Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[RM Ch07] Add NIST reference for service mesh security #2540

Closed
karinesevilla opened this issue Jul 21, 2021 · 2 comments · Fixed by #2655
Closed

[RM Ch07] Add NIST reference for service mesh security #2540

karinesevilla opened this issue Jul 21, 2021 · 2 comments · Fixed by #2655
Assignees
@karinesevilla
Labels
New
Projects
RM
Milestone
Lakelse - M2 - Sc...

Comments

@karinesevilla
Copy link
Collaborator

Per John Kimmins (GSMA FASG) comment (07/06/2021), include NIST SP 800-204B as security reference (7-10) for service mesh security. Develop on service mesh security if necessary.
@karinesevilla karinesevilla self-assigned this Jul 21, 2021
@karinesevilla karinesevilla added this to To do in RM via automation Jul 21, 2021
@karinesevilla
Copy link
Collaborator Author

NIST.SP.800-204B-draft.pdf
The document deals with security for microservices-based applications using service mesh. It applies to RA2 architecture (Kubernetes and Istio).
RA2 chapters 3 (3.2.2) & 4(4.7) mention that application service mesh is out of scope.
Do we keep this issue and elaborate on it into RM?

@CsatariGergely
Copy link
Collaborator

I do not see the relevance of this at the moment.

karinesevilla added a commit that referenced this issue Oct 14, 2021
@karinesevilla
[RM Ch07] NIST references for service mesh
6412142 
Fixes #2540 
7.6.6 Zero Trust Architecture
Addition of usage of service mesh for cloud-native applications security
References:  NIST SP 800-204A and NIST SP 800-204B
@karinesevilla karinesevilla mentioned this issue Oct 14, 2021
Merged
RM automation moved this from To do to Done Oct 21, 2021
walterkozlowski pushed a commit that referenced this issue Oct 21, 2021
@karinesevilla @pgoyal01
[RM Ch07] NIST references for service mesh (#2655)
89fae2b 
* [RM Ch07] NIST references for service mesh

Fixes #2540 
7.6.6 Zero Trust Architecture
Addition of usage of service mesh for cloud-native applications security
References:  NIST SP 800-204A and NIST SP 800-204B

* Update doc/ref_model/chapters/chapter07.md

Per Pankaj's suggestions

Co-authored-by: Pankaj Goyal <52107136+pgoyal01@users.noreply.github.com>

Co-authored-by: Pankaj Goyal <52107136+pgoyal01@users.noreply.github.com>
gkunz pushed a commit to gkunz/CNTT that referenced this issue Jan 19, 2022
@karinesevilla @pgoyal01 @gkunz
[RM Ch07] NIST references for service mesh (anuket-project#2655)
e558824 
* [RM Ch07] NIST references for service mesh

Fixes anuket-project#2540 
7.6.6 Zero Trust Architecture
Addition of usage of service mesh for cloud-native applications security
References:  NIST SP 800-204A and NIST SP 800-204B

* Update doc/ref_model/chapters/chapter07.md

Per Pankaj's suggestions

Co-authored-by: Pankaj Goyal <52107136+pgoyal01@users.noreply.github.com>

Co-authored-by: Pankaj Goyal <52107136+pgoyal01@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@karinesevilla karinesevilla

Labels
New
Projects
RM
  
Done
Milestone
Lakelse - M2 - Scope Freeze
Development

Successfully merging a pull request may close this issue.

[RM Ch07] NIST references for service mesh anuket-project/anuket-specifications
3 participants
@CsatariGergely @karinesevilla @walterkozlowski