Internship Projects/Mentors



Title

ONAP Security Requirements - SDC

Status

Difficulty

 



Description 

Describe the project in detail. Provide at least two or three paragraphs describing the task. Include the problem/opportunity in need of effort, as well as a description of the probable implementation path and steps to explore and fix the problem or realize the opportunity. The more detail you can provide on the project page, the more likely your potential interns will understand what you are looking for.

SDC is the ONAP visual modeling and design tool. It creates internal metadata that describes assets used by all ONAP components, both at design time and run time.

The SDC manages the content of a catalog, and logical assemblies of selected catalog items --as needed-- to completely define how and when VNFs  are realized in a target environment.  A complete virtual assembly of specific catalog items, together with selected workflows and instance configuration data,  completely defines how the deployment, activation, and life-cycle management of VNFs are accomplished.  Selected sub-assemblies may also be represented in the catalog and may be combined with other catalog items, including other sub-assemblies.

ONAP has adopted the CII (Core Infrastructure Initiative) Badge Program.

This project will focus to address the remaining Security requirements defined by the ONAP SECCOM Community based on JIRA Backlog.

The prioritization of the activities will be discussed with the mentee based on his/her skillset and expectations.

Additional Information

Provide links to wiki entries, release-plan notes, and/or other web-references that would be helpful information to potential interns.

Get more detail information about the project,  please refer to the following link:

CII Bading: https://wiki.onap.org/display/DW/CII+Badging+Program

ONAP Jira: https://jira.onap.org

SDC Architecture: https://wiki.onap.org/pages/viewpage.action?pageId=1015837

SDC: https://wiki.onap.org/pages/viewpage.action?pageId=6592847

SDC Code: https://gerrit.onap.org/r/#/admin/projects/sdc

SDC JIRA Query status != Closed AND status != Done AND project = SDC

Learning Objectives

Well-developed learning objectives are an integral part of providing a positive internship experience and demonstrate a well-organized and robust project. Introduction to open source culture and collaboration tools should be a required learning objective for all internship projects. Additional learning objectives may include soft/hard skills the intern will learn, how the intern will be mentored or supervised, professional or networking opportunities, and etc.

Expected Outcome

List the deliverable(s) (features/application(s)/report(s), etc.) to track progress

Relation to LF Networking 

List the LF Networking Project(s), e.g. OPNFV, ONAP, ODL, FD.io, and etc., that this internship is related to or adding features or functionalities to.

ONAP

Education Level

Students are required to be enrolled in an undergraduate program to be eligible. If education beyond the undergraduate level is preferred, please specify.

Skills

List the skills, abilities, technical knowledge, and training required and/or desired for successfully completing the project. 

Future plans

What’s the path forward for continuing the momentum of the project after the internship ends? 

The development activities will be part of the next ONAP Release and can serve as implementation best practices for other ONAP projects

Preferred Hours and Length of Internship

Full-time (40 hours a week for 12 weeks during the summer) or Part-time (20 hours a week for 24 weeks starting in summer and ending in fall)

Prefer to Part-Time Intern: 20 hours per week for 24 consecutive weeks.

Full-Time Intern is also welcomed.

Mentor(s) Names and Contact Info

Name, email, Chat ID, company affiliation (optional)

Name: Amy Zwarico , Pierre Close, Ofir Sonsino

Emails: amy.zwarico@att.com, pierre.close@intl.att.com, ofir.sonsino@intl.att.com

Mobile: +1 (205) 613-1667, + 32474961370, +972 37198050

Mentee

Amir Mohamad

Project Results

DeliverableLinkStatusDescription
Codelog4jmergedUpgrade from the vulnerable log4j 1.x to log4j 2.13.1
CodejacksonmergedUpgrade from jackson-databind 1.9 and 2.10 to 2.11
Codemanymerged

Upgrade Netty-all 4.1.36.final to 4.1.48.final

Upgrade togglz-console 2.4.1.final to 2.6.1.final

Upgrade commons-beanutils 1.9.3 to 1.9.4

Upgrade testng 6.x to 7.2.0

CodesnakeyamlWIPupgrade snakeyaml 1.14,1.17, 1.18, and 1.21 to 1.26

Lightening Talk Recording

 


Final Report