Re: [RPSEC] Re: draft-convery-bgpattack-00

[Sean Convery <[e-mail]>]

On 11/5/02 at 12:02 PM, [e-mail] wrote:
>
>  BTW, I found the AND/OR stuff difficult to follow. 
>  It seems you can write:
>  (A || B || C) && D
>
>  as:
>       OR  A
>           B
>           C
>       AND D
>
>  What's weird is that the OR is to the left of the first item
(prefix), while the
>AND is between C and D (infix).
>  Perhaps I am misreading, and in fact the above describes:
>     A || B || (C && D)

What it should mean is (A or B or C) AND D

as in:

Attack:
OR  1. Send message to router causing reset
    OR  1. Send RST message to TCP stack
        2. Send BGP Message
        OR  1. Notify
            2. Open
            3. Keepalive
    AND 3. TCP Sequence number Attack (Appendix A.4)
    2. Alter configuration via. compromised router (Appendix A.1)
    
You can send message causing a reset by 1. sending the message to the
TCP stack, or 2. sending a BGP message.  But in both cases you need 3.
the TCP sequence number attack.

There shouldn't be any cases where an AND or OR is between two numbers.
it should alway be on the same line as a goal on the tree.

We tried to explain the notation in the Intro section.  If you can
provide some specific comments on how to make this better (short of
rewriting the CERT paper :)) we'd love to hear them.

Thanks,

Sean
_______________________________________________
RPSEC mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/rpsec