From Internet-Drafts@ietf.org Thu Nov 11 08:30:03 2010 Return-Path: X-Original-To: opsec@core3.amsl.com Delivered-To: opsec@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 234773A69AA; Thu, 11 Nov 2010 08:30:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.177 X-Spam-Level: X-Spam-Status: No, score=-102.177 tagged_above=-999 required=5 tests=[AWL=0.422, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VALGm5mcqxKf; Thu, 11 Nov 2010 08:30:01 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 990683A6822; Thu, 11 Nov 2010 08:30:01 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 3.09 Message-ID: <20101111163001.891.57411.idtracker@localhost> Date: Thu, 11 Nov 2010 08:30:01 -0800 Cc: opsec@ietf.org Subject: [OPSEC] I-D Action:draft-ietf-opsec-efforts-13.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 16:30:03 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure Working Group of the IETF. Title : Security Best Practices Efforts and Documents Author(s) : C. Lonvick, D. Spak Filename : draft-ietf-opsec-efforts-13.txt Pages : 35 Date : 2010-11-11 This document provides a snapshot of the current efforts to define or apply security requirements in various Standards Developing Organizations (SDO). A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-opsec-efforts-13.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-opsec-efforts-13.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-11082823.I-D@ietf.org> --NextPart-- From RNATALE@mitre.org Thu Nov 11 22:14:56 2010 Return-Path: X-Original-To: opsec@core3.amsl.com Delivered-To: opsec@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E73A23A6AB6 for ; Thu, 11 Nov 2010 22:14:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5KtRfEwD8mml for ; Thu, 11 Nov 2010 22:14:48 -0800 (PST) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id BAE203A69C9 for ; Thu, 11 Nov 2010 22:14:03 -0800 (PST) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id oAC6EXxH026585 for ; Fri, 12 Nov 2010 01:14:34 -0500 Received: from imchub2.MITRE.ORG (imchub2.mitre.org [129.83.29.74]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id oAC6EXVs026582; Fri, 12 Nov 2010 01:14:33 -0500 Received: from IMCMBX2.MITRE.ORG ([129.83.29.209]) by imchub2.MITRE.ORG ([129.83.29.74]) with mapi; Fri, 12 Nov 2010 01:14:33 -0500 From: "Natale, Bob" To: "clonvick@cisco.com" , "dspak@cisco.com" Date: Fri, 12 Nov 2010 01:14:31 -0500 Thread-Topic: [OPSEC] I-D Action:draft-ietf-opsec-efforts-13.txt Thread-Index: AcuBvcs7uIyS7nZ/RISM1VWl8C3qnwAcDjkg Message-ID: <17969D855F28964C88D177D45B6CDF110500D83544@IMCMBX2.MITRE.ORG> References: <20101111163001.891.57411.idtracker@localhost> In-Reply-To: <20101111163001.891.57411.idtracker@localhost> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "opsec@ietf.org" Subject: Re: [OPSEC] I-D Action:draft-ietf-opsec-efforts-13.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Nov 2010 06:14:57 -0000 Hi Chris and David, I wanted to publicize this draft in some other venues, but have some reserv= ations at the moment ... based on an admittedly brief "quality check" of th= e information in the I-D. For example, I wanted to review the security management work cited for the = DMTF in your document, but both DMTF resources you point us to returned "Pa= ge not found" for me (at this time): http://www.dmtf.org/about/committees/spamWGCharter.pdf http://www.dmtf.org/about/committees/userWGCharter.pdf I'm guessing that maybe those might be valid URLs but member login might be= required to reach them...? A similar thing happens with the ATIS TMOC pointer, http://www.atis.org/013= 0/index.asp ... as soon as you get more than one layer deep in trying to tr= ack down what they might be doing in security management, you hit a member = login roadblock. =20 I might be asking for too much, but it seems to me that an IETF OPSEC WG re= view of relevant security management solutions should secure open access to= at least the fundamental OPSEC-related guidance published by the advertise= d SDOs. I think your I-D has substantial value, pending availability of th= e referenced information. Finally, the work underway in the TM Forum to enrich their Frameworx specif= ications with cyber-era security management coverage (see http://www.tmforu= m.org/SecurityManagement/9152/home.html) is missing from your document. Th= is work is distinguished by the fact that some data models in the network d= efense domain were contributed by a US Government agency to seed expansion = of the TM Forum's Information Framework (formerly known as the SID, Shared = Information & Data Model). It is anticipated that this work will eventuall= y tie in with NIST SCAP support in the Information Framework. Cheers, BobN -----Original Message----- From: opsec-bounces@ietf.org [mailto:opsec-bounces@ietf.org] On Behalf Of I= nternet-Drafts@ietf.org Sent: Thursday, November 11, 2010 11:30 AM To: i-d-announce@ietf.org Cc: opsec@ietf.org Subject: [OPSEC] I-D Action:draft-ietf-opsec-efforts-13.txt A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Operational Security Capabilities for IP N= etwork Infrastructure Working Group of the IETF. Title : Security Best Practices Efforts and Documents Author(s) : C. Lonvick, D. Spak Filename : draft-ietf-opsec-efforts-13.txt Pages : 35 Date : 2010-11-11 This document provides a snapshot of the current efforts to define or apply security requirements in various Standards Developing Organizations (SDO). A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-opsec-efforts-13.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. From clonvick@cisco.com Tue Nov 16 11:15:44 2010 Return-Path: X-Original-To: opsec@core3.amsl.com Delivered-To: opsec@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 813A03A6DFB for ; Tue, 16 Nov 2010 11:15:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1+1Qf90RYC9E for ; Tue, 16 Nov 2010 11:15:42 -0800 (PST) Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by core3.amsl.com (Postfix) with ESMTP id CE43A3A6BC6 for ; Tue, 16 Nov 2010 11:15:42 -0800 (PST) Authentication-Results: sj-iport-5.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AiYEALdn4kyrR7Ht/2dsb2JhbACUIo5AcaRimyiDDQGCPQSEWg X-IronPort-AV: E=Sophos;i="4.59,207,1288569600"; d="scan'208";a="287472712" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-5.cisco.com with ESMTP; 16 Nov 2010 19:16:11 +0000 Received: from sjc-cde-011.cisco.com (sjc-cde-011.cisco.com [171.69.16.68]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id oAGJGBQx006251; Tue, 16 Nov 2010 19:16:11 GMT Date: Tue, 16 Nov 2010 11:16:10 -0800 (PST) From: Chris Lonvick To: "Natale, Bob" In-Reply-To: <17969D855F28964C88D177D45B6CDF110500D83544@IMCMBX2.MITRE.ORG> Message-ID: References: <20101111163001.891.57411.idtracker@localhost> <17969D855F28964C88D177D45B6CDF110500D83544@IMCMBX2.MITRE.ORG> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: "opsec@ietf.org" Subject: Re: [OPSEC] I-D Action:draft-ietf-opsec-efforts-13.txt X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 19:15:44 -0000 Hi Bob, Yes - I've let it get out of date. :-( I'm planning on spending some time with it over the end-of-year holiday season. I appreciate the pointers you've given and I'll check through the rest as well. Please do send me more pointers to relevent work if you have any. Thanks, Chris On Fri, 12 Nov 2010, Natale, Bob wrote: > Hi Chris and David, > > I wanted to publicize this draft in some other venues, but have some reservations at the moment ... based on an admittedly brief "quality check" of the information in the I-D. > > For example, I wanted to review the security management work cited for the DMTF in your document, but both DMTF resources you point us to returned "Page not found" for me (at this time): > > http://www.dmtf.org/about/committees/spamWGCharter.pdf > http://www.dmtf.org/about/committees/userWGCharter.pdf > > I'm guessing that maybe those might be valid URLs but member login might be required to reach them...? > > A similar thing happens with the ATIS TMOC pointer, http://www.atis.org/0130/index.asp ... as soon as you get more than one layer deep in trying to track down what they might be doing in security management, you hit a member login roadblock. > > I might be asking for too much, but it seems to me that an IETF OPSEC WG review of relevant security management solutions should secure open access to at least the fundamental OPSEC-related guidance published by the advertised SDOs. I think your I-D has substantial value, pending availability of the referenced information. > > Finally, the work underway in the TM Forum to enrich their Frameworx specifications with cyber-era security management coverage (see http://www.tmforum.org/SecurityManagement/9152/home.html) is missing from your document. This work is distinguished by the fact that some data models in the network defense domain were contributed by a US Government agency to seed expansion of the TM Forum's Information Framework (formerly known as the SID, Shared Information & Data Model). It is anticipated that this work will eventually tie in with NIST SCAP support in the Information Framework. > > Cheers, > BobN > > -----Original Message----- > From: opsec-bounces@ietf.org [mailto:opsec-bounces@ietf.org] On Behalf Of Internet-Drafts@ietf.org > Sent: Thursday, November 11, 2010 11:30 AM > To: i-d-announce@ietf.org > Cc: opsec@ietf.org > Subject: [OPSEC] I-D Action:draft-ietf-opsec-efforts-13.txt > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the Operational Security Capabilities for IP Network Infrastructure Working Group of the IETF. > > > Title : Security Best Practices Efforts and Documents > Author(s) : C. Lonvick, D. Spak > Filename : draft-ietf-opsec-efforts-13.txt > Pages : 35 > Date : 2010-11-11 > > This document provides a snapshot of the current efforts to define or > apply security requirements in various Standards Developing > Organizations (SDO). > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-ietf-opsec-efforts-13.txt > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > Below is the data which will enable a MIME compliant mail reader > implementation to automatically retrieve the ASCII version of the > Internet-Draft. > From iesg-secretary@ietf.org Fri Nov 19 15:52:58 2010 Return-Path: X-Original-To: opsec@core3.amsl.com Delivered-To: opsec@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8182C3A6922; Fri, 19 Nov 2010 15:52:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.56 X-Spam-Level: X-Spam-Status: No, score=-102.56 tagged_above=-999 required=5 tests=[AWL=0.039, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tqcGR2uSiVsw; Fri, 19 Nov 2010 15:52:57 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AFEF93A6920; Fri, 19 Nov 2010 15:52:57 -0800 (PST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: IETF-Announce X-Test-IDTracker: no X-IETF-IDTracker: 3.09 Message-ID: <20101119235257.30350.39287.idtracker@localhost> Date: Fri, 19 Nov 2010 15:52:57 -0800 Cc: opsec@ietf.org Subject: [OPSEC] Last Call: (Protecting The Router Control Plane) to Informational RFC X-BeenThere: opsec@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: opsec wg mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 23:52:58 -0000 The IESG has received a request from the Operational Security Capabilities for IP Network Infrastructure WG (opsec) to consider the following document: - 'Protecting The Router Control Plane' as an Informational RFC The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2010-12-03. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. The file can be obtained via http://datatracker.ietf.org/doc/draft-ietf-opsec-protect-control-plane/ IESG discussion can be tracked via http://datatracker.ietf.org/doc/draft-ietf-opsec-protect-control-plane/ No IPR declarations have been submitted directly on this I-D.