SciGaP Engagement

Spring 2014 - Spring 2016

SciGaP (http://scigap.org) provides middleware services to Science Gateways. The Trusted CI-SciGaP engagement began in Spring 2014. Because SciGaP was a relatively new project at the time, our engagement model was different from those with other, more mature projects. Rather than do a concentrated deep-dive into one particular aspect of the project’s security, we took a broader, longer-term engagement with the SciGaP team. Our interaction has been much less frequent than with most other engagements. This allowed for more flexibility as the SciGaP project evolved and matured.

The Trusted CI-SciGaP engagement has produced the following reports/papers:

• SciGaP-Trusted CI Engagement Summary

• SciGaP-Trusted CI Engagement: Final Technical Recommendations

• Suggested Security Practices for SciGaP: A Preliminary Report

• Recommended Security Practices for Thrift Clients: Case Study - Evernote

• Authentication and Authorization Considerations for a Multi-tenant Service