iso iec 13335-5 management guidance on network security

《iso iec 13335-5 management guidance on network security》由会员上传分享，免费在线阅读，更多相关内容在应用文档-天天文库。

1、ISO/IECTR13335-5TECHNICALREPORTInformationtechnology—GuidelinesforthemanagementofITSecurityPart5:Managementguidanceonnetworksecurity26TABLEOFCONTENTSForewordIntroduction1.SCOPE2.REFERENCES3.DEFINITIONS4.ABBREVIATIONS5.STRUCTURE6.AIM7.OVERVIEW7.1Background7.2IdentificationProcess8REVIEWCORP

2、ORATEITSECURITYPOLICYREQUIREMENTS9REVIEWNETWORKARCHITECTURESANDAPPLICATIONS9.1Introduction9.2TypesofNetwork9.3NetworkProtocols9.4NetworkApplications9.5OtherConsiderations10IDENTIFYTYPESOFNETWORKCONNECTION11REVIEWNETWORKINGCHARACTERISTICSANDRELATEDTRUSTRELATIONSHIPS11.1NetworkCharacteristic

3、s11.2TrustRelationships12DETERMINETHETYPESOFSECURITYRISK13IDENTIFYAPPROPRIATEPOTENTIALSAFEGUARDAREAS13.1Introduction13.2SecureServiceManagement13.2.1Introduction13.2.2SecurityOperatingProcedures13.2.3SecurityComplianceChecking13.2.4SecurityConditionsForConnection13.2.5DocumentedSecurityCon

4、ditionsforUsersofNetworkServices13.2.6IncidentHandling13.3IdentificationandAuthentication13.3.1Introduction13.3.2RemoteLog-in13.3.3AuthenticationEnhancements13.3.4RemoteSystemIdentification13.3.5SecureSingleSign-on13.4AuditTrails13.5IntrusionDetection13.6ProtectionAgainstMaliciousCode13.7N

5、etworkSecurityManagement13.8SecurityGateways13.9DataConfidentialityOverNetworks13.10DataIntegrityOverNetworks13.11Non-Repudiation13.12VirtualPrivateNetworks13.13BusinessContinuity/DisasterRecovery14DOCUMENTANDREVIEWSECURITYARCHITECTUREOPTIONS15PREPAREFORTHEALLOCATIONOFSAFEGUARDSELECTION,DE

6、SIGN,IMPLEMENTATIONANDMAINTENANCE16SUMMARY26Bibliography26ForewordISO(theInternationalOrganizationforStandardization)andIEC(theInternationalElectrotechnicalCommission)formthespecializedsystemforworldwidestandardization.NationalbodiesthataremembersofISOorIECparticipateinthedevelopmentofInte

7、rnationalStandardsthroughtechnicalcommitteesestablishedbytherespectiveorganizationtodealwithparticularfieldsoftechnicalactivity.ISOandIECtechnicalcommitteescollaborateinfieldsofmutualinterest.Otherinternationalorganizations,governmentalandnon-governmental,inli