[domainrep] Informational RFC on reputation intelligence?

[Tyson Macaulay <[e-mail]>]

Everyone,

I attended the domain rep session in Paris and went to the mic to mention
an IPv6 Destination Option draft which described a delivery system for
reputation information.  (See
https://datatracker.ietf.org/doc/draft-macaulay-6man-packet-stain/)

Knowledgable 6man veterans have advised me that an informational RFC
related to the problem-statement should be developed, circulated and
accepted before driving forward with the v6-Destinatin Option draft.

The problem statement under consideration would consist of:

1) a description of internet reputation intelligence and how it might be
derived (spam logs, botnet C&C traffic, DDOS attacks, other indicators of
intent or compromise)
2) the proactive capabilities and benefits of  reputation intelligence
3) the challenges of legacy, signature and heuristic-based threat
management systems
4) review of different reputation-delivery models


My question to this group: has this already been done in full or in part
elsewhere for IETF?

I reviewed draft-dskoll-reputation-reporting-04 and the other related
drafts but did not notice a detailed discussion of this nature.  (Please
forgive me if I have missed something that should be obvious).

Thanks,

Tyson


-- 
Tyson Macaulay, BA CISSP CISA
VP ­ Technology
2Keys Security Solutions
Phone: [phone]
email: [e-mail]