Subject: [OPSAWG] DDOS Open Threat Signaling (DOTS) BOF Announcement

From: "Roman D. Danyliw" <[email-masked]>
Date: Mon, 23 Mar 2015 21:13:39 +0000

Good afternoon!

The DDOS Open Threat Signaling (DOTS) BOF [1] will be held on Tuesday during the Afternoon II session (1520 - 1720).  

BOF Description and Agenda
==========================
DDoS open threat signaling (DOTS) would enable any on-premise DDoS mitigation device to effectively communicate the current threat landscape, load and response data to a mitigation service provider. The upstream solution would then have a clear view of the threat should the on-premise solution be required to offramp attack traffic to a more capable handler. A vendor agnostic approach would allow any combination of vendor, service provider or community driven efforts to interoperate. DOTS would be extensible and may, in future, be expanded as a method of real time information exchange between other security devices and, potentially across organizations. 

1. Note well, logistics, agenda bashing, introduction of BOF (chairs, 10 min)
2. draft-teague-open-threat-signaling-00 (Nik Teague, 20 min)
3. draft-fu-ipfix-network-security-00 (Ana Hedanping, 15 min)
4. Panel discussion on suitability (40 min)
   - (moderator) Nik Teague
   - Rich Groves
   - Vince Berk
   - David Larson
   - Andrew Mortensen
5. Further discussion (30 min)
6. Closing (chairs/AD, 5 min)
============================

The BOF would benefit from your operational experience as it will be considering the exchange of network telemetry information and device configurations.  It is a non-working group forming BOF.

Please consider reviewing the drafts and sending feedback to the DOTS list [2].

I hope to see you tomorrow!

Regards,
Roman
(co-chair)

[1] https://www.ietf.org/proceedings/92/agenda/agenda-92-dots
[2] https://www.ietf.org/mailman/listinfo/dots