add scope.tex

diff --git a/src/applied-crypto-hardening.tex b/src/applied-crypto-hardening.tex
index c0dc961..124d4bc 100644 (file)
--- a/src/applied-crypto-hardening.tex
+++ b/src/applied-crypto-hardening.tex
@@ -181,6 +181,7 @@ morekeywords={__global__, __device__},  %
 \input{disclaimer}
 \input{motivation}
 \input{methods}
+\input{scope}
 \input{PKIs}
 \input{ECC}
 \input{keylengths}

diff --git a/src/scope.tex b/src/scope.tex
index 9ff5d78..c8ceba5 100644 (file)
--- a/src/scope.tex
+++ b/src/scope.tex
@@ -1,7 +1,51 @@
 \section{Scope}
 
-We are only analyzing...
-* internet serving devices
-* ...
+We restricted ourselves to:
+\begin{itemize}
+\item Internet-facing services
+\item Commonly used services
+\item Devices which are used in business environments (this mostly excludes XBoxes, Playstations and similar common consumer devices)
+\end{itemize}
 
+We explicitly excluded:
+\begin{itemize}
+\item Specialized systems (such as medical devices, most embedded systems, etc.)
+\item Wireless Access Points
+%\item Services which should be run only in an internal network and never face the Internet.
+\end{itemize}
 
+%% * whatsapp --> man kann nichts machen, out of scope
+%* Lync: == SIP von M$.
+%* Skype: man kann ncihts machen, out of scope.
+%* Wi-Fi APs, 802.1X, ... ???? --> out of scope
+%* Tomcats/...????
+%* SIP   -> Klaus???
+%* SRTP  -> Klaus???
+%* DNSSec ?? Verweis auf BCPxxx  --> out of scope
+%   - DANE
+%What happens at the IETF at the moment?
+%* TOR?? --> out of scope
+%* S/Mime --> nachsehen, gibt es BCPs? (--> Ramin)
+%* TrueCrypt, LUKS, FileVault, etc ---> out of scope
+%* AFS -> out of scope
+%* Kerberos --> out of scope
+%* NNTP -> out of scope
+%* NTPs tlsdate -> out of scope
+%* BGP / OSPF --> out of scope
+%* irc,silc --> out of scope
+%* LDAP -> out of scope
+%* Moxa , APC, und co... ICS . Ethernet to serial --> out of scope
+%* telnet -> DON't!!!
+%* rsyslog --> out of scope
+%* ARP bei v6 spoofing -> out of scope
+%* tinc?? -> out of scope
+%* rsync -> nur ueber ssh fahren ausser public web mirrors
+%* telnets -> out of scope
+%* ftps -> out of scope
+%seclayer-tcp    3495/udp    # securitylayer over tcp
+%seclayer-tcp    3495/tcp    # securitylayer over tcp
+%* webmin -> maybe
+%* plesk -> out of scope
+%* phpmyadmin --> haengt am apache, out of scope
+%* DSL modems -> out of scope
+%* UPnP, natPmp --> out of scope