Re: [Ideas] [lisp] FW: Technical plenary: Attacks against the architecture - implications for the Network Mapping System

Hi Fred

Thanks for raising this interesting question.

Yes it has happened and will continue to do so. It will a very sensitive topic that none of the entities attack would want to be publicized at all cost.
That said, it is much easier for a private institution to keep it under the wraps.

Are they taking measures? Absolutely!
It is pretty recent that we now have authentication based on which computer is used to login using 2 step verification. The two
Step verification involving confirmation of code sent to mobile can be considered a tell tale sign.

I think the difference with the latest attack is that 
- it involved the DNS system or other services that cannot rely on the two step verification for instance which could potentially identify it the requests are from botnets. 
The larger and indiscriminate you are about users to your service, the higher the risk of a DDOS attack waiting to happen.
- It is harder to keep it under the wraps when you have multiple parties involved.

Coming back to the mapping systems, while it may be vulnerable just as many other components of the internet, now is time for rethinking. 
I am really looking forward to the technical plenary. The latest attack highlights the urgency to get started on working on it. 
The motivation for the IDEAS problem statement is to identify these critical issues and provide a framework leveraging properties in ID enabled networks.
IMHO, it is best to have a framework for all ID enabled networks rather than going about it in piecemeal, and this is the goal for IDEAS, or at least it is a starting point.

Padma

-----Original Message-----
From: Ideas [mailto:ideas-bounces@ietf.org] On Behalf Of Dino Farinacci
Sent: Monday, October 31, 2016 10:03 AM
To: Templin, Fred L
Cc: Padma Pillay-Esnault; ideas@ietf.org; lisp@ietf.org
Subject: Re: [Ideas] [lisp] FW: Technical plenary: Attacks against the architecture - implications for the Network Mapping System

> Hi, one observation and one question. The observation is that anything on the open
> Internet that provides a service can be subject to Denial of Service – and, I am not
> just talking about the LISP mapping system. The question is how is it that we have
> not yet seen DoS attacks take down critical Internet services such as online banking;
> have we just been lucky up to now?

Fred, it has happened. Just hidden to avoid headlines and fear.

Dino

_______________________________________________
Ideas mailing list
Ideas@ietf.org
https://www.ietf.org/mailman/listinfo/ideas