[wot-security] minutes - 11 August 2017

available at:
  https://www.w3.org/2017/08/11-wot-sec-minutes.html

also as text below.

Kazuyuki

---

   [1]W3C

      [1] http://www.w3.org/

                               - DRAFT -

                           WoT IG - Security

11 Aug 2017

   See also: [2]IRC log

      [2] http://www.w3.org/2017/08/11-wot-sec-irc

Attendees

   Present
          Kaz_Ashimura, Elena_Reshetova, Michael_Koster,
          Michael_McCool, Soumya_Kanti_Datta, Tomoaki_Mizushima,
          Uday_Davuluru

   Regrets
   Chair
          McCool

   Scribe
          kaz

Contents

     * [3]Topics
         1. [4]new slot for the call
         2. [5]agenda
         3. [6]TD Review
         4. [7]Threat model questionnaire
     * [8]Summary of Action Items
     * [9]Summary of Resolutions
     __________________________________________________________

new slot for the call

   elena: not available this time on Friday

   mccool: let's create a doodle

   kaz: will do

agenda

   elena: answers of the questionnaire?
   ... we can walk through the results

   mccool: ok

   kaz: btw, Sebastian mentioned he wanted one more week before
   the review for TD doc
   ... he repeated that view today during the TD call today

   mccool: updates the agenda wiki

TD Review

   mccool: created a branch for TD
   ... can generate a pullrequest
   ... the issue is there is some portion about security within
   the current TD doc
   ... but not ready for review yet
   ... but we can review the current version briefly

   [10]TD draft

     [10] https://w3c.github.io/wot-architecture/

   mccool: there is a security section but very brief

   elena: some more description in the Current Practices document

   mccool: right
   ... what to for then?
   ... the question is what is the minimal thing we need to do?
   ... also not sure about the all the security options

   elena: what is important is backtracking the model
   ... security requirements for TD
   ... concrete measure
   ... options for security
   ... optional vs mandatory
   ... privacy, security
   ... why/when to use

   mccool: what situation requires you to use
   ... how to organize this task?
   ... what kind of structure?

   elena: explain to people why security is needed for TD

   mccool: thread model document
   ... need different level of publication
   ... we could create a wiki page

   kaz: wiki, md or whatever

   mccool: standard document
   ... 4. vocabulary definition
   ... TD model has security portion
   ... but quite empty
   ... also the vocabulary sections are automatically generated
   based on some ontology
   ... so we should not edit the section 4 directly
   ... there is another security section "4.2.8 Security"
   ... also "5.3 Security"
   ... this is for serialization, e.g., JSON-LD
   ... and section "6. Security" is empty
   ... TD TF wanted us for review
   ... let's think about outline

   kaz: several viewpoints, e.g., author, developer, user?

   mccool: issue with the structure
   ... and security mechanism

   [11]McCool's branch

     [11] https://github.com/mmccool/wot-thing-description

   mccool: talked with several people
   ... protocols to map to
   ... CoAP, MQTT, HTTP/HTTPS
   ... Amazon started security on WebSocket
   ... (updates the Security section on his branch)
   ... the threat model has two assets: TD itself and the
   resources that can be accessed via the TD
   ... risks: adversaries and prioritized threats
   ... General: that we "do no harm": security of described
   protocols should be maintained. Don't introduce new security
   mechanisms, but do prederve functionality of existing
   mechanisms
   ... Exposing: when exposing a TD, especially via the Scripting
   API, itshould be possible to use best practices for security
   ... Consuming: a consumed TD should accurately reflect the
   actual security status of a target device
   ... Protocols: we will prioritize the following protocols:
   HTTP(S), CoAP(S)
   ... Recommended Practices
   ... secure delivery and storage of TD
   ... implement an access control mechnism for the TD
   ... use of secure transports
   ... use CoAPS and HTTPS rather tna CoAP and HTTP whenever
   possible
   ... maintaining privacy
   ... avoid exposing personally indentifiable information in a TD
   ... avoid exposing an immutable hardware identifier
   ... APIs should only provide the functionality necessary, and
   no more
   ... devices should be strongly encapsulated
   ... consider different levels of access for different users
   ... (will create a branch on McCool's branch)

   elena: can add some more edit as well

   mccool: we should concentrate on the security section

   <McCool> [12]https://github.com/mmccool/wot-thing-description

     [12] https://github.com/mmccool/wot-thing-description

Threat model questionnaire

   mccool: quickly review the results
   ... anything missing, Koster?

   koster: no specific suggestions at the moment

   kaz: can we see the results at some URL?

   elena: can create a snapshot and let you all know
   ... (goes through the results)
   ... [What are the typical high-level WoT use cases/scenarios
   when privacy might be at risk?

   mccool: separate sections for security and privacy?
   ... would be better to have two separate sections

   elena: [What identifieres (device, thing, user, etc.) do the
   WoT define in the TD or other places?

   mccool: potentially use some ID
   ... identifiers pointing software objects
   ... destroy things we created
   ... disconnected with the hardware itself
   ... stable identifiers are used during the lifecycle
   ... after that, the identifiers go away
   ... name field and id field
   ... URL field
   ... we can change them
   ... but vendor information, etc., should be protected
   ... sensitive information

   elena: vendor id itself is not about the hardware?

   mccool: which device it is
   ... you can talk with the driver
   ... recommend we should not include vendor ID if sensitive
   ... industry environment would make sense
   ... let's add some recommendations to the security section
   ... semantic information on the device
   ... what's the least?

   elena: ok
   ... and we asked about the purpose
   ... [What is their purpose (why can they not be omitted)?

   mccool: the last person mentions that without id it's
   impossible to communicate
   ... Elena, please create a PDF version of the results and share
   it with the group

   elena: ok

   mccool: we'll do a doodle poll for the upcoming calls

   [ adjourned ]

Summary of Action Items

Summary of Resolutions

   [End of minutes]
     __________________________________________________________


    Minutes formatted by David Booth's [13]scribe.perl version
    1.152 ([14]CVS log)
    $Date: 2017/08/11 13:16:38 $

     [13] http://dev.w3.org/cvsweb/~checkout~/2002/scribe/scribedoc.htm
     [14] http://dev.w3.org/cvsweb/2002/scribe/

Received on Friday, 11 August 2017 13:21:54 UTC