...
Goal of this challenge is to assess a critical part of the eduGAIN communication infrastructure available to the eduGAIN security team. In this first round the security contact addresses of Participants (see below) were tested. The security contacts email addresses were retrieved from the eduGAIN Database using the APIs published on the technical site. The procedure used to retrieve the email addresses is available on the GEANT gitlab:
...
eduGAIN participants that didn't communicate their security contacts were excluded from the challenge.
Timing
...
Challenge timeline
- 2020-09-15 Communication challenge proposal presented to the eduGAIN Steering Group
...
- meeting.
- 2020-12-04 Announcement of the challenge dates to the eduGAIN Steering Group via the eSG mailing list.
...
- 2020-12-15 Start of the challenge.
- 2020-12-23 End of the challenge.
- 2020-12-23 Public report available (this wiki)
...
- .
What was assessed
Besides the validity of the available contact addresses also the reaction time was measured. This information was collected to be used as input for a later discussion on response times. The community would need to define target reaction times, which are regarded to be useful to be used in security incident coordination situations.
Results
Validity of the contact addresses
...
The participants that have not reacted to the challenge mail will be contacted by eduGAIN support via alternative channels and a solution for the communication issues will be implemented and tested.