You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 73 Next »


Mature Blueprints

No.Project NamePTL
1Radio Edge Cloud (REC)
Paul Carver
2

Connected Vehicle Blueprint

Tao Wang
3

IEC Type 4: AR/VR oriented Edge Stack for Integrated Edge Cloud (IEC) Blueprint Family

Bart Dong
4The AI Edge: Federated ML application at edge

Enzo Zhang

5IEC Type 3: Android cloud native applications on Arm servers in edge for Integrated Edge Cloud (IEC) Blueprint Family

Davy Zhang

6Smart Cities

Olivier Bernard

Blueprints Participating Maturity Review

No.Project NamePTLMain CommitterSelf-Certification Page

Documentation Sub-Committee

Ike Alisson

Security Logs (Vuls, Lynis, KubeHunter, no need CD log)

Security Sub-Committee

Randy Stricklin Daniil Egranov Wenhui Zhang

Process Sub-Committee

Biswajit De

haihui wang

TSC

Tina Tsou Oleg Berzin

1

The AI Edge: School/Education Video Security Monitoring

Yu, Liya

Maturity Review Certification of Video Security Monitoring Blueprint

Maturity Review performed over e-mail on May 5th, 2021. Link to the overview: 2021 yearhttps://nexus.akraino.org/content/sites/logs/baidu/job/security_scan/aiedge/4/result/


2

IEC Type 2 for Integrated Edge Cloud (IEC) Blueprint Family


Trevor Tao

ashvin kumar

Vinothini Raju Muhammad Hamza

Integration Edge Cloud Type 1 and Type 2 Release 2 Maturity Review Certification





3

The AI Edge: Intelligent Vehicle-Infrastructure Cooperation System(I-VICS)

Yu, Liya

Hao Zhongwang


Maturity Review Certification of I-VICS






4IEC Type 5: SmartNIC for Integrated Edge Cloud (IEC) Blueprint Family

jin peng

Leo Li

Maturity Review Certification of SmartNIC

Documentation Review Meeting notes


https://nexus.akraino.org/content/sites/logs/socnoc/job/security_scan/

 

Vuls.log with the test results is missing

 

Lynis failures:

Performing test ID BOOT-5122 (Check for GRUB boot password): NOT PRESENT IN THIS LOG 

Performing test ID BOOT-5184 (Check permissions for boot files/scripts): FAILED

Test: Checking presence /var/run/reboot-required.pkgs: FAILED

Performing test ID AUTH-9228 (Check password file consistency with pwck): FAILED

Performing test ID AUTH-9229 (Check password hashing methods): NOT PRESENT IN THIS LOG

Test: Checking SHA_CRYPT_{MIN,MAX}_ROUNDS option in /etc/login.defs: NOT PRESENT IN THIS LOG

Test: Checking PASS_MAX_DAYS option in /etc/login.defs: FAILED

Test: collecting accounts which have an expired password (last day changed + maximum change time): FAILED

Performing test ID AUTH-9328 (Default umask values): FAILED

Performing test ID FILE-6368 (Checking ACL support on root file system): FAILED

Performing test ID USB-2000 (Check USB authorizations): NOT PRESENT IN THIS LOG

Performing test ID USB-3000 (Check for presence of USBGuard): FAILED

Performing test ID PKGS-7370 (Checking for debsums utility): NOT PRESENT IN THIS LOG

Performing test ID PKGS-7388 (Check security repository in apt sources.list file): NOT PRESENT IN THIS LOG

Performing test ID SSH-7408 (Check SSH specific defined options): FAILED

Test: Checking AllowTcpForwarding in /tmp/lynis.: FAILED

Test: Checking ClientAliveCountMax in /tmp/lynis.: FAILED

Test: Checking ClientAliveInterval in /tmp/lynis.: FAILED

Test: Checking FingerprintHash in /tmp/lynis.: FAILED

Test: Checking IgnoreRhosts in /tmp/lynis.: FAILED

Test: Checking MaxAuthTries in /tmp/lynis.: FAILED

Test: Checking MaxSessions in /tmp/lynis.: FAILED

Test: Checking StrictModes in /tmp/lynis.: FAILED

Test: Checking TCPKeepAlive in /tmp/lynis.: FAILED

Performing test ID SSH-7440 (Check OpenSSH option: AllowUsers and AllowGroups): NOT PRESENT IN THIS LOG

Test: checking for file /etc/network/if-up.d/ntpdate: FAILED

Performing test ID KRNL-6000 (Check sysctl key pairs in scan profile): FAILED

Test: Check if one or more compilers can be found on the system: FAILED


Kube-Hunter failures:

KHV002 - Kubernetes version disclosure
Disable --enable-debugging-handlers kubelet flag.



5








Records of Details

No.Project NamePTLMain CommitterSelf-Certification Page

Documentation Sub-Committee

Ike Alisson

Logs (Vuls, Lynis, KubeHunter)

Security Sub-Committee

Randy Stricklin Daniil Egranov Wenhui Zhang

Process Sub-Committee

Biswajit De

TSC

Tina Tsou Oleg Berzin

1

The AI Edge: Federated ML application at edge

Enzo Zhang

haihui wang

Maturity Review Certification of Federated ML Application At Edge Blueprint

Maturity Review Certification of Federated ML Application At Edge Blueprint performed over mail on 01/04 & stored at Documentation Sub-committee reviews for 2022. It is recommended to Akraino TSC to deem the maturity requirements for Documentation to "mature" level as fulfilled and accept the BP graduation request to "Mature" level.


2/28/2022 Update

https://nexus.akraino.org/content/sites/logs/fate/fml/mat4/

  • 1/3/2022 Emailed Haihui Wang: 

    AI Edge- Federated ML blueprint has passed the Incubation phase in Release 5 it also meets the Maturity requirements for Vuls.  However, The Lynis test requirements are more stringent for Maturity than Incubation.  The additional Lynis Maturity criteria can be found at https://wiki.akraino.org/pages/viewpage.action?pageId=11996301#StepsToImplementSecurityScanRequirements-VulsIncubationandMaturityPASSFAIL in the ‘Lynis Maturity:  PASS/FAIL Criteria, v1.0’ section.  Please run the Lynis tests against the AI Edge – Federated ML blueprint and correct issues so that all Maturity tests pass.  Once all Maturity tests pass please send the lynis.log output file to the Akraino security team for review.

  • 1/14/2022 Emailed Haihui Wang:

    Below is the analysis that our maturity check script returned for the lynis log for the AI Edge – Federate ML blueprint.  All tests that ‘FAILED’ need to be corrected to be approved for maturity, there are more tests that failed than the one that you listed. 

    For the test ID AUTH-9229 that you described, would you be able to increase the ‘rounds’ to a value greater than 5000 and expire passwords so that they encrypt with new values?
Approved by Process Sub-Commitee.
2IEC Type 3: Android cloud native applications on Arm servers in edge for Integrated Edge Cloud (IEC) Blueprint Family

Davy Zhang


Maturity Review Certification of Android Cloud

Documentation Review Meeting notes

https://nexus.akraino.org/content/sites/logs/ysemi/job/v2/lynis_v2/lynis/

https://nexus.akraino.org/content/sites/logs/ysemi/job/v2/lynis_v3/lynis/

  

 

Approved by Security Sub-Committee.

 

Approved by Process Sub-Commitee.

Approved  by TSC
3Smart Cities

Olivier Bernard

Jack Liu

Jason Wen

Maturity Review Certification of Smart CitiesDocumentation Review Meeting notes

 

https://nexus.akraino.org/content/sites/logs/myais/bluval/6/


 

Approved by Security Sub-Committee.


 

Approved by  Process Sub-Commitee.













  • No labels