70 likes | 197 Views
Operational Security Capabilities for IP Network Infrastructure. IETF 64 Vancouver, BC, Canada November 2005. Agenda. 1850-1852: Agenda bashing / blue sheets / scribe discovery 1852-1900: document status (R.Callon) 1900-1910: draft-ietf-opsec-filter-caps-00 (Morrow/Callon)
E N D
Operational Security Capabilities for IP Network Infrastructure IETF 64 Vancouver, BC, Canada November 2005 OPSEC WG, Nov 2005 1
Agenda 1850-1852: Agenda bashing / blue sheets / scribe discovery 1852-1900: document status (R.Callon) 1900-1910: draft-ietf-opsec-filter-caps-00 (Morrow/Callon) 1910-1920: draft-bonica-opsec-nmasc-00 (R.Bonica) 1920-1930: draft-callon-misc-cap-00.txt (R.Callon) 1930-1940: draft-ietf-bmwg-bench-meth-ebgp-00 and draft-ietf-bmwg-bench-meth-opsec-00 (S.Poretsky) 1940-1950: draft-zhao-opsec-routing-capabilities-00 (M.Fuyou) OPSEC WG, Nov 2005 2
WG Document Status • Framework <draft-ietf-opsec-framework-01.txt> • Updated to avoid timeout • Further update in progress • minor edits • examples of message modification & deletion attacks • additional references OPSEC WG, Nov 2005 3
WG Document Status • Survey of Security Efforts and Documents <draft-ietf-opsec-efforts-01.txt> • Stable, in good shape • Packet Filtering Capabilities <draft-ietf-opsec-filter-caps-00.txt> • Updated, presentation to follow OPSEC WG, Nov 2005 4
WG Document Status • Current Practices • draft-ietf-opsec-current-practices-02.txt • Modifications from 01 version • Modified threat model section • Added filtering section • Added some IPv6 information • Question for working group • Should Appendix B (protocol specific attacks) have more details on individual attacks listed? • More detail on IPv6 required? What? • Anything missing? OPSEC WG, Nov 2005 5
New Documents • Three new documents have been brought to the working group • Network Management Access Capabilities (aka in-band and out-of-band caps) • Miscellaneous Capabilities • Routing Control Plane Capabilities • Presentations to follow on each OPSEC WG, Nov 2005 6
Agenda 1850-1852: Agenda bashing / blue sheets / scribe discovery 1852-1900: document status (R.Callon) 1900-1910: draft-ietf-opsec-filter-caps-00 (Morrow/Callon) 1910-1920: draft-bonica-opsec-nmasc-00 (R.Bonica) 1920-1930: draft-callon-misc-cap-00.txt (R.Callon) 1930-1940: draft-ietf-bmwg-bench-meth-ebgp-00 and draft-ietf-bmwg-bench-meth-opsec-00 (S.Poretsky) 1940-1950: draft-zhao-opsec-routing-capabilities-00 (M.Fuyou) OPSEC WG, Nov 2005 7