Subject: Re: [Ace] Fwd: New Version Notification for draft-ietf-ace-usecases-06.txt

From: Ludwig Seitz <[email-masked]>
Date: Thu, 1 Oct 2015 09:42:19 +0200

On 2015-09-27 19:50, [email-masked] wrote:
> *Dell - Internal Use - Confidential *
                         ^^^^^^^^^^^^^^
                      You've got a leak ;-)

> Hi Ludwig,
>
> Could not capture the below mentioned point earlier, besides this the
> document looks very comprehensive to me.
>
> */Section 3.1 talks about the DoS attacks. /*
>
> An attacker can potentially cause a DoS attack by various means, the
> easiest attack can be caused by forcing the device to send continuous or
> abnormally higher number of monitoring, troubleshooting or heartbeat
> messages to the GW or somewhere, thus forcing more number of
> transactions than expected, this may eventually lead to faster
> exhaustion of device resources like battery etc.
>
> Hence we should also add “Number of message exchanges required during
> monitoring or troubleshooting” besides the existing limitations,
> like“Number of message exchanges required by security measures”.
>

Hello Prashant,

thank you for your comment. I think this section needs clarification. 
The list of items was intended to specifically refer to the security 
mechanisms and protocols that will be designed in ACE. Therefore your 
suggested item "Number of message exchanges required during monitoring 
or troubleshooting" would be included in the "Number of message 
exchanges required by security measures" for that specific case.

I will try to rephrase that part to make it clearer.

Regards,

Ludwig

-- 
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelevägen 17
SE-223 70 Lund

Phone +46(0)70-349 92 51
http://www.sics.se