Subject: [sacm] Architecture Comments

From: "Gonzalez, Juan" <[email-masked]>
Date: Tue, 11 Nov 2014 20:23:33 +0000

As discussed this morning.  Attached are a few comments on the Architecture document.

Happy to answer any questions.

·         Figure 1 should be titled "Figure 1: Simple Architecture Model"

·         AuthZ reference in the diagram is not defined anywhere else.  Should be taken out or define within the document

·         Section 2.1 A

o   distinction of Acquire vs Request should be better explained

o   There's a reference to "Query" in terms of a Consumer function.  Does this refer to the acquisition or request of information?

o   There's a reference to "updates" but it is not clear how this is performed

o   Anonymity is implied when references are made to the consumer desiring to obtain information without having to know the available providers.  However anonymity is not clearly expressed in the document

o   Discovery is mentioned for respective capabilities of the Providers but this brings up questions regarding how much information the provider is willing to share.  Would there be proprietary information that may not be willing to be share?

·         Section 2.2

o   The term "spontaneously" is used but should be replaced with maybe automated or on-demand based on request. The term implies that there are no parameters for contributing information.

o   The term "filter" but it is unclear on where this happens cause it can also be a function within the control plane or consumer.

o   It is not clear in this section whether a provider can also be the consumer of its own data

·         Section 2.3

o   Page 7 there is a reference to "SACM system" which is not defined.

·         Section 3

o   Figure 2 should be titled "Figure 2: Example Posture Information Flow"

§  The diagram should be better explained. The flow is not clear in the diagram

Regards,

Juan M. Gonzalez
Senior Strategist
Office of the Chief Technology Officer
Cybersecurity and Communications
U.S. Department of Homeland Security
(o)    703 235 5476
(bb) 202 713 0447