Re: [Roll] [roll] #136: - draft-ietf-roll-applicability-ami - Add a section of the Security Considerations for each instance where the RPL security mechanism are not to be used

"Popa, Daniel" <Daniel.Popa@itron.com> Fri, 24 January 2014 18:10 UTC

From: "Popa, Daniel" <Daniel.Popa@itron.com>
To: Chris Lonvick <clonvick@cisco.com>
Thread-Topic: [roll] #136: - draft-ietf-roll-applicability-ami - Add a section of the Security Considerations for each instance where the RPL security mechanism are not to be used
Thread-Index: AQHO+uwD2eu7e2v53EymWeo4If1VDpqEdBnggA/qn4CAAAqZ/w==
Date: Fri, 24 Jan 2014 18:10:36 +0000
Message-ID: <EAD2932B-5B25-42CD-8F36-9683404641DF@itron.com>
References: <067.78cf5d635bca77cded1fb433c133c835@trac.tools.ietf.org> <9546f1bf3d68401a8cdf837ca5528de4@BY2PR04MB807.namprd04.prod.outlook.com>, <alpine.LRH.2.00.1401240912530.20137@sjc-xdm-112.cisco.com>
In-Reply-To: <alpine.LRH.2.00.1401240912530.20137@sjc-xdm-112.cisco.com>
Accept-Language: fr-FR, en-US
Content-Language: en-US
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "draft-ietf-roll-applicability-ami.all@tools.ietf.org" <draft-ietf-roll-applicability-ami.all@tools.ietf.org>, "roll@ietf.org" <roll@ietf.org>
Subject: Re: [Roll] [roll] #136: - draft-ietf-roll-applicability-ami - Add a section of the Security Considerations for each instance where the RPL security mechanism are not to be used
Precedence: list
Reply-To: Routing Over Low power and Lossy networks <roll@ietf.org>

Thanks Chris for feedback.

I believe what you advice it is more or less what we intend to do. The difference is that we do not intend to explicitly use a security threat model and show how IEEE works against it, but rather to explain how IEEE 802.15.4 and IEEE p1901.2 security mechanisms can substitute to RPL-defined security mechanisms to provide the same security services as those described in Section 19.1 of RFC 6550, while at the same time giving the system designers & implementers the same degree of freedom to trade-off complexity against security strength, in order to meet HW & cost constraints of such low power field devices. 

Would this be enough ? 

Regards,
Daniel

Sent from my iPhone

> On 24 janv. 2014, at 18:32, "Chris Lonvick" <clonvick@cisco.com> wrote:
> 
> Hi Daniel,
> 
> Has a threat model been defined for RPL?  And do you know that the link-layer security provided by the two IEEE mechanisms will thwart the threats?  This isn't meant to be an onerous exercise.  :-)  What has been done in several WGs has been to define a simple threat model (usually taken from RFC 3552) and then describe how the security mechanisms will thwart the threats.  For example, see sections 2 and 3 in RFC 5426 (TLS for syslog).
> 
> If you can point to the threat model for RPL then you can probably state (just once in the Security Considerations section) how the IEEE link-layer security mechanisms will address the threats so therefore the security mechanisms already contained within RPL will not be needed.
> 
> Hope this helps,
> Chris
> 
>> On Tue, 14 Jan 2014, Popa, Daniel wrote:
>> 
>> Hello all,
>> 
>> Chris:
>> 
>> Just to clarify: The applicability statement for AMI network focuses on use of RPL (+ 6LowPAN/IPv6) over standard IEEE wireless and PLC link-layer technologies (i.e., IEEE Std 802.15.4g/4e and IEEE Std P1901.2, respectively). Each of these standards is coming with a link-layer security specification.
>> 
>> Following you recommendation: we can add a new section - "Security Considerations" - to the section where we describe the link-layer security features (i.e., to the Section 9.2.3 called "Security features provided by the MAC sub-layer"). Alternatively, we can keep the Section 9.2.3 as it is and in the content that will be provided we describe how the link-layer security features will meet the requirements of the RPL security services.  Which of these approaches will better answer your request?
>> 
>> Would such clarifications meet your expectations?
>> 
>> Regards,
>> Daniel
>> 
>> -----Message d'origine-----
>> De : roll issue tracker [mailto:trac+roll@grenache.tools.ietf.org]
>> Envoyé : mardi 17 décembre 2013 06:51
>> À : draft-ietf-roll-applicability-ami.all@tools.ietf.org; mariainesrobles@gmail.com
>> Cc : roll@ietf.org
>> Objet : [roll] #136: - draft-ietf-roll-applicability-ami - Add a section of the Security Considerations for each instance where the RPL security mechanism are not to be used
>> 
>> #136: - draft-ietf-roll-applicability-ami - Add a section of the Security Considerations for each instance where the RPL security mechanism are not to be used
>> 
>> Source: http://www.ietf.org/mail-archive/web/secdir/current/msg04477.html
>> 
>> 
>> From: Chris Lonvick <clonvick at cisco.com>
>> Date: Fri, 13 Dec 2013 11:41:54 -0800 (PST)
>> 
>> 
>> 
>> “The authors note that other security mechanisms may be used, which would  mean that the security functions of RPL would not be needed. I would  recommend that a section of the Security Considerations be added for each  instance where the RPL security mechanism are not to be used. Each of  those sections should show how the replacement mechanisms will meet the  requirements of the RPL security services that are described in 6550.”
>> 
>> -- 
>> -------------------------------------+----------------------------------
>> -------------------------------------+---
>> Reporter:                           |      Owner:  draft-ietf-roll-
>> mariainesrobles@gmail.com          |  applicability-
>>    Type:  defect                   |  ami.all@tools.ietf.org
>> Priority:  major                    |     Status:  new
>> Component:  applicability-ami        |  Milestone:
>> Severity:  Active WG Document       |    Version:
>>                                    |   Keywords:
>> -------------------------------------+----------------------------------
>> -------------------------------------+---
>> 
>> Ticket URL: <http://trac.tools.ietf.org/wg/roll/trac/ticket/136>
>> roll <http://tools.ietf.org/wg/roll/>
>>

Re: [Roll] [roll] #136 (applicability-ami): - dra… roll issue tracker
[Roll] [roll] #136: - draft-ietf-roll-applicabili… roll issue tracker
Re: [Roll] [roll] #136: - draft-ietf-roll-applica… Popa, Daniel
Re: [Roll] [roll] #136: - draft-ietf-roll-applica… roll issue tracker
Re: [Roll] [roll] #136: - draft-ietf-roll-applica… Popa, Daniel
Re: [Roll] [roll] #136: - draft-ietf-roll-applica… roll issue tracker
Re: [Roll] [roll] #136: - draft-ietf-roll-applica… Michael Richardson
Re: [Roll] [roll] #136: - draft-ietf-roll-applica… Chris Lonvick
Re: [Roll] [roll] #136: - draft-ietf-roll-applica… Chris Lonvick
Re: [Roll] [roll] #136: - draft-ietf-roll-applica… roll issue tracker
Re: [Roll] [roll] #136 (applicability-ami): - dra… roll issue tracker
Re: [Roll] [roll] #136 (applicability-ami): - dra… roll issue tracker