Re: [mile] Consensus Call

I support MMDEF as the MTI, and since MMDEF is a malware spec, I'd like
to resurrect a previously-discussed suggestion that the SCI draft include
discussion of the "EICAR Standard Anti-Virus Test File" as a specific
example that SHOULD (or MUST?) be supported for black-box testing purposes.

See: http://www.eicar.org/86-0-Intended-use.html

Thanks,
--David

> -----Original Message-----
> From: mile-bounces@ietf.org [mailto:mile-bounces@ietf.org] On Behalf Of
> Moriarty, Kathleen
> Sent: Thursday, March 14, 2013 10:38 AM
> To: Panos Kampanakis (pkampana); mile@ietf.org
> Subject: Re: [mile] Consensus Call - SCI draft MMDEF as MTI
> 
> Hello Panos,
> 
> Thank you for joining us remotely!  The recording is available for those who
> were not able to attend during the session.
> 
> We need to choose one included schema as MTI for 'black box' testing of the
> method described.  Essentially, if you can exchange using the MTI spec, then
> any other specs supported should theoretically work as the pattern has been
> established.
> 
> MMDEF was recommended as it is in use by the eCrime WG as an extension to
> IODEF/RFC5901.  It replaced the method to include malware in exchanges and
> seemed to make sense to adopt more broadly as it is maintained by a group in
> IEEE focused on that particular problem.
> 
> BTW, I meant to say the last call will end in two weeks from yesterday,
> Wednesday March 27th.
> 
> Thank you!
> Kathleen
> ________________________________________
> From: Panos Kampanakis (pkampana) [pkampana@cisco.com]
> Sent: Thursday, March 14, 2013 9:59 AM
> To: Moriarty, Kathleen; mile@ietf.org
> Subject: RE: Consensus Call - SCI draft MMDEF as MTI
> 
> I agree with MMDEF included in SCI.
> I am not sure why it must be MTI. Due to some audio problems I missed part of
> the call yesterday. Can you briefly summarize why we want it MTI?
> 
> -----Original Message-----
> From: mile-bounces@ietf.org [mailto:mile-bounces@ietf.org] On Behalf Of
> Moriarty, Kathleen
> Sent: Wednesday, March 13, 2013 3:04 PM
> To: mile@ietf.org
> Subject: [mile] Consensus Call - SCI draft MMDEF as MTI
> 
> Hello,
> 
> In today's MILE session, a call for consensus began to include MMDEF in the
> SCI draft as the mandatory-to-implement (MTI) specification.  The call for
> consensus will last for 2 weeks and we ask that you contribute your opinion.
> The vote in the room was unanimous and we want to make sure we hear from
> participants not in attendance.
> 
> Poll will end on Wednesday next week.
> 
> Thank you!
> Kathleen
> _______________________________________________
> mile mailing list
> mile@ietf.org
> https://www.ietf.org/mailman/listinfo/mile
> _______________________________________________
> mile mailing list
> mile@ietf.org
> https://www.ietf.org/mailman/listinfo/mile