draft-ietf-opsec-efforts-05.txt | draft-ietf-opsec-efforts-06.txt | |||
---|---|---|---|---|
Network Working Group C. Lonvick | Network Working Group C. Lonvick | |||
Internet-Draft D. Spak | Internet-Draft D. Spak | |||
Intended status: Informational Cisco Systems | Expires: December 13, 2007 Cisco Systems | |||
Expires: June 24, 2007 December 21, 2006 | June 11, 2007 | |||
Security Best Practices Efforts and Documents | Security Best Practices Efforts and Documents | |||
draft-ietf-opsec-efforts-05.txt | draft-ietf-opsec-efforts-06.txt | |||
Status of this Memo | Status of this Memo | |||
By submitting this Internet-Draft, each author represents that any | By submitting this Internet-Draft, each author represents that any | |||
applicable patent or other IPR claims of which he or she is aware | applicable patent or other IPR claims of which he or she is aware | |||
have been or will be disclosed, and any of which he or she becomes | have been or will be disclosed, and any of which he or she becomes | |||
aware will be disclosed, in accordance with Section 6 of BCP 79. | aware will be disclosed, in accordance with Section 6 of BCP 79. | |||
Internet-Drafts are working documents of the Internet Engineering | Internet-Drafts are working documents of the Internet Engineering | |||
Task Force (IETF), its areas, and its working groups. Note that | Task Force (IETF), its areas, and its working groups. Note that | |||
skipping to change at page 1, line 34 | skipping to change at page 1, line 34 | |||
and may be updated, replaced, or obsoleted by other documents at any | and may be updated, replaced, or obsoleted by other documents at any | |||
time. It is inappropriate to use Internet-Drafts as reference | time. It is inappropriate to use Internet-Drafts as reference | |||
material or to cite them other than as "work in progress." | material or to cite them other than as "work in progress." | |||
The list of current Internet-Drafts can be accessed at | The list of current Internet-Drafts can be accessed at | |||
http://www.ietf.org/ietf/1id-abstracts.txt. | http://www.ietf.org/ietf/1id-abstracts.txt. | |||
The list of Internet-Draft Shadow Directories can be accessed at | The list of Internet-Draft Shadow Directories can be accessed at | |||
http://www.ietf.org/shadow.html. | http://www.ietf.org/shadow.html. | |||
This Internet-Draft will expire on June 24, 2007. | This Internet-Draft will expire on December 13, 2007. | |||
Copyright Notice | Copyright Notice | |||
Copyright (C) The Internet Society (2006). | Copyright (C) The IETF Trust (2007). | |||
Abstract | Abstract | |||
This document provides a snapshot of the current efforts to define or | This document provides a snapshot of the current efforts to define or | |||
apply security requirements in various Standards Developing | apply security requirements in various Standards Developing | |||
Organizations (SDO). | Organizations (SDO). | |||
Table of Contents | Table of Contents | |||
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 5 | 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 5 | |||
skipping to change at page 3, line 25 | skipping to change at page 3, line 25 | |||
4.13.3. ITU Telecom Development - ITU-D . . . . . . . . . . . 15 | 4.13.3. ITU Telecom Development - ITU-D . . . . . . . . . . . 15 | |||
4.14. OASIS - Organization for the Advancement of | 4.14. OASIS - Organization for the Advancement of | |||
Structured Information Standards . . . . . . . . . . . . . 15 | Structured Information Standards . . . . . . . . . . . . . 15 | |||
4.15. OIF - Optical Internetworking Forum . . . . . . . . . . . 16 | 4.15. OIF - Optical Internetworking Forum . . . . . . . . . . . 16 | |||
4.16. NRIC - The Network Reliability and Interoperability | 4.16. NRIC - The Network Reliability and Interoperability | |||
Council . . . . . . . . . . . . . . . . . . . . . . . . . 16 | Council . . . . . . . . . . . . . . . . . . . . . . . . . 16 | |||
4.17. National Security Telecommunications Advisory | 4.17. National Security Telecommunications Advisory | |||
Committee (NSTAC) . . . . . . . . . . . . . . . . . . . . 16 | Committee (NSTAC) . . . . . . . . . . . . . . . . . . . . 16 | |||
4.18. TIA - The Telecommunications Industry Association . . . . 16 | 4.18. TIA - The Telecommunications Industry Association . . . . 16 | |||
4.19. TTA - Telecommunications Technology Association . . . . . 17 | 4.19. TTA - Telecommunications Technology Association . . . . . 17 | |||
4.20. Web Services Interoperability Organization (WS-I) . . . . 17 | 4.20. The World Wide Web Consortium . . . . . . . . . . . . . . 17 | |||
4.21. Web Services Interoperability Organization (WS-I) . . . . 17 | ||||
5. Security Best Practices Efforts and Documents . . . . . . . . 18 | 5. Security Best Practices Efforts and Documents . . . . . . . . 18 | |||
5.1. 3GPP - TSG SA WG3 (Security) . . . . . . . . . . . . . . . 18 | 5.1. 3GPP - TSG SA WG3 (Security) . . . . . . . . . . . . . . . 18 | |||
5.2. 3GPP2 - TSG-S Working Group 4 (Security) . . . . . . . . . 18 | 5.2. 3GPP2 - TSG-S Working Group 4 (Security) . . . . . . . . . 18 | |||
5.3. American National Standard T1.276-2003 - Baseline | 5.3. American National Standard T1.276-2003 - Baseline | |||
Security Requirements for the Management Plane . . . . . . 18 | Security Requirements for the Management Plane . . . . . . 18 | |||
5.4. DMTF - Security Protection and Management (SPAM) | 5.4. DMTF - Security Protection and Management (SPAM) | |||
Working Group . . . . . . . . . . . . . . . . . . . . . . 19 | Working Group . . . . . . . . . . . . . . . . . . . . . . 19 | |||
5.5. DMTF - User and Security Working Group . . . . . . . . . . 19 | 5.5. DMTF - User and Security Working Group . . . . . . . . . . 19 | |||
5.6. ATIS Work-Plan to Achieve Interoperable, | 5.6. ATIS Work-Plan to Achieve Interoperable, | |||
Implementable, End-To-End Standards and Solutions . . . . 19 | Implementable, End-To-End Standards and Solutions . . . . 19 | |||
skipping to change at page 17, line 15 | skipping to change at page 17, line 15 | |||
4.19. TTA - Telecommunications Technology Association | 4.19. TTA - Telecommunications Technology Association | |||
http://www.tta.or.kr/Home2003/main/index.jsp | http://www.tta.or.kr/Home2003/main/index.jsp | |||
http://www.tta.or.kr/English/new/main/index.htm (English) | http://www.tta.or.kr/English/new/main/index.htm (English) | |||
TTA (Telecommunications Technology Association) is a IT standards | TTA (Telecommunications Technology Association) is a IT standards | |||
organization that develops new standards and provides one-stop | organization that develops new standards and provides one-stop | |||
services for the establishment of IT standards as well as providing | services for the establishment of IT standards as well as providing | |||
testing and certification for IT products. | testing and certification for IT products. | |||
4.20. Web Services Interoperability Organization (WS-I) | 4.20. The World Wide Web Consortium | |||
http://www.w3.org/Consortium/ | ||||
The World Wide Web Consortium (W3C) is an international consortium | ||||
where Member organizations, a full-time staff, and the public work | ||||
together to develop Web standards. W3C's mission is: To lead the | ||||
World Wide Web to its full potential by developing protocols and | ||||
guidelines that ensure long-term growth for the Web. | ||||
The security work within the W3C | ||||
http://www.w3.org/Security/Activity | ||||
4.21. Web Services Interoperability Organization (WS-I) | ||||
http://www.ws-i.org/ | http://www.ws-i.org/ | |||
WS-I is an open, industry organization chartered to promote Web | WS-I is an open, industry organization chartered to promote Web | |||
services interoperability across platforms, operating systems, and | services interoperability across platforms, operating systems, and | |||
programming languages. The organization works across the industry | programming languages. The organization works across the industry | |||
and standards organizations to respond to customer needs by providing | and standards organizations to respond to customer needs by providing | |||
guidance, best practices, and resources for developing Web services | guidance, best practices, and resources for developing Web services | |||
solutions. | solutions. | |||
skipping to change at page 33, line 36 | skipping to change at page 33, line 36 | |||
Removed ATIS Security & Emergency Preparedness Activities from | Removed ATIS Security & Emergency Preparedness Activities from | |||
Documents section. Could not find it or a reference to it. | Documents section. Could not find it or a reference to it. | |||
INCITS T4 incorporated into CS1 - T4 section removed | INCITS T4 incorporated into CS1 - T4 section removed | |||
X9 Added to SDO list under ANSI | X9 Added to SDO list under ANSI | |||
Various link or grammar fixes. | Various link or grammar fixes. | |||
-05 : Fifth revision of the WG ID. | ||||
Updated the date. | ||||
Removed the 2119 definitions; this is an informational document. | ||||
-06 : Sixth revision of the WG ID. | ||||
Updated the date. | ||||
Added W3C information. | ||||
Note: This section will be removed before publication as an RFC. | Note: This section will be removed before publication as an RFC. | |||
Authors' Addresses | Authors' Addresses | |||
Chris Lonvick | Chris Lonvick | |||
Cisco Systems | Cisco Systems | |||
12515 Research Blvd. | 12515 Research Blvd. | |||
Austin, Texas 78759 | Austin, Texas 78759 | |||
US | US | |||
skipping to change at page 35, line 7 | skipping to change at page 35, line 7 | |||
Cisco Systems | Cisco Systems | |||
12515 Research Blvd. | 12515 Research Blvd. | |||
Austin, Texas 78759 | Austin, Texas 78759 | |||
US | US | |||
Phone: +1 512 378 1720 | Phone: +1 512 378 1720 | |||
Email: dspak@cisco.com | Email: dspak@cisco.com | |||
Full Copyright Statement | Full Copyright Statement | |||
Copyright (C) The Internet Society (2006). | Copyright (C) The IETF Trust (2007). | |||
This document is subject to the rights, licenses and restrictions | This document is subject to the rights, licenses and restrictions | |||
contained in BCP 78, and except as set forth therein, the authors | contained in BCP 78, and except as set forth therein, the authors | |||
retain all their rights. | retain all their rights. | |||
This document and the information contained herein are provided on an | This document and the information contained herein are provided on an | |||
"AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS | "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS | |||
OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET | OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY, THE IETF TRUST AND | |||
ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, | THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS | |||
INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE | OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF | |||
INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED | THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED | |||
WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. | WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. | |||
Intellectual Property | Intellectual Property | |||
The IETF takes no position regarding the validity or scope of any | The IETF takes no position regarding the validity or scope of any | |||
Intellectual Property Rights or other rights that might be claimed to | Intellectual Property Rights or other rights that might be claimed to | |||
pertain to the implementation or use of the technology described in | pertain to the implementation or use of the technology described in | |||
this document or the extent to which any license under such rights | this document or the extent to which any license under such rights | |||
might or might not be available; nor does it represent that it has | might or might not be available; nor does it represent that it has | |||
made any independent effort to identify any such rights. Information | made any independent effort to identify any such rights. Information | |||
End of changes. 9 change blocks. | ||||
12 lines changed or deleted | 39 lines changed or added | |||
This html diff was produced by rfcdiff 1.33. The latest version is available from http://tools.ietf.org/tools/rfcdiff/ |