Capwap Threat Analysis Draft Updates

1
Capwap Threat Analysis Draft Updates

• 70th IETF
• December 3, 2007

2
Overview

• Recd LC comments from 2 people (including
  preliminary secdir review)
• Mostly editorial in nature, several suggestions
  for improvements
• Incorporated most suggested changes

3
Update Details (1)

• Question raised as to how 802.11-specific
  analysis is/should be
• Added text explaining rationale for this
• CAPWAP originally designed for 802.11
• Seems to generalize, but not all suggested
  add-ons (e.g. RFID) have same threat model,
  considerations
• New bindings can reference this analysis (and
  differences) in their security considerations
  section if substantially the same
• May need their own threat analysis otherwise

4
Update details (2)

• Expanded acronyms where appropriate
• Added abbreviations/terms section
• Clarified that AAA or 802.11 link security are
  strictly out of scope for this doc
• Deleted tactical networks scenario, as this is
  very similar to telecommuter scenario
• Changed Channel Bindings to Cryptographic
  Bindings to avoid confusion
• Added some more language about trust relationships