[Roll] [roll] #154: draft-ietf-roll-security-threats - Add further clarification/information - Section 7

["roll issue tracker" <[e-mail]>]

#154: draft-ietf-roll-security-threats - Add further clarification/information -
Section 7

 Reported by Robert Cragie - 02/17/2014

 Section 7 Confidentiality Features

    The assessments and analysis in Section 5 examined all areas of
    threats and attacks that could impact routing, and the
    countermeasures presented in Section 6 were reached without confining
    the consideration to means only available to routing.  This section
    puts the results into perspective and provides a framework for
    addressing the derived set of security objectives that must be met by
    the routing protocol(s) specified by the RPL Working Group.

 <rcc>I thought the idea was there was no framework being presented in this
 security threats draft? There is no RPL working group</rcc>


 7.2.  Integrity Features



    While logging is critical, it is often impossible.

 <rcc>Why is it "often impossible"? Where is the justification for such a
 claim?</rcc>

 Section 7.3.  Availability Features

    o  MAY restrict neighborhood cardinality;

    ...

    o  MAY use geographic information for flow control.

 <rcc>What "MAY" do all the above things? Routing? It doesn't read
 correctly.</rcc>


 Section 7.4.  Key Management

    While RPL has secure modes, but some modes are impractical without  use
 of public key cryptography believed to be too expensive by many. RPL
 layer-3 security will often depend upon existing LLN layer-2 security
 mechanisms, which provides for node authentication, but
    little in the way of node authorization.

 <rcc>Not necessarily - again, I do not understand why L2 security implies
 "something less". If anything, L2 security is better as the integrity code
 covers more of the PDU (i.e. the MAC addresses) making e.g. wormhole
 attacks harder as it is harder to spoof addresses.</rcc>

-- 
-------------------------------------+-------------------------------------
 Reporter:                           |      Owner:  draft-ietf-roll-
  [e-mail]          |  [e-mail]
     Type:  defect                   |     Status:  new
 Priority:  major                    |  Milestone:
Component:  security-threats         |    Version:
 Severity:  In WG Last Call          |   Keywords:
-------------------------------------+-------------------------------------

Ticket URL: <http://trac.tools.ietf.org/wg/roll/trac/ticket/154>
roll <http://tools.ietf.org/wg/roll/>