Security WG: Status Briefing BSI, London UK 10 November 2014 Howard Weiss NASA/JPL/PARSONS

Nordwijkerhout (Spring 2014) Meeting Agenda 31 March 2014 – 08:30 – 09:30: CCSDS Plenary – 09:30 – 12:30: Systems Engineering Area (SEA) Plenary – 13:30 – 18:30: Security WG – Welcome, introductions, logistics, agenda review – Review results of Fall 2013 (San Antonio) meeting – Status of documents, action items – Charter review (if required) – EUMETSAT Overview (Texier) – Threat book revision review (Weiss) – Software Defined Radios (Sheehe)

Meeting Agenda (cont) 1 April 2014 (08:30 – 18:30) – Network Layer Security Draft Review (Weiss) » IPsec Testing + Yellow Book Status (Sheehe) » Network layer security for non-IP environments Fischer/Aguilar-Sanchez) – Key Management Blue Book (Fischer/Aguilar-Sanchez) » KM for SDLS extended procedures – Link Layer Security Update Discussion (Biggerstaff/Weiss/Aguilar- Sanchez) – Other areas of discussion – Physical Layer Security (Aguilar-Sanchez) – Proposed new areas of work 2 April 2014 – 08:30-18:30: Space Data Link Security WG 3 April 2014 – 08:30-12:30: Space Data Link Security WG – 13:30-18:00: SEA Wrap-up Plenary

Noordwijkerhout Attendance NameOrganization Address Howard Weiss Gordon BlackUK Space Daniel Martin Craig Ignacio Chuck Dorothea Julian Guillame Taoming

Meeting Summary  Attendees from UK Space Agency, ESA/ESTEC, ESA/ESOC, DLR, CNES, China BITTT, EUMETSAT, NASA/JSC, NASA/GRC, and NASA/JPL.  No charter or framework changes were required. However, discussion on SecWG involvement in document reviews (see resolutions).  Reviewed action items from San Antonio. Carrying several forward and all others were completed.  EUMETSAT provided overview presentation.  Reviewed revision of Threat GB. Several presentations by Chuck Sheehe on additional threats to be included in revised document. Comments & discussions will be folded into next revision.  Reviewed revised draft of Network Layer Security adaption profile. Section 2 was re-written per comments. A few more changes/refinements needed. NASA/GRC is writing the Yellow Book and will provide feedback into the Blue Book. CNES is still trying to establish a testing environment to test with NASA/GRC.  Physical Layer Security discussion from ESA/ESTEC as a potential future endeavor.  Discussed outstanding SDLS RID (re: IV and AAD) to find way forward for RID disposition.  Reviewed Key Management Extended Procedures document.  Discussed possible new work areas: physical layer; CFDP, application layer.  SDLS: reviewed “final” protocol (Red-4v2), extended procedures, and GB.

Action Items Item NumberAction Item:Assigned to:Date Due: SecWG0414:1Revise Threat GBHoward Weiss10/1/14 SecWG0414:2Revise Network Layer testing Yellow Book and provide feedback from testing to Network Layer Security profile BB Chuck Sheehe11/1/14 SecWG0414:3Revise Network Layer Security Adaptation Profile Howard Weiss07/15/14 SecWG0414:4Look at NIST for possible inclusion into KM docs Daniel Fischer09/15/14 SecWG0414:5White paper on link layer security (from last meeting). Ignacio Aguilar-Sanchez11/1/14 SecWG0414:6Investigate CNES performing Network Layer Security testing (from last meeting) Julien Airaud11/1/14 SecWG0414:7Write white paper on ideas about network layer security for non_IP environments (from last meeting) Ignacio Aguilar-Sanchez & Daniel Fischer 07/1/14