...
The name of the group is eduGAIN Computer Security Incident Response Team (CSIRT)
Definitions
This document makes use of the Definitions described in the eduGAIN Constitution [eduGAIN-Constitution] and of the following additional ones:
Remove all the defintions already in eduGAIN Constitution.
| Word/Term | Definition |
|---|---|
| IdP | Identity Provider, a service that creates, maintains, and manages identity information for principals and provides authentication services to relying parties |
| SP | Service Provider, an organization (or part of an organization) that manages and delivers a service or services to customers |
| (Identity) Federation | https://wiki.geant.org/display/eduGAIN/Identity+Federations+and+eduGAIN |
| Federation Operator | https://wiki.geant.org/display/eduGAIN/Federation+Operators |
| CSIRT | Computer Security Incident Response Team |
| Entity | IdPs, SPs and Attribute Authorities (standalone) (AAs) |
| eduGAIN | The eduGAIN inter-federation service connects identity federations around the world, simplifying access to content, services and resources for the global research and education community. |
| eSG | eduGAIN Steering Group, the governing body of eduGAIN |
| Entity Security Contact | an entity mail address monitored by multiple individuals |
...
The group maintains a communication infrastructure to assure that all the relevant information is received by the relevant entities in eduGAIN.
That the information is processed and needed response actions are carried out is the responsibility of the entity and the hosting federation(s).
Constituency
eduGAIN-CSIRT provides incident response coordination for the entities organized in the federations participating in eduGAIN.
...
should we explicitly mention particular actions we would need to take in situations where we would need to take serious actions like suspending participants as a last resort to protect eduGAIN as such