Skip to end of metadata
Go to start of metadata


Mature Blueprints

Blueprints Participating Maturity Review

No.Project NamePTLMain CommitterSelf-Certification Page

Documentation Sub-Committee

Ike Alisson

Logs (Vuls, Lynis, KubeHunter)

Process Sub-Committee

Biswajit De

haihui wang

1

The AI Edge: School/Education Video Security Monitoring


Maturity Review Certification of Video Security Monitoring Blueprint

Maturity Review performed over e-mail on May 5th, 2021. Link to the overview: 2021 yearhttps://nexus.akraino.org/content/sites/logs/baidu/job/security_scan/aiedge/4/result/


2

IEC Type 2 for Integrated Edge Cloud (IEC) Blueprint Family


Integration Edge Cloud Type 1 and Type 2 Release 2 Maturity Review Certification





3

The AI Edge: Intelligent Vehicle-Infrastructure Cooperation System(I-VICS)

Maturity Review Certification of I-VICS






4IEC Type 5: SmartNIC for Integrated Edge Cloud (IEC) Blueprint Familyjin pengMaturity Review Certification of SmartNIC

Documentation Review Meeting notes

socnoc - Akraino - Akraino Confluence


5IEC Type 3: Android cloud native applications on Arm servers in edge for Integrated Edge Cloud (IEC) Blueprint Family
Maturity Review Certification of Android Cloud

Documentation Review Meeting notes

https://nexus.akraino.org/content/sites/logs/ysemi/job/v2/lynis_v3/lynis/

  

 

Approved by Security Sub-Committee.

 

Approved by Process Sub-Commitee.

will be reviewed within TSC
6

Smart Cities




https://nexus.akraino.org/content/sites/logs/myais/bluval/3/

 

https://nexus.akraino.org/content/sites/logs/myais/bluval/4/

fix lynis issue

 

https://nexus.akraino.org/content/sites/logs/myais/bluval/5/

Fix USB-3000 error;

It's because of different version of lynis, in the lynis.log,  SHA_CRYPT_MIN_ROUNDS was

Performing test ID AUTH-9230 (Check password hashing rounds)

Test: Checking SHA_CRYPT_{MIN,MAX}_ROUNDS option in /etc/login.defs


It test ok in the log.

 

 

Lynis:

Test: Checking presence /var/run/reboot-required.pkgs: FAILED
2022-06-29 02:14:09 Result: file /var/run/reboot-required.pkgs exists
2022-06-29 02:14:09 Result: reboot is needed, related to 1 packages
2022-06-29 02:14:09 Package: 1
2022-06-29 02:14:09 Result: /boot exists, performing more tests from here
2022-06-29 02:14:09 Result: found /boot/vmlinuz-4.15.0-188-generic
2022-06-29 02:14:09 Result: version derived from file name is '4.15.0-188-generic'
2022-06-29 02:14:09 Result: found version 4.15.0-188-generic
2022-06-29 02:14:09 Result: active kernel version 4.15.0-187-generic
2022-06-29 02:14:09 Result: reboot needed, as there is a difference between active kernel and the one on disk
2022-06-29 02:14:09 Result: /var/cache/apt/archives/ does not exist
2022-06-29 02:14:09 Warning: Reboot of system is most likely needed [test:KRNL-5830] [details:] [solution:text:reboot]

Test: Checking SHA_CRYPT_MIN_ROUNDS option in /etc/login.defs: NOT PRESENT IN THIS LOG

Please define both SHA_CRYPT_MIN_ROUNDS and SHA_CRYPT_MAX_ROUNDS

Performing test ID KRNL-6000 (Check sysctl key pairs in scan profile): FAILED
2022-06-29 02:14:51 Result: sysctl key net.ipv4.conf.all.forwarding has a different value than expected in scan profile. Expected=0, Real=1




Records of Details

No.Project NamePTLMain CommitterSelf-Certification Page

Documentation Sub-Committee

Ike Alisson

Logs (Vuls, Lynis, KubeHunter)

Process Sub-Committee

Biswajit De

4

The AI Edge: Federated ML application at edge

Maturity Review Certification of Federated ML Application At Edge Blueprint

Maturity Review Certification of Federated ML Application At Edge Blueprint performed over mail on 01/04 & stored at Documentation Sub-committee reviews for 2022. It is recommended to Akraino TSC to deem the maturity requirements for Documentation to "mature" level as fulfilled and accept the BP graduation request to "Mature" level.


2/28/2022 Update

https://nexus.akraino.org/content/sites/logs/fate/fml/mat4/

  • 1/3/2022 Emailed Haihui Wang: 

    AI Edge- Federated ML blueprint has passed the Incubation phase in Release 5 it also meets the Maturity requirements for Vuls.  However, The Lynis test requirements are more stringent for Maturity than Incubation.  The additional Lynis Maturity criteria can be found at https://wiki.akraino.org/pages/viewpage.action?pageId=11996301#StepsToImplementSecurityScanRequirements-VulsIncubationandMaturityPASSFAIL in the ‘Lynis Maturity:  PASS/FAIL Criteria, v1.0’ section.  Please run the Lynis tests against the AI Edge – Federated ML blueprint and correct issues so that all Maturity tests pass.  Once all Maturity tests pass please send the lynis.log output file to the Akraino security team for review.

  • 1/14/2022 Emailed Haihui Wang:

    Below is the analysis that our maturity check script returned for the lynis log for the AI Edge – Federate ML blueprint.  All tests that ‘FAILED’ need to be corrected to be approved for maturity, there are more tests that failed than the one that you listed. 

    For the test ID AUTH-9229 that you described, would you be able to increase the ‘rounds’ to a value greater than 5000 and expire passwords so that they encrypt with new values?
Approved by Process Sub-Commitee.

  • No labels