[bmwg] Proposal - Benchmarking Methodology for Network Security Device Performance draft

[[e-mail]]

Folks,

 

During the IETF 108 BMWG virtual meeting Tim Carlin presented on behalf of
NetSecOPEN information on the work we have been doing. The discussion
focussed mainly on the Network IPS test requirements we are planning on
adding.

 

A comment was made that the draft was getting rather large. After some
discussion we came up with an idea. I was asked to bring it up for
discussion on this mailing list.

 

In order to move the draft forward and also to allow for continued movement
on developing security testing requirements we are proposing splitting the
draft into different parts.

 

The first part would be focussed on performance testing elements. We would
expect this to be a stable for the most part and would be ready for IESG
review soon, hopefully this month.

 

The subsequent parts would be drafts that would capture security
requirements that would be added on to the first part. For example, a draft
that would cover NGFW security requirements and a draft that would cover
Network IPS requirements. These security requirement drafts would frequently
reference the first draft and might, at times, require documentation of
where deviations of the requirements contained in the first draft would be
allowed.

 

I believe if these changes are acceptable to everyone we will have change
the title of the first draft.

 

Please let me know if anyone has an issue with this proposal.

 

Brian

 

---------

Brian Monkman

Executive Director, NetSecOPEN

Office: [phone] 

Fax: [phone]

Mobile: [phone]

 



 <https://www.netsecopen.org> https://www.netsecopen.org