INTERNATIONAL ISO/IEC STANDARD 18028-1

More documents

Recommendations

Info

IS0/IEC18028-1:2006(E)MRPNATNIDSNTPOOBPCPDAPINPKIPSTNQoSRAIDRASRTPSDSLSecOPsSIMSNMPSSHTCPTDMAManufacturing Resource PlanningNetwork Address TranslationNetwork Intrusion Detection SystemNetwork Time Protocol'Out of Band'Personal ComputerPersonal Data AssistantPersonal Identification NumberPublic Key InfrastructurePublic Switched Telephone NetworkQuality of ServiceRedundant Array of Inexpensive DisksRemote Access ServiceReal Time ProtocolSymmetric Digital Subscriber LineSecurity Operating ProceduresSubscriber Identity ModuleSimple Network Management ProtocolSecure ShellTransmission Control ProtocolTime Division Multiple AccessTelnetTerminal emulation program to work on-line on a remote computerTETRATKIPUDPUMTSUPSUSBVHFVoIPVPNWANWAPWEPWLANWORMTErrestial Trunked RAdioTemporal Key Integrity ProtocolUser Datagram ProtocolUniversal Mobile Telecommunications SystemUninterruptible Power SupplyUniversal Serial BusVery High FrequencyVoice over IPVirtual Private NetworkWide Area NetworkWireless Application ProtocolWired Equivalent PrivacyWireless Local Area NetworkWrite Once Read Many8 © ISO/IEC 2006 - All rights reserved
ISO/IEC FDIS 18028-1:2006(E)5 StructureThe approach taken in ISO/IEC 18028-1 is to:— first summarize the overall process for the identification and analysis of the communications relatedfactors that should be taken into account to establish network security requirements, and— then provide an indication of the potential control areas with respect to security associated withconnections to and between communications networks. In doing this indicators are provided to whererelevant content of ISO/IEC 13335 and ISO/IEC 17799 may be used, and technical design andimplementation topics are introduced with references to where they are dealt with in detail inISO/IEC 18028-2 to ISO/IEC 18028-5.Three simple criteria are described to aid persons responsible for information security to identify potentialcontrol areas. These criteria identify the:— different types of network connections,— different networking characteristics and related trust relationships, and— potential types of security risk associated with network connections (and the use of services provided viathose connections).The results of combining these criteria are then utilized to indicate potential control areas. Subsequently,summary descriptions are provided of the potential control areas, with indications to sources of more detail.The areas dealt with are:— Network Security Architecture, including coverage of:• local area networking,• wide area networking,• wireless networks,• radio networks,• broadband networking,• security gateways (see also ISO/IEC 18028-3),• remote access services (see also ISO/IEC 18028-4),• virtual private networks (see also ISO/IEC 18028-5),• IP convergence (data, voice and video),• enabling access to services provided by networks external (to the organization),• web hosting architectures,(See also ISO/IEC 18028-2 for more detail of Network Security Architecture.)— Secure Service Management Framework,— Network Security Management,© ISO/IEC 2006 - All rights reserved 9
Page 1 and 2: INTERNATIONAL ISO/IECSTANDARD 18028
Page 3 and 4: ISO/IEC18028-1:2006(E)ContentsPageF
Page 5 and 6: ISO/IEC 18028-1:2006(E)ForewordISO
Page 7 and 8: INTERNATIONAL STANDARDISO/IEC 18028
Page 9 and 10: ISO/IEC FDIS 18028-1:2006(E)3.2.9de
Page 11 and 12: ISO/IEC FDIS 18028-1:2006(E)3.2.30n
Page 13: ISO/IEC FDIS 18028-1:2006(E)4 Abbre
Page 17 and 18: ISO/IEC FDIS 18028-1:2006(E)An exam
Page 19 and 20: ISO/IEC FDIS 18028-1:2006(E)— det
Page 21 and 22: ISO/IEC FD1S 18028-1:2006(E)8 Consi
Page 23 and 24: ISO/IEC FDIS 18028-1:2006(E)9.4 Net
Page 25 and 26: ISO/IEC 18028-1:2006(E)© ISO/IEC 2
Page 27 and 28: ISO/IEC18028-1:2006(E)Table 2 — I
Page 29 and 30: IS0/IEC18028-1:2006(E)A conceptual
Page 31 and 32: ISO/IEC 18028-1:2006(E)Using the se
Page 33 and 34: ISO/IEC 18028-1:2006(E)13 Identify
Page 35 and 36: ISO/IEC 18028-1:2006(E)These Securi
Page 37 and 38: ISO/IEC 18028-1:2006(E)13.2.3 Wide
Page 39 and 40: ISO/IEC 18028-1:2006(E)— flawed S
Page 41 and 42: ISO/IEC18028-1:2006(E)13.2.5.3 Secu
Page 43 and 44: ISO/IEC 18028-1:2006(E)With all sec
Page 45 and 46: ISO/IEC18028-1:2006(E)• uncertain
Page 47 and 48: ISO/IEC 18028-1:2006(E)— IDS shou
Page 49 and 50: ISO/IEC18028-1:2006{E)— exploitat
Page 51 and 52: ISO/IEC 18028-1:2006(E)The content
Page 53 and 54: ISO/IEC18028-1:2006(E)— web-based
Page 55 and 56: ISO/IEC 18028-1:2006(E)13.4.4 Netwo
Page 57 and 58: ISO/IEC18028-1:2006(E)13.6.5 Secure
Page 59 and 60: ISO/IEC 18028-1:2006(E)use rules to
Page 61 and 62: IS0/IEC18028-1:2006(E)Where it is i
Page 63 and 64: IS0/IEC18028-1:2006(E)13.10.5.2 Sec
Page 65 and 66:
IS0/IEC18028-1:2006(E)Bibliography[
show all

INTERNATIONAL ISO/IEC STANDARD 18028-1

Create successful ePaper yourself

Delete template?

Save as template?