[Smart] CARIS2 - thank you
Kirsty P <Kirsty.p@ncsc.gov.uk> Mon, 04 March 2019 14:10 UTC
Return-Path: <Kirsty.p@ncsc.gov.uk>
X-Original-To: smart@ietfa.amsl.com
Delivered-To: smart@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E14B1310D8 for <smart@ietfa.amsl.com>; Mon, 4 Mar 2019 06:10:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ncsc.gov.uk
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id awuJg_SlCbSt for <smart@ietfa.amsl.com>; Mon, 4 Mar 2019 06:10:12 -0800 (PST)
Received: from GBR01-LO2-obe.outbound.protection.outlook.com (mail-eopbgr100095.outbound.protection.outlook.com [40.107.10.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AE3D1311AC for <smart@irtf.org>; Mon, 4 Mar 2019 06:10:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ncsc.gov.uk; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=57dhp9lWnZ7RqHSQwfDZWwQ/KxY32hi9HgQ7UpYZi4M=; b=Yx5hZudrhnhJDQa87JpkyTBWgRYBMrLm6F47lC8SjAvDX9q7ylRmO4f0SGjaqUyMWGU46OxaqlQ2kxNak789ZSXNLy0CuQ3eWTb0aqEVid6Ao7j8u9I6zlWmAhWa4lhJWYi25blkkRVB7IPMT6F3C/xUJeX6WzWzDMfMSXxTE7s=
Received: from CWLP123MB2467.GBRP123.PROD.OUTLOOK.COM (20.176.62.15) by CWLP123MB1953.GBRP123.PROD.OUTLOOK.COM (20.176.59.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1665.16; Mon, 4 Mar 2019 14:10:07 +0000
Received: from CWLP123MB2467.GBRP123.PROD.OUTLOOK.COM ([fe80::da8:590:973e:c17c]) by CWLP123MB2467.GBRP123.PROD.OUTLOOK.COM ([fe80::da8:590:973e:c17c%4]) with mapi id 15.20.1665.020; Mon, 4 Mar 2019 14:10:07 +0000
From: Kirsty P <Kirsty.p@ncsc.gov.uk>
To: "smart@irtf.org" <smart@irtf.org>
Thread-Topic: CARIS2 - thank you
Thread-Index: AQHU0pM6IcivviYRS0yyKgRT8c1oBQ==
Date: Mon, 04 Mar 2019 14:10:07 +0000
Message-ID: <CWLP123MB24670FC35CFFAAA98F93C702D7710@CWLP123MB2467.GBRP123.PROD.OUTLOOK.COM>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Kirsty.p@ncsc.gov.uk;
x-originating-ip: [51.140.114.144]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a1b60a3a-8462-4574-c057-08d6a0ab1b60
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(7168020)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(2017052603328)(7153060)(7193020); SRVR:CWLP123MB1953;
x-ms-traffictypediagnostic: CWLP123MB1953:
x-ms-exchange-purlcount: 1
x-microsoft-exchange-diagnostics: 1; CWLP123MB1953; 23:z9XZ7uqg2XZcl9SztSxFvId+MttMGkKRVRtLQ7gz6Jtc/oMgBiby6U5q3ORKX+FJFb64yP+Rp232OqNY3MtuDWBzlPsiUd48296PLZMb9Ct7vZmryDzbKLAQxCJUgBANlqFIe9ErjFWGWyUQfmCeDJjyIeMmoKp2IWeEpdB1C7ZZa472SIWDXyTQtdhhebWFN0j1fC4iCmnwLykZYvDCdX808WWvmswUuyOBTfKhBsbk5Jz6cTTXSjKcJWiQHDV7N5KFn51e11cOxfdptAEaob8Y3Z31j3rmy9102g4tkPx896mKFr5ugrlXU7KuEq/zVjvHjbzKpVgnKi9jf1iHtXh+5T38yts56SYdGZtUAL47aPNE8jylTUjkP994fxjtSFUpNEnM1KxqLu1e79bv1fvu54JCT5Tiv9vfiMEwnK+dz+LZ1vbWC3KAwcEl5pJzjIJ2MXvEZTQe2nCTVgSsu0IlgHgKrnMVFR4dvnBzXLyH+Lj5GgMwZEWPPkhu04YzghgHr4YpTBPJ0Yn0WISFVPRLN+Fm+3V1c9is3XETn0jynrNqKNU8NGj6dAh4qgRBgRft0wW7YrzNJHdZq0JnGGGro3EM14FBuoQBWoqLHSm4V7K5w4UR1MsGE530USjxZe3z40r7altvylzw87BooBAZcecR91WtdOmSiaIZJNmF/IR0XABibkNLxu4VDuPy0NYIKAMn/TfepL7Of6FGI3MyQF053/ap/mZsISDZ/wuLiPFPVKEHys8MCjmT9vE7XhLdbeYw4NbHnzKBmHAVsaXX8tgaXLFF3OvCh8lvbduXJ8d5FL2cDkfYtDuT31WDdjgzNcbB/HGMzmHkEPpcD50QBptOQGrRsWCAnZEMU6TE/VdNE8fNTVOYYrDh38kqqkZJy3+1wRMjPS/RghqENU07A8P8ypseHsc3Fm6+cDSbmu0nxzE3RFoch6IbCHmln58pN1iluVjQh7t6OP9SCG2KM7axo9b+FA1jb23Ea3mCzs7hEho17H/AsEhS8FKMu4Tm5GOnX8kNUAjRXN5i9Rq5Gl9CO+hz8NeZaebHRJMn4UtDctC0N05oHaRiMd5VKr3VJPJwDJJrRS2un05bAaeLpZIRXklVLFfRnw/bF4CV96Ifw0ZNXuMOKtbr5m0++XE7R58kD6CkpIiVrwg15J38EmjUr4sUq0huq4m7FhD0QVgSbj2Po3C5MQXW2kgZA42PxGKTxuXiUIlni0U/zj+fWxsiiCVbePrmGlxEoxUWyl+BKe1zc2Uy1OG4bwZj9hUDBoC0HJoRw18P2KIk4ZCcYoJi6+logd9JwksdsBtxoO5hZhw5SJO3gvefMpYAged3YLRjhfR1JJkPNu9xmiJdo5R24i/9tYwFgonRlbFnfrvmDArN+fh/ijHcdbRZhYKc1xGC6ISLE8PSXb404alY/IAHgvbiXrQpMHeVnrE=
x-microsoft-antispam-prvs: <CWLP123MB19536B85F1AC274CA200B3A9D7710@CWLP123MB1953.GBRP123.PROD.OUTLOOK.COM>
x-forefront-prvs: 09669DB681
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(136003)(39850400004)(366004)(346002)(396003)(54164003)(189003)(199004)(8676002)(66066001)(66574012)(81156014)(81166006)(1730700003)(6606003)(99286004)(6916009)(1015004)(2906002)(7696005)(4744005)(102836004)(86362001)(14444005)(256004)(6506007)(6116002)(74316002)(3846002)(26005)(5660300002)(55236004)(7736002)(97736004)(5640700003)(105586002)(9686003)(72206003)(53936002)(6436002)(54896002)(55016002)(6306002)(186003)(19627405001)(236005)(478600001)(2351001)(486006)(106356001)(476003)(14454004)(966005)(2501003)(606006)(25786009)(68736007)(74482002)(33656002)(75922002)(8936002)(316002)(71190400001)(71200400001); DIR:OUT; SFP:1102; SCL:1; SRVR:CWLP123MB1953; H:CWLP123MB2467.GBRP123.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: ncsc.gov.uk does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: 5RTb5LbjheJ1R52S6hZG5nQMH43YOr1PRh1QZMvW9DUCGKMh2/YoEjXxOZ++UmSTH0fj/icZbY2L4Ma/wCPsjH3YyDmATIZOuohhkgoMrFtvGSmKDbu2i3RNreyBuLWGOu4DI0tr9jFWKKiUCB8zX0cSgG1rpC6+k//Hf6AU7nk6A3bsY9BjYi/pivXaqBMfGzNptuNZRFF/JgKKPA4JjQ8gtWAgjYorxVvx3kOxQrrt90EJsDMJQovbvVvjD4Xi+iUIDJK5WAHeycjsMF7qq82s2jZm9cVuO8Y4eIk9oromazMKXvWgH+xYDo/B/DHk6Lg8XNAFeF+OLC4414MLqfIjcWZEK15AJLYWs0XiD8G3OM/zsu69XTR9QeFITcsiWG0ToiTxea8mnbNC5kLVmW61p+Pl4+YKzqglXr1lmYQ=
Content-Type: multipart/alternative; boundary="_000_CWLP123MB24670FC35CFFAAA98F93C702D7710CWLP123MB2467GBRP_"
MIME-Version: 1.0
X-OriginatorOrg: ncsc.gov.uk
X-MS-Exchange-CrossTenant-Network-Message-Id: a1b60a3a-8462-4574-c057-08d6a0ab1b60
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Mar 2019 14:10:07.6869 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 14aa5744-ece1-474e-a2d7-34f46dda64a1
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWLP123MB1953
Archived-At: <https://mailarchive.ietf.org/arch/msg/smart/pWzxYwAwjg6MFgTQ0UM0esy1yb4>
Subject: [Smart] CARIS2 - thank you
X-BeenThere: smart@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Stopping Malware And Researching Threats <smart.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/smart>, <mailto:smart-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/smart/>
List-Post: <mailto:smart@irtf.org>
List-Help: <mailto:smart-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/smart>, <mailto:smart-request@irtf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Mar 2019 14:10:14 -0000
SMART folks, Thanks to everyone who attended the CARIS2 (Co-ordinating Attack Response at Internet Scale) workshop last week, 28th February - 1st March, and thanks to the Internet Society for their sponsorship! It was great to collaborate with the diverse set of people and viewpoints in the room, and get a full range of perspectives on how to co-ordinate response to attacks at scale. I'm looking forward to working on the concrete actions and seeing our research ideas blossom in SMART. There will be a full write-up in due course and probably an interim update at the Prague meeting for SMART (confirmed for Monday 25th March, at 16:10-18:10). You can also find more detail on the workshop, included presented papers, here: https://www.internetsociety.org/events/caris2 Kirsty This information is exempt under the Freedom of Information Act 2000 (FOIA) and may be exempt under other UK information legislation. Refer any FOIA queries to ncscinfoleg@ncsc.gov.uk
- [Smart] CARIS2 - thank you Kirsty P