Report: W3C IG WoT Conf Call 2015-09-30 Security and Privacy Oliver Pfaff (oliver.pfaff@siemens.com)

Status Security&Privacy Challenges:  text-complete (short), ready for review Security&Privacy Requirements: Overall findings: discussion started, elaboration a bit stalled as of now Security&Privacy Requirements Catalogue: text-complete, [IG-SP] reviewed Landscape of Security&Privacy Means: Overall findings: text-complete (mechanism section), ready for review Design-time means: SP mechanisms: text-complete, ready for review SP frameworks: wait for IIC security reference architecture Runtime means: proposed with no follow-up activity (up to now) Security&Privacy Advanced Concepts: Things discovery authorization: hypotheses, initial structure/next steps agreed, elaboration of details pending Security&Privacy Glossary: working version provided Security&Privacy References: working version provided

Plans for the compilation of the Tech Landscape Design-time means: SP mechanisms: initiate reviews, follow-up on review comments SP frameworks: Candidate list of SP frameworks to survey does exists, break-down structure for elaboration does not yet exist Proposal: wait for IIC security reference architecture (announced for Q4) as an outstanding mainline SP framework. Start surveying SP frameworks with that instance Runtime means: Proposed as work item, not yet addressed

Preparation of the discussion @TPAC Mainline objectives: SP landscape: Present, discuss, verify/harden SP landscape findings Preparation done – see above Present, discuss individual SP mechanisms (selection thereof) SP demo: Potential SP addendum to plugfest outlining/previewing potential SP coverage during subsequent plugfests Preparation TODO Sideline objectives : SP requirements: interactive workshops with WoT use cases needed, should probably take another form than F2F breakouts (actually a good format but will probably consume too much bandwidth since this would be recurring per use case) => follow-up on other occasions