PWG Imaging Device Security IDS Working Group Cupertino

PWG -Imaging Device Security (IDS) Working Group Cupertino, CA - PWG F 2 F Meeting October 15, 2009 Joe Murdock (Sharp) Brian Smithson (Ricoh) Copyright © 2009, Printer Working Group. All rights 1

Agenda (AM) • Administrivia: • Select minute-taker– Lee? • Introduction and roles of new co-chairs • IP policy statement: “This meeting is conducted under the rules of the PWG IP policy” • Approve Minutes from October 1 conference Call • Review Action Items from October 1 conference call • Review/discuss any revisions to ATR/NAP/NEA documents • Discussion on SHV issues: • Review SCCM binding spreadsheet • SHV development alternatives (plug-ins, SHVs, who develops? , …) • Reach decision on approach for HCD NAP deployment Copyright © 2009, Printer Working Group. All rights 2

Agenda (PM) • Discuss Randy's issues with multiple processing resources on a single NIC ? • Info from Jerry Thrasher http: //www. ietf. org/mailarchive/web/nea/current/msg 01041. html • Discussion on remediation techniques • • How does remediation work (in general) Alternatives… How? What is our approach to reach a decision? • Closing • • IDS futures and “phase II” activity (? ) New action items and open issues Conference call / F 2 F schedule Adjourned Copyright © 2009, Printer Working Group. All rights 3

Action items review Planned Actual date Assignee Action Original date of of [ -> others to Item # Entry date Due date completion do the same] 1 4/28/2009 Randy Type NEA Turner 10 4/16/2009 Brian Smithson TCG 22 8/18/2009 Joe Murdock NAP Binding 23 8/18/2009 Jane Maliouta Value Propositi on 24 8/18/2009 Randy Turner NEA Binding 25 9/17/2009 Peter Cybuck Section Action Randy Turner will try to find other contacts that would be willing to work with the PWG to help deploy NEA health assessment. (Juniper, Symantec, Cisco are suggested candidates. ) Is someone willing to sit down with the PWG and “have discussions”? Brian Smithson will investigate whether a formal relationship document can be created between TCG and PWG. He will find out their position on liaison agreements. Joe Murdock will examine the possible mapping of HCD attributes to SCCM and evaluate the resulting “HCD health assessment” benefit. [This should also result in a list of deficiencies and recommended extensions to be suggested to the MS NAP team. ] Jane Maliouta will take on the responsibility for creating a “value proposition” document to help justify the reason behind HCD NAP development. Peter Cybuck and Ron Nevo will provide market information as possible. Randy Turner will ask the NEA e-mail list about their assumptions on modeling [sub‑]components with regard to MFD subunits. (Why does NEA not address BIOS and/or NICs as components within a PC? ) Peter Cybuck will do some market research about whether customers will accept the proposed method of gaining network access via SCCM. Copyright © 2009, Printer Working Group. All rights Status A=abandoned C=complete H=on hold P=partial Disposition P P 4

Document review • HCD_ATR revision? • HCD_NAP revision? • HCD_NEA revision? • Document schedule… Copyright © 2009, Printer Working Group. All rights 5

SHV issues • SCCM binding spreadsheet • SHV development alternatives? • Decision on approach: _____ Copyright © 2009, Printer Working Group. All rights 6

Multiple processes on one NIC • http: //www. ietf. org/mail-archive/web/nea/current/msg 01041. html • Randy? Copyright © 2009, Printer Working Group. All rights 7

Remediation techniques • How does remediation work (in general) • Alternatives: • Vendor-specific? • HCD-industry-specific? • A more general solution? • How? • What is our approach to reach a decision? Copyright © 2009, Printer Working Group. All rights 8

Closing • IDS futures and “phase II” activity (? ) • New action items and open issues • Conference call / F 2 F schedule • Next call: October 29, 1 PM Eastern • Any conflicts with November 12? • What to do about November 26? (last call before F 2 F, but it is T-day) • Next F 2 F: December 8, 9, or 10, at Dell, Austin TX • The PWG calendar is available on Google, so if you use Google Calendar you can get updates automagically: http: //www. google. com/calendar/embed? src=istopwg%40 gmail. com • Adjournment Copyright © 2009, Printer Working Group. All rights 9