OPSEC WG _______

1
OPSEC WG_______

• Operational Security Capabilities for IP Network
  Infrastructure
• IETF 66 - Montreal

2
Front Administrativia

• Backup Minutes scribe?
• Jabber scribe? (opsec) rooms.jabber.ietf.org
• When speaking
• Please identify yourself (for the scribes)
• Dont mumble
• Speak at/to/near the microphone. The audio is
  being streamed out. (aka, eat the mike)

3
Agenda

• 1. Agenda Bashing.
• 2. Status of Current WG Docs.
• 3. New-ish WG Docs.
• - routing caps doc
• draft-zhao-opsec-routing-capabilities-01
• - new logging caps doc
• Draft-cain-logging-caps-00
• 4. New Things.
• - Darrell Lewis on an individual security draft
• - Pekkas two experiences draft
• 5. The way forward.
• 6. Adjourn.

4
Charter Outputs

• Framework Document
• Out for review
• Current Practices Document
• Out for review
• Individual Capability Documents
• Looking for editors/reviewers
• Profile Documents
• In the future

5
Document and WG status
6
Available Documents

• Framework for Operational Security Capabilities
  for IP Network Infrastructure
• draft-ietf-opsec-framework-02.txt ? ?
• Security Best Practices Efforts and Documents
• draft-ietf-opsec-efforts-04.txt ? WGLC
• Operational Security Current Practices
• draft-ietf-opsec-current-practices-05.txt ? WGLC
• Filtering Capabilities for IP Network
  Infrastructure
• draft-ietf-opsec-filtering-caps-01.txt

7
Available Documents

• Miscellaneous Capabilities for IP Network
  Infrastructure
• draft-ietf-opsec-misc-cap-00.txt
• Network Management Access Security Capabilities
• draft-ietf-opsec-nmasc-00.txt
• Routing Control Plane Security Capabilities
• draft-zhao-opsec-routing-capabilities-02.txt

8
Newly Available Documents

• Logging Capabilities for IP Network
  Infrastructure
• draft-cain-logging-caps-00.txt

9
Capabilities Docs in Charter

• ? Packet Filtering
• ? Event Logging
• (Management Capabilties)
• ? In-Band management
• ? Out-of-Band management
• ? Configuration and Management Interface
• ? Authentication, Authorization Accounting
  (AAA)
• ? Documentation and Assurance
• ? Miscellaneous

10
Profiles?
11
Adjusted Milestones
12
Other New Documents

• Service Provider Infrastructure Security
• draft-lewis-infrastructure-security-00.txt
• Backbone Infrastructure Attacks and Protections
• draft-savola-rtgwg-backbone-attacks-01.txt
• Experiences from Using Unicast RPF
• draft-savola-bcp84-urpf-experiences-01.txt

13
End
14
Discussion/Administratia

• Time for Discussion
• Maillist
• General Discussion opsec_at_ops.ietf.org
• To Subscribe opsec-request_at_ops.ietf.orgIn Body
  subscribe
• Archive http//ops.ietf.org/lists/opsec/