Re: New issue 18: Threat discussion

I think we concluded in this threat that your original
list of four threats should become three, by merging
threats 1 and 3.

Francis made the point that the level of authentication
makes a difference. Mohan made the point that there's
a difference between packet modification (on-path) vs.
independent (off-path) attacks. Atul asked about the
need for more general protection of the threat 1 than
what can be done in MOBIKE; I think we concluded that
AH or something similar is sufficient for other protocols
but people wanted MOBIKE to provide security against
the attack.

Taking this all into account, I think we have:

   1) Unauthenticated attacker directs the traffic stream
      from B to a third party C, with the intent flooding C
      with unwanted traffic. The attacker can be either on-path
      or off-path. The latter is of course more serious, but
      easier defended attack.

   2) Authenticated peer A directs the traffic stream from B
      to a third party C, with the intent of flooding C with
      unwanted traffic. The "authenticated peer" is the one
      that performed the initial IKE authentication. A
      request to update an address could be either unauthenticated,
      authenticated but leaving the actual address vulnerable
      for MITM modification. The validity of the new address
      could either be implied by the request or be independently
      verified; this verification could again require either
      no authentication at all, full authentication, or
      participation of the authenticated peer but leaving the
      address part unprotected.

   3) Unauthenticated attacker causes the IKE_SA to be
      closed by modifying just one or two IKE packets (if
      attacker can modify all packets, he can of course DoS).

--Jari