1. Security WG: Report of the Fall 2013 Meeting
Southwest Research Institute (SwRI) San Antonio, TX
31 October, 2013
Howard Weiss
NASA/JPL/PARSONS
skype: hsweiss

3. Meeting Agenda 28 October 2013 08:30 – 09:30: CCSDS Plenary
09:30 – 12:30: Systems Engineering Area (SEA) Plenary
13:30 – 17:00: Security WG
Welcome, introductions, logistics, agenda review
Review results of Spring 2013 (Bordeaux) meeting
Status of documents, action items
Charter review
Key Management Blue Book (Fischer/Aguilar-Sanchez)
KM for SDLS extended procedures
ESA Secure Software Development

4. Meeting Agenda (cont) 29 October 2013 (08:30 – 17:00)
Network Layer Security 1st Draft Review (Weiss)
Network layer security over non-IP (Weiss)
Testing (Sheehe)
Threat book re-write (Black/Weiss/Biggerstaff)
Link Layer Security Update (Biggerstaff/Weiss/Aguilar-Sanchez)
AERO algorithm (Weiss)
Other areas of discussion
Proposed new areas of work
30 October 2013
08:30-17:00: Space Data Link Security WG
31 October 2013
08:30-12:30: Space Data Link Security WG
13:30-17:00: SEA Wrap-up Plenary

5. Attendance Name Organization Email Address Howard Weiss (Chair)
NASA/JPL/PARSONS
Gordon Black
UK Space Agency/CGI
Daniel Fischer
ESA/ESOC
Martin Pilgram
DLR
Craig Biggerstaff
NASA/JSC
Ignacio Aguilar-Sanchez
ESA/ESTEC
Chuck Sheehe
NASA/GRC
Dorothea Richter
Julian Airaud
CNES
Ed Greenberg (Mon PM)
NASA/JPL

6. Executive Summary
Attendees from UK Space Agency, ESA/ESTEC, ESA/ESOC, DLR, CNES, NASA/JSC, NASA/GRC, and NASA/JPL. Due to sequestration budget issues NASA Goddard representative was unable to travel.
No charter or framework changes were required.
Reviewed action items from Bordeaux. Carrying several forward and all others were completed.
Reviewed draft of 1st revision of Threat GB. Comments & discussions will be folded into 2nd revision.
Reviewed 1st draft of Network Layer Security adaption profile. Section 2 needs to be re-written per comments. NASA/GRC will perform testing and will write the Yellow Book. CNES may also perform testing.
Provided an overview of the AERO (Authenticated Encryption with Replay prOtection) algorithm that might be useful in the future.
ESA did had no updates regarding Key Management but did discuss their effort in developing policies on secure software development.
SDLS: discussed Red-3, extended procedures, and GB.

7. Summary of Goals and Deliverables
KM Blue/Magenta Book for symmetric KM is progressing.
Reviewed Threat Green Book revisions.
Reviewed network layer security “adaptation” profile draft. Investigate how IPsec could be used over non-IP protocols. NASA/GRC to write Yellow Book and perform testing. CNES may also perform testing.
Reviewed AERO algorithm for possible future use.
Reviewed SDLS progress in SecWG
Discussed ESA secure software standards.
Discussed SDLS progress.

8. SUMMARY TECHNICAL STATUS
SEA Area MID-TERM REPORT
SUMMARY TECHNICAL STATUS
Security WG
Goal:
Working Status: Active _X_ Idle ____
Summary progress: documents actively being produced: Key Management BB, Threat GB revision, Network Layer BB. All docs green.
Progress since last meeting: threat GB 1st rev, network layer security 1st draft.
Problems and Issues: Resources – Loss of NASA resources (GSFC) is an issue.
status: OK
CAUTION
PROBLEM
Comment: Working Group is advancing and producing good products.
Docs OK.

9. Near-Term Schedule Deliverable Milestone Date Key Management Blue Book
Continue drafting next revision
02/14
Network Layer Profile
2nd draft
01/14
Threat Document Revision
2nd revised draft
11/13
Network Layer Yellow Book
1st draft

10. Near-Term Schedule (cont)
Common Criteria Protection Profiles
Future
TBD
Application Layer Security
SW Defined Radio Security
Physical Layer Security (Channel Coding)
Mission Operations document

11. Open Issues
None

12. Action Items Item Number Action Item: Assigned to: Date Due:
SecWG1013:1
Review existing list of Threat GB threats for additions, deletions, expansion, etc.
All
12/16/13
SecWG1013:2
Revise Threat GB
Howard Weiss
11/15/13
SecWG1013:3
Revise Network Layer Security Adaptation Profile
SecWG1013:4
Discuss status of DTN Bundle Security Protocol re-write with Scott Burleigh
11/10/13
SecWG1013:5
Revise Network Layer Security testing configuration.
Chuck Sheehe
SecWG1013:6
Investigate CNES performing Network Layer Security testing
Julien Airaud
SecWG1013:7
Write white paper on ideas about network layer security for non_IP environments
Ignacio Aguilar-Sanchez & Daniel Fischer
02/20/14

13. Resource Problems
Resources had been adequate to perform the current tasks although personnel have only limited time percentage to apply to CCSDS tasks. Recent loss of NASA personnel will hurt unless they can be restored to attend meetings.

14. Risk Management Update
Must ensure that the current trend of additional resources remains and that resources don’t shrink.

15. Cross Area WG / BOF Issues
Joint meeting with Space Data Link Security WG
Continued interaction with DTN and Spacecraft Monitoring & Control although no joint meeting in San Antonio.

16. Resolutions to be Sent to CESG and Then to CMC
None.

17. New Working Items, New BOFs, etc.
None.