Re: [Trans] Threat model outline, attack model

Stephen Kent <kent@bbn.com> Thu, 02 October 2014 16:13 UTC

Message-ID: <542D79AD.3070702@bbn.com>
Date: Thu, 02 Oct 2014 12:13:33 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
MIME-Version: 1.0
To: David Leon Gil <coruus@gmail.com>
References: <5411E511.1040605@bbn.com> <CABrd9STmog8-JZCg9Tfv_ToUswY=9LBcZAPQM2cqUVcO0dhAnQ@mail.gmail.com> <54173589.3000404@bbn.com> <CABrd9SRShqm1r-2ajbqD5w1s686ciyjcEvywsXZaapgmi57NsA@mail.gmail.com> <54242F8A.2080602@bbn.com> <CABrd9SSwAdv-mAgofNT6bMWky7q=bZhAaX=L4gZUQDkROQ-3ZA@mail.gmail.com> <54258AF0.7090602@bbn.com> <CABrd9SQNXHdJQCC3JQJirqdkg_ub0oXCkxPqit9H6LjUPqNioA@mail.gmail.com> <54297249.1090409@bbn.com> <CABrd9ST59Yd3GDjxMiX9jMg68_BRd2_v0Mpo8u_oW1zM1VWjjA@mail.gmail.com> <542C1063.50404@bbn.com> <CAA7UWsW06qYWfO_CDGEvhR2OJbiodrJ96qPuz=6-DnK4XNdR7g@mail.gmail.com>
In-Reply-To: <CAA7UWsW06qYWfO_CDGEvhR2OJbiodrJ96qPuz=6-DnK4XNdR7g@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/trans/AkX6Tmmxuv-R5yEwWK4Vxeqcrdw
Cc: "trans@ietf.org" <trans@ietf.org>, Ben Laurie <benl@google.com>
Subject: Re: [Trans] Threat model outline, attack model
Precedence: list

David,

> On Wed, Oct 1, 2014 at 10:32 AM, Stephen Kent<kent@bbn.com>  wrote:
>> If a "broader scope" means using more ambiguous terms, I can't see why that would be an improvement.
>> It has the flavor of "CT is obviously good, so let's just do it."
> Okay. You've convinced me.
>
> So: I've disabled syslog on all my servers. I can't define a-priori
> what security issues logging might detect. Thus there's no point in
> logging anything.
This is a very poor analogy for many reasons, as Greg has already noted.

Steve

[Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Katriel Cohn-Gordon
[Trans] Fwd: Threat model outline, attack model Melinda Shore
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Dmitry Belyavsky
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Dmitry Belyavsky
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Dmitry Belyavsky
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Paul Wouters
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Matt Palmer
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Ralph Holz
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Matt Palmer
Re: [Trans] Threat model outline, attack model Greg
Re: [Trans] Threat model outline, attack model Gervase Markham
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model Ralph Holz
Re: [Trans] Threat model outline, attack model Ben Laurie
Re: [Trans] Threat model outline, attack model Stephen Kent
Re: [Trans] Threat model outline, attack model David Leon Gil
Re: [Trans] Threat model outline, attack model Tao Effect
Re: [Trans] Threat model outline, attack model Stephen Kent