Re: [Dots] draft DOTS WG Charter [updated]

"Teague, Nik" <nteague@verisign.com> Wed, 03 June 2015 13:13 UTC

From: "Teague, Nik" <nteague@verisign.com>
To: Tobias Gondrom <tobias.gondrom@gondrom.org>, "dots@ietf.org" <dots@ietf.org>
Thread-Topic: [Dots] draft DOTS WG Charter [updated]
Thread-Index: AQHQkx7Dqn+0n8uoLUGYnTBjEzWvDZ2ZMKiAgABxTQCAAAgQAIAAFgQAgAESQACAACPUAIAANYgA
Date: Wed, 03 Jun 2015 13:13:12 +0000
Message-ID: <D194BB64.E42F%nteague@verisign.com>
References: <D1827CB7.DA99%nteague@verisign.com> <88E7DEFA-6F4D-465F-83A2-9540FDA865F2@arbor.net> <D193716D.E337%nteague@verisign.com> <EE8366DF-455C-424E-B5E2-82C7774EE47F@arbor.net> <D1938840.E385%nteague@verisign.com> <556EC07E.9000704@gondrom.org> <556EDE8C.9020402@gondrom.org>
In-Reply-To: <556EDE8C.9020402@gondrom.org>
Accept-Language: en-US
Content-Language: en-US
user-agent: Microsoft-MacOutlook/14.5.0.150423
Content-Type: text/plain; charset="us-ascii"
Content-ID: <5CF60235EE12214581AA1230A950C9F7@verisign.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <http://mailarchive.ietf.org/arch/msg/dots/4f0rqaTtpTxIcm1qd8bX-hAT7SQ>
Subject: Re: [Dots] draft DOTS WG Charter [updated]
Precedence: list

Hi,

Updated to correct the nits Tobias highlighted on the milestone date
(Thanks!)

-Nik

-[Charter for Working Group]-

The aim of DDoS Open Threat Signaling (DOTS) is to develop a standards
based approach for the realtime signaling of DDoS related telemetry and
threat handling requests and data between elements concerned with DDoS
attack detection, classification, traceback and mitigation.

The elements may be described as:
* On-premise DDoS mitigation platforms
* Service provider DDoS mitigation platforms
* Other network elements and services with the ability to analyze and/or
influence network traffic

Elements may participate in DDoS detection, classification, traceback and
mitigation individually or within the context of a larger collaborative
system.

These elements may be communicating inter-domain or intra-domain over
links that may be congested by attack traffic resulting in hostile
conditions for connection oriented approaches and more generalized
signaling and telemetry solutions.  Robustness under these conditions is
paramount while ensuring appropriate regard for authentication,
authorization, privacy and data integrity.  Elements may be deployed as
part of a wider strategy incorporating multiple points of DDoS detection,
classification, traceback and mitigation, both on premise or service
provider based.  Should changing conditions necessitate altering the
specifics of mitigation actions and/or the topological scope of mitigation
coverage, timely and effective signaling of telemetry and current threat
status to all elements involved in the mitigation is essential.  Feedback
between participating elements is required for increased awareness
supporting effective decision making.

The WG will, where appropriate, reuse or extend existing standard
protocols and mechanisms (for example, IPFIX and its associated templating
and extension mechanisms).  The WG may coordinate on a situationally
appropriate basis with other working groups and initiatives which
compliment the DOTS effort e.g. SACM, MILE, SUPA, I2NSF et. al.

The charter of the working group is to produce one or more standards track
specifications to provide for this open signaling in the DDoS problem
space.  While the resulting standards should be designed so they apply to
network security applications beyond the DDoS problem space, this working
group will focus on signaling and coordination mechanisms directly related
to DDoS attack detection, classification, traceback and mitigation,
incorporating the general priniciples articulated in RFC5218
<https://tools.ietf.org/html/rfc5218>.  Focusing the WG efforts on DDoS is
intended to meet the community's desire for a deployable solution in the
near term.  The specification(s) produced by the WG will include a
standard mechanism for authentication and authorization, data integrity,
and providing for privacy in operation.

The WG will produce the following deliverables and milestones:

* Document or Documents describing the problem space, use cases, protocol
requirements and other qualifying information as the WG sees fit.
* Document or Documents specifying protocols and associated data models to
address the stated goals of the WG.

* Nov-2015: WG document for Requirements/Use Cases (informational)
* Mar-2016: WG document for Transport (proposed standard)
* Apr-2016: WG document for Data Model (proposed standard)

* Feb-2016: Requirements/Use Cases draft to IESG
* May-2016: Transport draft to IESG
* Jun-2016: Data Model draft to IESG

* Periodically re-examine milestones (3x month intervals)

[Dots] draft DOTS WG Charter [updated] Teague, Nik
Re: [Dots] draft DOTS WG Charter [updated] John Schiel
Re: [Dots] draft DOTS WG Charter [updated] Sean Turner
Re: [Dots] draft DOTS WG Charter [updated] Teague, Nik
Re: [Dots] draft DOTS WG Charter [updated] Sean Turner
Re: [Dots] draft DOTS WG Charter [updated] Roland Dobbins
Re: [Dots] draft DOTS WG Charter [updated] Teague, Nik
Re: [Dots] draft DOTS WG Charter [updated] Kathleen Moriarty
Re: [Dots] draft DOTS WG Charter [updated] John Schiel
Re: [Dots] draft DOTS WG Charter [updated] Roland Dobbins
Re: [Dots] draft DOTS WG Charter [updated] Teague, Nik
Re: [Dots] draft DOTS WG Charter [updated] Tobias Gondrom
Re: [Dots] draft DOTS WG Charter [updated] Tobias Gondrom
Re: [Dots] draft DOTS WG Charter [updated] Teague, Nik
Re: [Dots] draft DOTS WG Charter [updated] Kathleen Moriarty