Re: [Model-t] Model-t Perspective and Method Questions

"Rezaki, Ali (Nokia - DE)" <ali.rezaki@nokia.com> Fri, 08 November 2019 17:00 UTC

From: "Rezaki, Ali (Nokia - DE)" <ali.rezaki@nokia.com>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>, "model-t@iab.org" <model-t@iab.org>
Thread-Topic: [Model-t] Model-t Perspective and Method Questions
Thread-Index: AdWJrkVpsio8zy3WTn2tQl85jfl9wAL4iDMAADBpQtA=
Date: Fri, 08 Nov 2019 16:59:58 +0000
Message-ID: <HE1PR0701MB295390E6F623517DCAEF10CA937B0@HE1PR0701MB2953.eurprd07.prod.outlook.com>
References: <HE1PR0701MB2953A82FC4D71E30A5AA9FB8936B0@HE1PR0701MB2953.eurprd07.prod.outlook.com> <17322e43-cf31-a530-c0a9-9248af950807@cs.tcd.ie>
In-Reply-To: <17322e43-cf31-a530-c0a9-9248af950807@cs.tcd.ie>
Accept-Language: en-US
Content-Language: en-US
received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts)
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 2b4d43b6-9a26-44a9-535f-08d7646d1642
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Nov 2019 16:59:58.2213 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: +O1zBcWyHXkzv+7Q2qihn2Qg5ftTzFBBg1olJZOTeuEJjeBVgi6mkCfD0uiVwf8RoL0y18FiBeEEUQzzXFi+7g==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2778
Archived-At: <https://mailarchive.ietf.org/arch/msg/model-t/XUC9g2kl4kVC2GILB29d1W49dvY>
Subject: Re: [Model-t] Model-t Perspective and Method Questions
X-BeenThere: model-t@iab.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussions of changes in Internet deployment patterns and their impact on the Internet threat model <model-t.iab.org>
List-Unsubscribe: <https://www.iab.org/mailman/options/model-t>, <mailto:model-t-request@iab.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/model-t/>
List-Post: <mailto:model-t@iab.org>
List-Help: <mailto:model-t-request@iab.org?subject=help>
List-Subscribe: <https://www.iab.org/mailman/listinfo/model-t>, <mailto:model-t-request@iab.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Nov 2019 17:00:05 -0000

Hi Stephen,

Thanks very much for your feedback. It has been very helpful.

I will then start with documenting the attacks that exploited vulnerabilities in IETF protocol specifications, covering also implementation and deployment vulnerabilities, with an eye on mitigation options.

Thanks also for mentioning the heartbleed case for a start. I would appreciate it if other colleagues would also be able to send me pointers to additional cases.

Looking forward to good discussions in Singapore.

Cheers,

Ali

-----Original Message-----
From: Stephen Farrell <stephen.farrell@cs.tcd.ie> 
Sent: Thursday, November 7, 2019 6:26 PM
To: Rezaki, Ali (Nokia - DE) <ali.rezaki@nokia.com>; model-t@iab.org
Subject: Re: [Model-t] Model-t Perspective and Method Questions

Hi Ali,

Sorry for the slow response, I had a bunch of travels...

On 23/10/2019 15:42, Rezaki, Ali (Nokia - DE) wrote:
> If this perspective would make sense, would it be helpful then to 
> initially work on:
> 
> 1. Examples of attacks that exploited vulnerabilities in IETF 
> protocols that could not have been prevented by the current threat 
> model in BCP 72, and in what way the threat model in BCP 72 could be 
> modified to address these vulnerabilities?

I think that'd be really useful. I'd say documenting those however you find easiest would be fine - no need to worry about stuff being in Internet drafts for now anyway.

If doing that you might also want to note cases where the vulnerability was in the implementation or deployment but where (perhaps) some change to IETF protocols might have made exploitation harder. I guess heartbleed might be the canonical example there: had the TLS hearbeat response been e.g. a hash of the request then the implementation flaw might not have been near as bad, and IIRC we nearly did (but didn't quite) stumble on that change in IESG discussion of what became RFC6520, so I feel a little responsible myself for not spotting that then;-(

> 2. Requesting information from related IETF contributors about a map 
> of areas that IETF considers to be in scope for its work, and its 
> evolution over the years, also identifying the underlying principles?

Not as sure about that one - I suspect it could be a major time sink for you and it might be hard to get people to help you get it done.

Hope that helps,
S.

[Model-t] Model-t Perspective and Method Questions Rezaki, Ali (Nokia - DE)
Re: [Model-t] Model-t Perspective and Method Ques… Stephen Farrell
Re: [Model-t] Model-t Perspective and Method Ques… Rezaki, Ali (Nokia - DE)