[mile] SACM/MILE at IETF 101

[Adam Montville <[e-mail]>]

Hello all...

As mentioned in a previous note, a couple of us are getting together to work a fairly simple configuration assessment scenario using disparate components connected to an XMPP-Grid. We have received some interest off-list in the XMPP-Grid side of things (per the latest draft [1], it seems that XMPP-Grid is an XMPP server running a few XEP extensions), and we are hopeful that we will be able to simply use a grid as clients and not have to implement the grid itself or spend time configuring one.

Assuming that works out the way we hope, we will mock up an assessment policy publisher and modify an existing assessor and dashboard, so that four interfaces must be defined: 1) publisher interface for assessment guidance, 2) subscriber interface for assessment guidance, 3) publisher interface for assessment results, 4) subscriber interface for assessment results.

What we hope to learn is twofold. First we hope to learn more about the nuances of working with XMPP-Grid for something other than IODEF payloads. Second, we hope to learn more about how we would need to structure drafts to specify capability interfaces and then bind them to XMPP-Grid.

Our plan is to share our experience (success/failure) at the hackathon itself, but also (at the chairs' pleasure) in the SACM session, whenever that may be. We would be happy to do the same for MILE,  if that makes sense. There's really nothing there yet, but we've got a GitHub repository set up at [2]. Caveat: Not all code will be available in the repository, and we intend to use it primarily for the integration pieces and documentation.

Kind regards,

Adam (and Bill)


[1] https://datatracker.ietf.org/doc/draft-ietf-mile-xmpp-grid/ <https://datatracker.ietf.org/doc/draft-ietf-mile-xmpp-grid/> 
[2] https://github.com/CISecurity/Integration <https://github.com/CISecurity/Integration>