OpenStack (Keystone) Vulnerability and Threat analysis

This proposal is to start a threat analysis evaluation of the OpenStack system components. As a first step, we can focus on Keystone. A threat analysis takes a comprehensive look at the system at hand – components, protocols and code - against the existence and capability of an adversary looking for known vulnerabilities. When a threat is identified, it is tallied and reported to the development team. In some cases, the threat analysis team may also include a suggestion to fix the vulnerabilities and related threat.