 2019: Meeting Minutes; Meeting Recording
- November 13, 2019: Meeting Minutes; Meeting Recording
- October 30, 2019: Meeting cancelled
- October 23, 2019: Meeting Minutes; Meeting Recording
- October 16, 2019: Meeting Minutes; Meeting Recording
- October 2, 2019: Meeting Minutes; Meeting Recording
- September 25, 2019: Meeting Minutes; Meeting Recording
- September 18, 2019: Meeting Minutes; Meeting Recording
- September 11, 2019: Meeting Minutes; Meeting Recording
- September 4, 2019: Meeting Minutes; Meeting Recording
- August 28, 2019: Meeting Minutes; Meeting Recording
- August 14, 2019: Meeting Recording
- August 7, 2019: Meeting Minutes; Meeting Recording
- July 24, 2019: Meeting Minutes; Meeting Recording
- July 17, 2019: Meeting Minutes;SAST Slides;Meeting Recording
- July 10, 2019: Meeting Minutes; Meeting Recording
- June 26, 2019: Meeting Minutes Meeting Recording
- June 19, 2019: Meeting Minutes; Meeting Recording
- June 12, 2019: Meeting Minutes; Meeting Recording
- June 5, 2019: Meeting Minutes; Meeting Recording
- May 29, 2019: Meeting Minutes; Meeting Recording
- May 22, 2019: Meeting Minutes; Meeting Recording
- May 15, 2019: Meeting Minutes; Meeting Recording
- May 8, 2019: Meeting Recording
- April 24. 2019: Meeting Recording
- April 17, 2019: Meeting Minutes; EdgeX Process for Addressing Security Issues-v5.pdf; EdgeX Process for Addressing Security Issues-v5.docx; Protecting EdgeX Secrets-v7.pdf; Protecting EdgeX Secrets-v7.docx; Meeting Recording
- April 10, 2019: Meeting Minutes; Protecting EdgeX Secrets-v7.pdf; Protecting EdgeX Secrets-v7.docx; Meeting Recording
- Intel (Bryon and Jim) roadmap doc to explore; https://docs.google.com/presentation/d/17W7MghqrZUu5sIHnS4F6GtOYkPWObJP-e9Tieh2qbRI/edit?pli=1#slide=id.p
- Threat Model: https://github.com/bnevis-i/security-secret-store/pull/1
- Tingyu's design for Vault initialization program and Mongo init script: Security Store Service for MongoDB microservice.docx
- April 3, 2019: Meeting Minutes; Documents covered and requesting review: Protecting EdgeX Secrets-v6.pdf Protecting EdgeX Secrets-v6.docx EdgeX Process for Addressing Security Issues-v4.pdf; EdgeX Process for Addressing Security Issues-v4.docx; Meeting Recording
- Intel's Exploration of EdgeX security (Threat Modeling and what's next) presentation: https://docs.google.com/presentation/d/17W7MghqrZUu5sIHnS4F6GtOYkPWObJP-e9Tieh2qbRI/edit?pli=1#slide=id.g556c569946_0_6
- Intel's Threat Model for Secret Store: https://github.com/bnevis-i/security-secret-store/pull/1
- March 27, 2019:Meeting Minutes ; Meeting Recording; Documents reviewed: Protecting EdgeX Secrets-v4.pdf EdgeX Process for Addressing Security Issues-v3.pdf
- March 13 & 20th, 2019: Canceled
- March 6, 2019:Minutes; Meeting Recording
- February 27, 2019: Canceled
- February 20, 2019: Meeting Recording
- February 13, 2019: Canceled
- February 6, 2019: Canceled
- January 30, 2019: Meeting Recording
- January 16, 2019: Meeting Recording
- January 9, 2019: Meeting Recording
- December 12, 2018: Meeting Recording
- December 5, 2018: Slides and Meeting Recording
- November 28, 2018: Slides and Meeting Recording
- November 21, 2018: Canceled
- November 14, 2018: Slides and Meeting Recording
- November 7, 2018: Slides and Meeting Recording
- October 31, 2018: Canceled
- October 10, 2018: Slides and Meeting Recording
- September 26, 2018: Meeting Recording
- September 19, 2018: Meeting Recording
- September 12, 2018: Meeting Recording
- September 5, 2018: Meeting Recording
- August 31, 2018: Meeting Recording (HRoT working session); Link to TPM specs and policies
- August 29, 2018: Meeting Recording
- August 22, 2018: Meeting Recording
- August 1, 2018: Meeting Recording
- July 25, 2018: Meeting Recording
- July 11, 2018: Meeting Recording
- June 27, 2018: Meeting Recording
- June 20, 2018: Meeting Recording
- June 13, 2018: Meeting Recording
- June 6, 2018: Cancelled since F2F meeting is occurring this week.
- May 30, 2018: Slides and Meeting Recording
- May 23, 2018: Slides and Meeting Recording
- May 16, 2018: Slides and Meeting Recording
- May 9, 2018: Slides and Meeting Recording
- May 2, 2018: Slides and Meeting Recording
- April 25, 2018: Cancelled
- April 18, 2018: Cancelled
- April 11, 2018: Slides and Meeting Recording
- April 04, 2018: Slides and Meeting Recording
- March 28, 2018: Cancelled
- March 21, 2018: Slides and Meeting Recording
- March 14, 2018: Slides and Meeting Recording
- IIC Endpoint Security Best Practices Final Mar 2018 document: http://www.iiconsortium.org/pdf/Endpoint_Security_Best_Practices_Final_Mar_2018.pdf
- Snapshot of Secure Proxy + Authentication Options for EdgeX
- Snapshot of EdgeX-simple-jwt-auth--DRAFT
- March 7, 2018: Slides and Meeting Recording
- February 28, 2018: Slides and Meeting Recording
- February 21, 2018: Slides and Meeting Recording
- February 14, 2018: Slides and Meeting Recording
- February 7, 2018: Slides and Meeting Recording
- January 31, 2018: Meeting Recording
- January 24, 2018: Slides and Meeting Recording
- January 10, 2018: Meeting Recording
- January 3, 2018: Slides and Meeting Recording
- December 20, 2017: Meeting Recording
- December 13, 2017: Slides and Meeting Recording
- November 29, 2017: Slides and Meeting Recording
- November 15, 2017: Slides and Meeting Recording
- November 8, 2017: Meeting Recording
- November 1, 2017: Slides and Meeting Recording
- October 25, 2017: Slides and Meeting Recording
- October 11, 2017: Slides and Meeting Recording
- September 27, 2017: Slides and Meeting Recording
- September 20, 2017: Slides and Meeting Recording
- September 13, 2017: Slides and Meeting Recording
- September 6, 2017 Meeting - We reviewed the final outcome of the F2F meeting. Please click on this link to see the outcome and final slide deck: Link
- August 29 + 30: F2F Meeting - See 29 and 30 August 2017: Palo Alto, CA
- August 23: Meeting Recording
- August 16, 2017: Slides
- August 9, 2017: Slides
- July 7, 2017: Slides; Notes and Actions; Meeting Recording
- June 1-2, 2017: Slides
Documents
- Vault master key protection-DRAFT-v0.5.pdf
- Hardware-based Secure Storage Design - DRAFT
- Ongoing work in online document @ https://docs.google.com/document/d/1MsTNdwtZp3zA-nPhCC3COakL3e5mrhJuFByy6ja5OxU/edit?ts=5c1a5e4. Request access at this link.
- EdgeX Security Roadmap for Delhi, Edinburgh, Fuji and beyond
- Security Working Group Google Drive Folder
- Consolidated Feature Backlog Document
- FuseSecurityRequirements-Jan2017.docx