<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.hoenzb
{mso-style-name:hoenzb;}
span.E-MailFormatvorlage18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=DE link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-US>Hi folks,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>I wanted to discuss the blueprint in the QA meeting before opening it.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Here it is:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="https://blueprints.launchpad.net/tempest/+spec/fuzzy-test">https://blueprints.launchpad.net/tempest/+spec/fuzzy-test</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>I will collect work items in Etherpad during the day: <o:p></o:p></span></p><p class=MsoNormal><a href="https://etherpad.openstack.org/p/bp_fuzzy_test"><span lang=EN-US>https://etherpad.openstack.org/p/bp_fuzzy_test</span></a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-US>GSoC sound awesome, pls keep me updated on that.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Don’t hesitate to contact me directly on IRC (freenode / mkoderer)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>I am already working on the first patch that allows multiple record generators. My plan is to allow make it configurable whether it’s simply a random generator or a pattern based generator.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Regards<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Marc <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>Von:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Sriram Subramanian [mailto:sriram@sriramhere.com] <br><b>Gesendet:</b> Freitag, 14. Februar 2014 08:51<br><b>An:</b> Bryan D. Payne<br><b>Cc:</b> Koderer, Marc; openstack-security@lists.openstack.org; dkranz@redhat.com<br><b>Betreff:</b> Re: [Openstack-security] Fuzzy test framework in Tempest<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>FYI: I felt fuzzing could be an interesting project for <a href="https://wiki.openstack.org/wiki/GSoC2014#Mentors">GSoC</a>, so proposed it as one of the project ideas. I am not sure how many of those projects would get selected; in case it gets selected, hey, we get an intern!<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Marc - would look for your bp! <o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Thanks!<o:p></o:p></p></div></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal>On Thu, Feb 13, 2014 at 11:43 PM, Sriram Subramanian <<a href="mailto:sriram@sriramhere.com" target="_blank">sriram@sriramhere.com</a>> wrote:<o:p></o:p></p><div><p class=MsoNormal>Thanks Bryan!<o:p></o:p></p></div><div><div><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal>On Thu, Feb 13, 2014 at 9:35 PM, Bryan D. Payne <<a href="mailto:bdpayne@acm.org" target="_blank">bdpayne@acm.org</a>> wrote:<o:p></o:p></p><div><p class=MsoNormal>We left it with Marc needing to take the next step, which will be to put together a blueprint for this. Once he has that in place, he'll let OSSG know and we can help him drive it forward.<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Marc, please let us know if I missed something.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Cheers,<o:p></o:p></p></div><div><p class=MsoNormal>-bryan<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div></div><div><div><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal>On Thu, Feb 13, 2014 at 8:08 PM, Sriram Subramanian <<a href="mailto:sriram@sriramhere.com" target="_blank">sriram@sriramhere.com</a>> wrote:<o:p></o:p></p><div><p class=MsoNormal>Bryan/ Marc,<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Apologies I missed the OSSG meeting. Looks like this was discussed last week, but I didn't see any action items or updates in the logs. Could one of you update please?<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>thanks,<o:p></o:p></p></div><div><p class=MsoNormal>-Sriram<o:p></o:p></p></div></div><div><div><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal>On Wed, Feb 5, 2014 at 9:57 AM, Bryan D. Payne <<a href="mailto:bdpayne@acm.org" target="_blank">bdpayne@acm.org</a>> wrote:<o:p></o:p></p><div><p class=MsoNormal>Marc,<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>This is certainly of interest to OSSG. There were some people talking about doing security testing before the last summit, but I haven't heard much about that recently. Please do join us for the meeting tomorrow and we can discuss in some more detail. I'll see if I can encourage the other parties to participate as well.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Cheers,<o:p></o:p></p></div><div><p class=MsoNormal>-bryan<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div></div><div><div><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal>On Wed, Feb 5, 2014 at 6:54 AM, Koderer, Marc <<a href="mailto:m.koderer@telekom.de" target="_blank">m.koderer@telekom.de</a>> wrote:<o:p></o:p></p><p class=MsoNormal>Hello Security Team,<br><br>David and I are currently working on an automated framework for negative<br>testing in Tempest. This frameworks generates tests out of json schema<br>definitions (see <a href="https://review.openstack.org/#/c/64733/" target="_blank">https://review.openstack.org/#/c/64733/</a> and<br><a href="https://blueprints.launchpad.net/tempest/+spec/negative-tests" target="_blank">https://blueprints.launchpad.net/tempest/+spec/negative-tests</a>).<br><br>During discussion we came to the idea that it would be quite easy to build a<br>security fuzzy test framework out of existing pieces in Tempest. If we'd run<br>the negative tests in our stress test framework that launches a certain number<br>of concurrent worker processes. At the end of a run we could use Tempest again<br>to validate that all services are up and running.<br><br>Is this topic potentially interesting for this group?<br>I saw on your launchpad task board that your are planning something similar:<br> "Develop stress tests that can be integrated with current testing"<br>Did somebody already spend some effort in that area?<br><br>I'd like to join your meeting tomorrow and discuss about it.<br><br>Regards<br>Marc<br><br>DEUTSCHE TELEKOM AG<br>Digital Business Unit, Cloud Services (P&I)<br>Marc Koderer<br>Cloud Technology Software Developer<br>T-Online-Allee 1, 64211 Darmstadt<br>E-Mail: <a href="mailto:m.koderer@telekom.de" target="_blank">m.koderer@telekom.de</a><br><a href="http://www.telekom.com" target="_blank">www.telekom.com</a><br><br>LIFE IS FOR SHARING.<br><br>DEUTSCHE TELEKOM AG<br>Supervisory Board: Prof. Dr. Ulrich Lehner (Chairman)<br>Board of Management: René Obermann (Chairman),<br>Reinhard Clemens, Niek Jan van Damme, Timotheus Höttges,<br>Dr. Thomas Kremer, Claudia Nemat, Prof. Dr. Marion Schick<br>Commercial register: Amtsgericht Bonn HRB 6794<br>Registered office: Bonn<br><br>BIG CHANGES START SMALL – CONSERVE RESOURCES BY NOT PRINTING EVERY E-MAIL.<br>_______________________________________________<br>Openstack-security mailing list<br><a href="mailto:Openstack-security@lists.openstack.org" target="_blank">Openstack-security@lists.openstack.org</a><br><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security</a><o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p></div></div></div><p class=MsoNormal style='margin-bottom:12.0pt'><br>_______________________________________________<br>Openstack-security mailing list<br><a href="mailto:Openstack-security@lists.openstack.org" target="_blank">Openstack-security@lists.openstack.org</a><br><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security</a><o:p></o:p></p></div><p class=MsoNormal><br><br clear=all><o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div></div></div><p class=MsoNormal><span style='color:#888888'>-- <o:p></o:p></span></p><div><p class=MsoNormal><span style='color:#888888'>Thanks,<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='color:#888888'>-Sriram<o:p></o:p></span></p></div></div></div><p class=MsoNormal><o:p> </o:p></p></div></div></div></div><p class=MsoNormal><br><br clear=all><o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div></div></div><p class=MsoNormal><span class=hoenzb><span style='color:#888888'>-- <o:p></o:p></span></span></p><div><p class=MsoNormal><span style='color:#888888'>Thanks,</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='color:#888888'>-Sriram<o:p></o:p></span></p></div></div></div><p class=MsoNormal><br><br clear=all><o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal>-- <o:p></o:p></p><div><p class=MsoNormal>Thanks,<o:p></o:p></p></div><div><p class=MsoNormal>-Sriram<o:p></o:p></p></div></div></div></div></body></html>