[core] I-D Action: draft-ietf-core-attacks-on-coap-03.txt

[[e-mail]]

A New Internet-Draft is available from the on-line Internet-Drafts
directories. This Internet-Draft is a work item of the Constrained RESTful
Environments (CORE) WG of the IETF.

   Title           : Attacks on the Constrained Application Protocol (CoAP)
   Authors         : John Preuß Mattsson
                     John Fornehed
                     Göran Selander
                     Francesca Palombini
                     Christian Amsüss
   Filename        : draft-ietf-core-attacks-on-coap-03.txt
   Pages           : 21
   Date            : 2023-06-11

Abstract:
   Being able to securely read information from sensors, to securely
   control actuators, and to not enable distributed denial-of-service
   attacks are essential in a world of connected and networking things
   interacting with the physical world.  Using a security protocol such
   as DTLS, TLS, or OSCORE to protect CoAP is a requirement for secure
   operation and protects against many attacks.  This document
   summarizes a number of known attacks on CoAP deployments and show
   that just using CoAP with a security protocol like DTLS, TLS, or
   OSCORE is not always enough for secure operation.  Several of the
   discussed attacks can be mitigated with a security protocol such as
   DTLS, TLS, or OSCORE providing confidentiality and integrity combined
   with the solutions in RFC 9175.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-core-attacks-on-coap/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-core-attacks-on-coap-03.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-core-attacks-on-coap-03

Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts