Security Service Challenge (SSC)

This WIKI contains instructions, recommendations and suggestions that are relevant for the LCG/EGEE Security Service Challenge (SSC).

The objective

The goal of the LCG/EGEE Security Service Challenge, is to investigate whether sufficient information is available to be able conduct an audit trace as part of an incident response, and to ensure that appropriate communications channels are available.

Stages of the SSC

The SSC is executed in two stages:

1. Security Challenge targeting the principal site of each of the LCG/EGEE Regional Operation Centers (ROC);
2. Security Challenge targeting the individual sites in each ROC;

Roles

There are two principal roles in the execution of the SSC:

• The Test Operator (TOP), who submits the challenging job, issues the alert, escalates the alert as required and checks the response.
• The Security Contact of the target site, who receives and acknowledges the alert, makes the necessary investigation and submits the response back to TOP.

Material for executing the SSC

Tool kits containing software and the instructions for executing the individual SSCs are made available for download.

Debriefing Report

After completion of the stages of an SSC, the participating TOPs are asked to provide feedback from the exercise. Comments may pertain to the execution of the challenge and also provide suggestions for other, future challenges. Based on the input, a debriefing report is compiled. The resulting reports are available via the relevant SSC level links below.

Links to specific SSC levels

• SSC level 1, challenges the Workload Management System (WMS) on the Grid: Resource Broker (RB) and Compute Element (CE)
• SSC level 2, challenges the Storage Elements on the Grid
• SSC level 3, challenges the Operational Diligence of the LCG/EGEE Grid Sites (Material passed on to volunteering beta Sites, October 2008)
• SSC level 3-9.02, was a slightly modified version of SSC3 and run in February 2009. During the year 2009 this challenge was also run in various ROCs. The results were presented at the EGEE09 Conference.
• SSC level 4, additionally addresses the ATLAS Pilot-Job framework. This run s scheduled for March/April 2010

• A Call for LCG/EGEE Emergency Preparation

___________
History:
2010-03-09 (sg) added placeholder for SSC3-9.02 and SSC4. 2009-01-14 (psa) recorded a few facts
2007-08-28 (psa) corrected to reflect the availability of multiple levels
2007-08-23 (psa) introduced SSC_3
2006-10-09 (psa) added pointer to SSC_2
2006-02-24 (psa) moved SSC_1 specific info to separate topic
2005-11-02 (psa) added sections Roles and Prerequisites
2005-10-17 (psa) initial writing