1. Security WG: Report of the Spring 2012 Meeting European Space Operations Centre Darmstadt, Germany 19 April, 2012 Howard Weiss NASA/JPL/SPARTA howard.weiss@sparta.com +1-443-430-8089 skype: hsweiss

3. Meeting Agenda 16 April 2012 – 08:45 – 09:45: CCSDS Plenary – 09:45 – 12:30: Systems Engineering Area (SEA) Plenary 16 April 2012: – 14:00 – 17:30: Security WG – Welcome, introductions, logistics, agenda review – Review results of Fall 2011 (Colorado) meeting – Status of documents, action items – Charter review (if needed) – Security Architecture Status (Black) – SM&C Security Discussion (Fischer) – Algorithm Document RID review (Weiss) – Algorithm Yellow Book review (Weiss) – Testing Plans (CNES, DLR, ESA) – Algorithm Green Book Review (Weiss)

4. Meeting Agenda (cont) 17 April 2012 (08:45 – 17:30) – SM&C Support (Fischer) (joint mtg @ 09:00) – Key Management Blue Book revisions(Fischer/Aguilar-Sanchez) – Threat book re-write (Black/Weiss/Biggerstaff) – Network Layer Security Update (Weiss) – Cross Support (All) ?? – Link Layer Security Update (Biggerstaff/Weiss/Aguilar-Sanchez) – Other areas of discussion – New work areas 18 April 2012 – 08:45-17:30: Space Data Link Security WG 19 April 2012 – 08:45-12:30: Space Data Link Security WG – 14:30-17:30: SEA Wrap-up Plenary

5. Attendance NameOrganizationEmail Address Howard Weiss (Chair)NASA/JPL/SPARTAhoward.weiss@sparta.com Gordon BlackUK Space Agency/Logicagordon.black@logica.com Daniel FischerESA/ESOCdaniel.fischer@esa.int Martin PilgramDLRmartin.pilgram@dlr.de Craig BiggerstaffNASA/JSC/Lockheedcraig.biggerstaff-1@nasa.gov Ignacio Aguilar-SanchezESA/ESTECignacio.Aguilar.Sanchez@esa.int Clayton SigmanNASA/GSFCclayton.signman@nasa.gov Dorothea RichterDLRdorothea.richter@dlr.de Keith ScottNASA/JPL/MITREkscott@mitre.org Yuan GungBITTT/CNSAyuangang@bitttt.cn Ed BirraneNASA/JHU/APLEdward.birrane@jhuapl.edu Julian AiraudCNESJulien.airaud@cnes.fr

6. Executive Summary  Attendees from UK Space Agency, ESA/ESTEC, ESA/ESOC, DLR, BITTT/CNSA, CNES, NASA/JSC, NASA/GSFC, and NASA/JPL. No attendees from ASI.  Reviewed charter updates as recorded on CWE. Action to restructure into two lists: development work and “revise & maintain” activities.  Reviewed the RID changes to the Security Architecture document – ready for 2 nd Agency review.  Dispositioned 53 Algorithm Blue Book RIDs. Document will be revised for 2 nd Agency review. Algorithm paper to be presented at SpaceOps.  Reviewed the Algorithm Yellow Book and testing that DLR has already accomplished. A few changes are needed to the document.  Reviewed 1 st draft of Algorithm Green Book.  Discussed potential directions for Threat Green Book revision.  Discussed and met with SM&C regarding security test cases & eventual integration of Key Management into SM&C.  Reviewed good progress of KM Blue Book.  SDLS making good progress.

7. Summary of Goals and Deliverables 1. Action to restructure charter. 2. Final WG review of Security Architecture after update from RIDs. 3. RIDs against Algorithm document dispositioned. 4. 1 st draft of Algorithm Green Book reviewed. 5. DLR has already used the Yellow Book to carry out algorithm testing. ESA is also planning to perform testing. 6. KM Blue Book for symmetric KM making good progress. 7. Reviewed & discussed revisions to the Threat Green Book. 8. Joint meeting with SM&C to discuss security test use cases, their authentication design, and key management.

8. SEA Area MID-TERM REPORT SUMMARY TECHNICAL STATUS 1.Security WG Goal: Working Status: Active _X_ Idle ____ Summary progress: documents actively being produced: Glossary, Key Management BB, Algorithms (BB & YB). All docs green. Progress since last meeting: architecture RIDS done, algorithm RIDS rcvd, glossary in secretariat queue. Other books progressing. Problems and Issues: Resources – Excellent right now but need to ensure continued participation from all member agencies status:OKCAUTIONPROBLEM Comment: Working Group is advancing and producing good products. Docs OK.

9. Near-Term Schedule DeliverableMilestoneDate Charter Update Update for restructure06/12 Algorithm Blue Book Revise wrt RIDs07/12 Key Management Blue Book Continue drafting next revision10/12 Network Layer Profile Outline of document10/12 Threat Document Revision Determine revised format09/12 Information Security Glossary Awaiting CESG review & then RID disposition 12/12 Algorithm Green Book Revise11/12

10. Near-Term Schedule (cont) Common Criteria Protection Profiles FutureTBD Application Layer Security FutureTBD SW Defined Radio Security FutureTBD Physical Layer Security (Channel Coding) FutureTBD

11. Open Issues  Deciding what/how to revise Threat Green Book.

12. Action Items Item NumberAction Item:Assigned to:Date Due: SecWG0412:1Update charterHoward Weiss06/30/12 SecWG0412:2Final revisions of Security Architecture & resubmit for 2 nd review Gordon Black07/15/12 SecWG0412:3Update Algorithm Blue Book wrt RIDSHoward Weiss07/31/12 SecWG0412:4Contact Marcus Rueckert to clarify his Algorithm document RID #18 Howard Weiss05/15/12 SecWG0412:5Provide SM&C with security use cases and comments/RIDs for future revisions of SM&C documents Daniel Fischer05/31/12 SecWG0412:6Update Yellow Book per comments from DLR Howard Weiss06/15/12

13. Action Items (2) SecWG0412:7Provide comments on Yellow Book.Dorothea Richter04/27/12 SecWG0412:8Create Threat Document revised document format.Gordon Black, Craig Biggerstaff, Howard Weiss 09/30/12 SecWG0412:9Investigate how role-based access in compliance with FIPS 140-2 can be used by flight crypto used. Craig Biggerstaff08/15/12

14. Resource Problems  Resources are adequate to perform the current tasks although personnel have only limited time percentage to apply to CCSDS tasks.

15. Risk Management Update  Must ensure that the current trend of additional resources remains and that resources don’t shrink.  ASI has not attended for several meetings.

16. Cross Area WG / BOF Issues  Joint meeting with Space Data Link Security WG  Joint meeting with Spacecraft Monitoring & Control

17. Resolutions to be Sent to CESG and Then to CMC  None

18. New Working Items, New BOFs, etc.  Network layer security  Threat document revision  Physical layer security (channel coding for security (based on Shannon codes))  Security for software defined radios  Continue to discuss security additions for SLE and SM&C