
|
Hash Filtering Most difficult function in the PSAMP Architecture. It is still not finally decided how to integrate hash filtering into the MIB. The open points are: Should we support more hash functions that the ones defined in [PSAMP-TECH]?That implies a generic template mechanism for other hash functions? Do we implement all parameters of the hash function in the MIB because the knowledge of these parameters could lead to a potentional attack to the NMS? To be consistent the MIB should implement all parameters but these parameters may be protected by any means to avoid a security breach (see 6.2.2 Guarding Against Pitfalls and Vulnerabilities). Those variables could e.g., be secured by a separate community name and be excluded from public access. |