[T2TRG] FW: New Version Notification for draft-mattsson-t2trg-amplification-attacks-00.txt

[John Mattsson <[e-mail]>]

Hi,

This -00 draft contains the amplification sections that used to be part of
https://datatracker.ietf.org/doc/draft-mattsson-core-coap-attacks/

Updates since draft-mattsson-core-coap-attacks-02

  *   Rewritten abstract and intro to match the current scope
  *   New references and a new paragraph summarizing real-world
CoAP amplification attacks. Achim pointed out that some of the
references (popular media) had confusing details that was likely wrong.
  *   Removed “remedy” and all use of the word “soft” after comments from Carsten
  *   New section on MITM attacks and address validation.

I think it is great that T2TRG is planning to look at denial-of-service attacks as part of the SECCORE activity. Denial-of-service attacks are a HUGE practical problem. The draft is limited to amplification attacks and all the examples are CoAP. T2TRG should likely look at other kinds of DoS attacks as well (compromised nodes, protocol attacks like TCP SYN Flood, etc.) as well as other protocols then CoAP.

Cheers,
John

From: [e-mail] <[e-mail]>
Date: Friday, 11 February 2022 at 21:57
To: Christian Amsüss <[e-mail]>, Göran Selander <[e-mail]>, John Mattsson <[e-mail]>, Christian Amsuess <[e-mail]>, Göran Selander <[e-mail]>, John Mattsson <[e-mail]>
Subject: New Version Notification for draft-mattsson-t2trg-amplification-attacks-00.txt

A new version of I-D, draft-mattsson-t2trg-amplification-attacks-00.txt
has been successfully submitted by John Preuß Mattsson and posted to the
IETF repository.

Name:           draft-mattsson-t2trg-amplification-attacks
Revision:       00
Title:          Amplification Attacks Using the Constrained Application Protocol (CoAP)
Document date:  2022-02-11
Group:          Individual Submission
Pages:          14
URL:            https://www.ietf.org/archive/id/draft-mattsson-t2trg-amplification-attacks-00.txt
Status:         https://datatracker.ietf.org/doc/draft-mattsson-t2trg-amplification-attacks/
Html:           https://www.ietf.org/archive/id/draft-mattsson-t2trg-amplification-attacks-00.html
Htmlized:       https://datatracker.ietf.org/doc/html/draft-mattsson-t2trg-amplification-attacks


Abstract:
   Protecting Internet of Things (IoT) devices against attacks is not
   enough.  IoT deployments need to make sure that they are not used for
   Distributed Denial-of-Service (DDoS) attacks.  DDoS attacks are
   typically done with compromised devices or with amplification attacks
   using a spoofed source address.  This document gives examples of
   different theoretical amplification attacks using the Constrained
   Application Protocol (CoAP).  The goal with this document is to raise
   awareness and to motivate generic and protocol-specific
   recommendations on the usage of CoAP.  Some of the discussed attacks
   can be mitigated by not using NoSec or by using the Echo option.




The IETF Secretariat