IETF RFC 7624
[ACTIVE]
Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 24
- Abstract
- Since the initial revelations of pervasive surveillance in 2013, several classes of attacks on Internet communications have been discovered. In this document, we develop a threat model that describes these attacks on Internet confidentiality. We assume an attacker that is interested in undetected, indiscriminate eavesdropping. The threat model is based on published, verified attacks.
- Publication Date
- 2015-08-01
- Status Note
- Informational
- DOI
10.17487/RFC7624- Link
- https://doi.org/10.17487/RFC7624
- Author(s)
- Richard BarnesBruce SchneierCullen Fluffy JenningsTed HardieBrian TrammellChristian HuitemaDaniel Borkmann
- Keyword(s)
- Eavesdropping
Latest version of IETF RFC 7624
Document Versions — IETF RFC 7624
-
▶ IETF RFC 7624 (2015-08-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 6973 [Active*]
Bibliographic Reference(s)
- IETF.draft-ietf-dprive-problem-statement-06 — DPRIVE EXTERNAL
- Marczak, B., Weaver, N., Dalek, J., Ensafi, R., Fifield, D., McKune, S., Rey, A., Scott-Railton, J., Deibert, R., and V. Paxson, "China's Great Cannon", The Citizen Lab, University of Toronto, 2015, < https://citizenlab.org/2015/04/chinas-great-cannon/ >. EXTERNAL
- The Guardian, "Sigint -- how the NSA collaborates with technology companies", September 2013, < http://www.theguardian.com/world/interactive/2013/sep/05/ sigint-nsa-collaborates-technology-companies >. EXTERNAL
- Schneier, B., "How the NSA Attacks Tor/Firefox Users With QUANTUM and FOXACID", Schneier on Security, October 2013, < https://www.schneier.com/blog/archives/2013/10/ how_the_nsa_att.html >. EXTERNAL
- Appelbaum, J., Gibson, A., Guarnieri, C., Muller-Maguhn, A., Poitras, L., Rosenbach, M., Schmundt, H., and M. Sontheimer, "The Digital Arms Race: NSA Preps America for Future Battle", Spiegel Online, January 2015, < http://www.spiegel.de/international/world/new-snowden- docs-indicate-scope-of-nsa-preparations-for-cyber-battle- a-1013409.html >. EXTERNAL
- The Guardian, "'Tor Stinks' presentation -- read the full document", October 2013, < http://www.theguardian.com/world/interactive/2013/oct/04/ tor-stinks-nsa-presentation-document >. EXTERNAL
- Greenwald, G. and S. Ackerman, "How the NSA is still harvesting your online data", The Guardian, June 2013, < http://www.theguardian.com/world/2013/jun/27/ nsa-online-metadata-collection >. EXTERNAL
- Ball, J., Borger, J., and G. Greenwald, "Revealed: how US and UK spy agencies defeat internet privacy and security", The Guardian, September 2013, < http://www.theguardian.com/world/2013/sep/05/ nsa-gchq-encryption-codes-security >. EXTERNAL
- Ball, J., "NSA's Prism surveillance program: how it works and what it can do", The Guardian, June 2013, < http://www.theguardian.com/world/2013/jun/08/ nsa-prism-server-collection-facebook-google >. EXTERNAL
- MacAskill, E., Borger, J., Hopkins, N., Davies, N., and J. Ball, "How does GCHQ's internet surveillance work?", The Guardian, June 2013, < http://www.theguardian.com/uk/2013/jun/21/ how-does-gchq-internet-surveillance-work >. EXTERNAL
- Greenwald, G., "XKeyscore: NSA tool collects 'nearly everything a user does on the internet'", The Guardian, July 2013, < http://www.theguardian.com/world/2013/jul/31/ nsa-top-secret-program-online-data >. EXTERNAL
- The Guardian, "Project Bullrun -- classification guide to the NSA's decryption program", September 2013, < http://www.theguardian.com/world/interactive/2013/sep/05/ nsa-project-bullrun-classification-guide >. EXTERNAL
- Appelbaum, J., Horchert, J., Reissmann, O., Rosenbach, M., Schindler, J., and C. Stocker, "NSA's Secret Toolbox: Unit Offers Spy Gadgets for Every Need", Spiegel Online, December 2013, < http://www.spiegel.de/international/world/ nsa-secret-toolbox-ant-unit-offers-spy-gadgets-for-every- need-a-941006.html >. EXTERNAL
- Greenwald, G. and E. MacAskill, "NSA Prism program taps in to user data of Apple, Google and others", The Guardian, June 2013, < http://www.theguardian.com/world/2013/jun/06/ us-tech-giants-nsa-data >. EXTERNAL
- Perlroth, N., Larson, J., and S. Shane, "N.S.A. Able to Foil Basic Safeguards of Privacy on Web", The New York Times, September 2013, < http://www.nytimes.com/2013/09/06/us/ nsa-foils-much-internet-encryption.html >. EXTERNAL
- Greenwald, G., "NSA collecting phone records of millions of Verizon customers daily", The Guardian, June 2013, < http://www.theguardian.com/world/2013/jun/06/ nsa-phone-records-verizon-court-order >. EXTERNAL
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 1918 [Active*]
- IETF RFC 1939 [Active*]
- IETF RFC 3261 [Active*]
- IETF RFC 3365 [Active*]
- IETF RFC 3501 [Superseded*]
- IETF RFC 4033 [Active*]
- IETF RFC 4303 [Active*]
- IETF RFC 4949 [Active*]
- IETF RFC 5246 [Superseded*]
- IETF RFC 5321 [Active*]
- IETF RFC 6962 [Superseded*]
- IETF RFC 7011 [Active*]
- IETF RFC 7258 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC7624.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 7624, Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement. Available at https://doi.org/10.17487/RFC7624
Snippet:
IETF RFC 7624, Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement. Available at https://doi.org/10.17487/RFC7624
HTML (ISO 690 compliant)
Preview:
IETF RFC 7624, Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement. Available at https://doi.org/10.17487/RFC7624
Snippet:
<span class="citation"><cite>IETF RFC 7624</cite>, Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement. Available at <a href="https://doi.org/10.17487/RFC7624" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7624</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 7624, Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement
doi: 10.17487/RFC7624
url: https://doi.org/10.17487/RFC7624
doi: 10.17487/RFC7624
url: https://doi.org/10.17487/RFC7624
Snippet:
<li> <cite id="bib-rfc7624">IETF RFC 7624</cite>, Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement <span class="doi">10.17487/RFC7624</span> </li>
Referenced By
- IETF RFC 9678 [Active*]