Confirm
529
edits
Changes
no edit summary
The table below summarizes the open issues assigned to the CloudSec team, sorted by area of focus.
{| class="wikitable"
|- style="vertical-align:bottomtop;"! style="height:100px; width:300px; text-align:center;" |
! style="height:100px; width:200px; text-align:center;" |
! style="height:100px; width:200px; text-align:center;" |
Fraud Detection
! style="height:100px; width:200px; text-align:center;" |
Infra Hardening
|-
! Operational security| style="background-color: redyellow;"|[https://github.com/mozilla-services/cloudsec/issues?q=is%3Aopen+is%3Aissue+label%3A"1.1+TDS" '''3 2 HIGH'''<br />'''2 MEDIUM'''<br />'''3 2 LOW'''<br />]| style="background-color: redyellow;"|[https://github.com/mozilla-services/cloudsec/issues?q=is%3Aopen+is%3Aissue+label%3A"1.2+fraud+detection" '''3 HIGH'''<br />'''1 MEDIUM'''<br />]
| style="background-color: green;"|
| style="background-color: yellow;"|
|}
{| class="wikitable"
|- style="vertical-align:bottomtop;"! style="height:100px; width:300px; text-align:center;" |
! style="height:100px; width:200px; text-align:center;" |
Risk & Security reviews
! style="height:100px; width:200px; text-align:center;" |
Test & Implement Baseline Security
! style="height:100px; width:200px; text-align:center;" |
Training & Communication
! style="height:100px; width:200px; text-align:center;" |
Bug Bounty
|-
! Application Security
| style="background-color: yellow;"|
2 HIGH<br />1 LOW<br />
| style="background-color: yellow;"|
1 HIGH<br />1 MEDIUM<br />
| style="background-color: green;"|
1 HIGH<br />2 LOW<br />
| no pending task
|}
{| class="wikitable"
|- style="vertical-align:top;"
! style="height:100px; width:300px; text-align:center;" |
! style="height:100px; width:200px; text-align:center;" |
Data & Code Signing
! style="height:100px; width:200px; text-align:center;" |
Threat monitoring
! style="height:100px; width:200px; text-align:center;" |
External audits
|-
! Core security services
| style="background-color: yellow;"|
| style="background-color: green;"|
| style="background-color: green;"|
|}
* Set HSTS to 2592000 (30 days) ('''INFRA-HSTS''')
* Set HPKP to 2592000 (30 days) ('''INFRA-HPKP''')
* Admin panels must :** only be available behind Mozilla VPN and (which provides MFA) ('''INFRA-ADMINVPN''')** require LDAP auth authentication ('''INFRA-ADMINLDAP''')** enforce a two-man rule on sensitive changes ('''INFRA-ADMIN2MANRULE''')
=== Coding rules ===
