[Sis-dtn] Spring Meeting Agenda Add: BPSec Analysis and Improvements

Mon Oct 7 06:56:51 UTC 2024

Dear Tomaso and All,

Please find below proposals for agenda items for the SEC-DTN meeting:

*	BPSec security model analysis (X. Tian et al) – ~45 min

*	Bundle Protocol Key Distribution (BPKD) testbed (ESA) – ~1hr

*	Updates and scenario test results
*	Discussion

*	Other Discussion items (All)  - ~45 min

*	Interplanetary MultiCast (IMC) – security considerations section

*	Preliminary content ideas

Plan/actions to produce

*	BPSec Interoperability Testing

*	Pre-requisites (readiness, default security contexts, alignment with existing BP setup, ..)
*	Alignment on possible Recommended Practice for SSI Interoperability Testing
*	Tentative schedule & participants

Best regards,

Marcus

From: Tomaso.deCola at dlr.de <Tomaso.deCola at dlr.de> 
Sent: Tuesday, September 24, 2024 10:48 AM
To: keithlscott at gmail.com; xisen.tian1 at nps.edu
Cc: sis-dtn at mailman.ccsds.org; britta.hale at nps.edu; b.m.wimalasiri at sheffield.ac.uk; dowling.bj at gmail.com; durst at mitre.org; Howard.Weiss at parsons.us; Marcus Wallum <Marcus.Wallum at esa.int>
Subject: RE: [Sis-dtn] Spring Meeting Agenda Add: BPSec Analysis and Improvements

Hi Keith, All,

Concerning the meetings schedule, the slot for the joint SEC/DTN meeting is already scheduled on Thursday the 7th in the afternoon, starting from 1330. My suggestion would be then to iterate with SEC folks to come up with a list of items and related time allocation for the joint meeting. I’m cc’ing Howie and Marcus to converge.

Regards,

Tomaso

From: Keith Scott < <mailto:keithlscott at gmail.com> keithlscott at gmail.com> 
Sent: Dienstag, 24. September 2024 10:39
To: Tian, Xisen (LT) < <mailto:xisen.tian1 at nps.edu> xisen.tian1 at nps.edu>
Cc:  <mailto:sis-dtn at mailman.ccsds.org> sis-dtn at mailman.ccsds.org; Hale, Britta (CIV) < <mailto:britta.hale at nps.edu> britta.hale at nps.edu>; Bhagya Wimalasiri < <mailto:b.m.wimalasiri at sheffield.ac.uk> b.m.wimalasiri at sheffield.ac.uk>; Benjamin Dowling < <mailto:dowling.bj at gmail.com> dowling.bj at gmail.com>; Robert C Durst < <mailto:durst at mitre.org> durst at mitre.org>; de Cola, Tomaso < <mailto:Tomaso.deCola at dlr.de> Tomaso.deCola at dlr.de>
Subject: Re: [Sis-dtn] Spring Meeting Agenda Add: BPSec Analysis and Improvements

Xisen, this seems very interesting and useful.  I added a possible agenda item for the  <https://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpublic.ccsds.org%2Fmeetings%2F2024Fall%2Fdefault.aspx&data=05%7C02%7CMarcus.Wallum%40esa.int%7C6c6586103f6e496bf24808dcdc758893%7C9a5cacd02bef4dd7ac5c7ebe1f54f495%7C0%7C0%7C638627644608512977%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=YjxA7WndYbz7NMnmjIeyYmpbfG9a6HC3D9zRyIbQ33A%3D&reserved=0> Fall CCSDS meetings where the SIS-DTN WG will have a joint meeting with the Security WG.  I don't think we have a date/time for that nailed down yet but when we do we can see if we can get you in there.

Best Regards,

  --keith

On Tue, Sep 24, 2024 at 3:23 AM Tian, Xisen (LT) via SIS-DTN < <mailto:sis-dtn at mailman.ccsds.org> sis-dtn at mailman.ccsds.org> wrote:

Hello, 

I’m Xisen Tian, I’m a PhD student being advised by Dr. Britta Hale and Scott Burleigh at the Naval Postgraduate School researching cryptographic analysis of DTN protocols. My co-authors (cc’d) and I have completed a formal analysis of BPSec with recommendations for improvements which we are ready to present to the DTN WG at the upcoming fall meeting in London. We would like to request a 30-45 minute time slot in the agenda to do a presentation of our work followed by discussion on how our improvements could be adopted (if at all). Our full paper is forthcoming: it has been submitted to a journal and we are currently going through the review/revision process. I’ve pasted our abstract below:

ABSTRACT: Space networking has become an increasing area of development with the advent of commercial satellite networks such as those hosted by Starlink and Kuiper, and increased satellite and space presence by governments around the world. Yet, historically such network designs have not been made public, leading to limited formal cryptographic analysis of the security offered by them. One of the few public protocols used in space networking is the Bundle Protocol, which is secured by Bundle Protocol Security (BPSec), an Internet Engineering Task Force (IETF) standard. We undertake a first analysis of BPSec, building a model of the secure channel security goals stated in the IETF standard, and note issues therein with message loss detection. We prove security of BPSec under a limited model and also provide a stronger construction, one that supports the Bundle Protocol’s functionality goals while also ensuring destination awareness of missing messages components.

Please let me know if you have questions, concerns, or feedback. Thank you. 

Very Respectfully, 

Xisen Tian

LT     USN 

PhD Student

Applied Cryptography

Naval Postgraduate School

_______________________________________________
SIS-DTN mailing list
 <mailto:SIS-DTN at mailman.ccsds.org> SIS-DTN at mailman.ccsds.org
 <https://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmailman.ccsds.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fsis-dtn&data=05%7C02%7CMarcus.Wallum%40esa.int%7C6c6586103f6e496bf24808dcdc758893%7C9a5cacd02bef4dd7ac5c7ebe1f54f495%7C0%7C0%7C638627644608537464%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=DrU9q3d5OH4yoS0XgktR9xuL9JNKEMFvUV23u6RyVjw%3D&reserved=0> https://mailman.ccsds.org/cgi-bin/mailman/listinfo/sis-dtn

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.ccsds.org/pipermail/sis-dtn/attachments/20241007/cb54cbfb/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7205 bytes
Desc: not available
URL: <http://mailman.ccsds.org/pipermail/sis-dtn/attachments/20241007/cb54cbfb/attachment-0001.bin>