Open Stack

hi OSSG,

I talked with some of you at the last OSSG meeting about assistance in getting the Sahara project more in-line with best OpenStack security practices and specifically about our security related session at the design summit.

I'm writing today to followup on that conversation with a link to the etherpad I have started for topics[1], and to ask if there are other areas we should be looking at?

Also, I am interesting in learning more about the various vectors we should be studying from the Sahara perspective to help move towards a more secure system. I have a moderate knowledge of general computer security and I am working through the OpenStack security guide. Ultimately what I would love to do is assist the OSSG team with a security audit and/or high-level threat analysis for Sahara.

I welcome comments/criticism on the topics in the etherpad, and I would love to hear more thoughts on areas that we might investigate.

regards,
mike

[1]: https://etherpad.openstack.org/p/kilo-summit-sahara-security-session