[dssa] Threat Prioritization Raw Data

[Julie Hedlund <julie.hedlund@xxxxxxxxx>]

Mikey and DSSA-WG members,

Here are the raw data from the prioritization exercise from today’s meeting.  
The request was for people to pick their top three threats, but people 
approached this in two different ways: 1) 8 picked 3 without prioritizing them; 
2) 11 picked 3 and prioritized them.  Thus, the data are slightly different.  
The data can probably be arranged in other ways too.  Please let me know if you 
have any questions.

Thanks,
Julie

Tally of 8 Responses without Prioritization (the count indicates how many 
people included this threat as one of their 3 unprioritized choices):

Government Intervention — 5
Authority or authentication compromise — 4
Bad players/DDOS/fragmentation of the root — 3
Data poisoning/packet interception — 2
Recursive vs. authoritative name server attacks/physical — 1

Tally of 11 Responses with Prioritization (the count indicates how many people 
included this threat as #1, #2, or #3 — note one person only listed #1 and #2 
choices):

#1
Government Intervention /recursive vs. authoritative name server attacks/ 
system failure — 2
Authority or authentication compromise/physical/data poisoning/malicious or 
unintentional (erroneous) alteration of contact information SAC044 — 1

#2
DDOS — 4 (1 with the note “against the root service”
Recursive vs. authoritative name server attacks/government intervention — 2
Bad players/packet interception — 1

#3
Data poisoning — 4
DDOS — 2
System failure/bad players/email/spam — 1