<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Hi,<div><br></div><div>At OSSG, we are currently doing Threat Modelling of OpenStack and as a starter</div><div>we have already performed initial work for Keystone. Work on Nova has also started.</div><div>The current status of the work is located at</div><div><br></div><div><a href="https://wiki.openstack.org/wiki/Security/Threat_Analysis">https://wiki.openstack.org/wiki/Security/Threat_Analysis</a> </div><div><a href="https://github.com/shohel02/OpenStack_Threat_Modelling.git">https://github.com/shohel02/OpenStack_Threat_Modelling.git</a></div><div><a rel="nofollow" class="external free" href="https://github.com/criscad/OpenStack_Threat_Modelling.git" style="color: rgb(0, 136, 204); text-decoration: none; cursor: pointer; background-image: url(https://wiki.openstack.org/w/skins/strapping/images/lock-icon.png); background-color: rgb(255, 255, 255); padding-right: 13px; font-family: 'Arial Unicode MS', Arial, sans-serif; font-size: 14px; line-height: 20px; background-position: 100% 50%; background-repeat: no-repeat no-repeat;">https://github.com/criscad/OpenStack_Threat_Modelling.git</a></div><div><br></div><div>In the mid review starting at July 14th, we will go through threat modelling process for Openstack projects,</div><div>and for Keystone we go through a component break down and enumerate possible threats </div><div>and attack vectors. </div><div><br></div><div><div>Interested? Put your name in etherpad Threat Modelling section. We are especially hoping to</div><div>get support and participation from Keystone core developers . I think there are some in this</div><div>mailing list too :)</div><div><br></div><div><a href="https://etherpad.openstack.org/p/ossg-juno-meetup">https://etherpad.openstack.org/p/ossg-juno-meetup</a></div></div><div><br></div><div>Cheers,</div><div>Shohel</div><div><br></div></body></html>