Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The current version of this CSIRT description document is available from the eduGAIN CSIRT WWW site; its URL is website, https://edugain.org/edugain-security/

...

Address

GEANT C/O eduGAIN CSIRT
Hoekenrode 3 
6th floor
1102 BR Amsterdam
The Netherlands

...

eduGAIN consists of Federations whose primarily goal is to provide authentication and authorisation services to the research and education community. The eduGAIN Service provides an infrastructure for establishing trusted communications between Entities, such as Identity and Service Providers, belonging to different Federations.

Please refer to the [eduGAIN Constituion Constitution] for further details: https://technical.edugain.org/doc/eduGAIN-Constitution-v3ter-web.pdf

For an up to date list of the current eduGAIN Participants you can refer to: https://technical.edugain.org/status

...

eduGAIN CSIRT supports the Traffic Light Protocol (TLP – see https://www.first.org/tlp/) [FIRST TLP] - information that comes in with the tags WHITE, GREEN, AMBER or RED will be handled appropriately.

...

The above form is based on the AARC Deliverable DNA3.2-Security Incident Response Procedure [AARC-DNA3.2]

Disclaimers

While every precaution will be taken in the preparation of information, notifications and alerts, eduGAIN CSIRT assumes no responsibility for errors or omissions, or for damages resulting from the use of the information contained within.

References

[eduGAIN Constitution] https://technical.edugain.org/doc/eduGAIN-Constitution-v3ter-web.pdf

[FIRST TLP] https://www.first.org/tlp

[eduGAIN-SIRH] https://wiki.geant.org/download/attachments/218464365/eduGAIN%20Security%20Incident%20Response%20Handbook-v1-eSG-feedback.pdf

[AARC-DNA3.2] https://aarc-project.eu/wp-content/uploads/2017/02/DNA3.2-Security-Incident-Response-Procedure-v1.0.pdf