Source: http://lufa.org/?page=document/102401379/As-NZS-ISO-IEC-18028-5-2008-Information-Technology-Security-Techniques-IT-Network-Security-Securing-Commu
Timestamp: 2017-07-21 02:51:14
Document Index: 238352952

Matched Legal Cases: ['art 5', 'art 5', 'art 1', 'art 2', 'art 3', 'art 4', 'art 1', 'art 2', 'art 3', 'art 4', 'art 1', 'art 1', 'art 2', 'art 3', 'art 2', 'art 1', 'art 2']

As NZS ISO IEC 18028.5-2008 Information Technology - Security Techniques - IT Network Security Securing Commu | Virtual Private Network | International Electrotechnical Commission
As NZS ISO IEC 18028.5-2008 Information Technology - Security Techniques - IT Network Security Securing CommuUploaded by SAI Global - APACRelated InterestsVirtual Private NetworkInternational Electrotechnical CommissionComputer SecurityOnline Safety & PrivacyComputer NetworkRating and Stats0.0 (0)Document ActionsDownloadShare or Embed DocumentEmbedDescription: Standards Preview PDFs from SAI Global InfoStoreView MoreStandards Preview PDFs from SAI Global InfoStoreCopyright: Attribution Non-Commercial (BY-NC)Download as PDF, TXT or read online from ScribdFlag for inappropriate contentAS/NZS ISO/IEC 18028.5:2008
AS/NZS ISO/IEC 18028.5:2008
Information technology—Security techniques—IT network security Part 5: Securing communications across networks using virtual private networks
AS/NZS ISO/IEC 18028.5:2008 This Joint Australian/New Zealand Standard was prepared by Joint Technical Committee IT-012, Information Systems, Security and Identification Technology. It was approved on behalf of the Council of Standards Australia on 28 May 2008 and on behalf of the Council of Standards New Zealand on 31 May 2008. This Standard was published on 25 June 2008.
The following are represented on Committee IT-012: Attorney General's Office Australian Association of Permanent Building Societies Australian Bankers Association Australian Chamber of Commerce and Industry Australian Electrical and Electronic Manufacturers Association Certification Forum of Australia Council of Small Business Organisations Internet Industry Association NSW Police New Zealand Defence Force Reserve Bank of Australia
This Standard was issued in draft form for comment as DR 07260.
First published as AS/NZS ISO/IEC 18028.5:2008.
ISBN 0 7337 8765 7
This Standard was prepared by the Joint Standards Australia/Standards New Zealand Committee IT-012, Information Systems, Security and Identification Technology. The objective of this Standard is to provide IT professionals and general line management with detailed guidance on securing communications across networks using virtual private networks. This Standard is identical with, and has been reproduced from ISO/IEC 18028-5:2006, Information technology—Security techniques—IT network security, Part 5: Securing communications across networks using virtual private networks. As this Standard is reproduced from an international standard, the following applies: (a)
Its number appears on the cover and title page while the international standard number appears only on the cover. In the source text ‘this part of ISO/IEC 18028’ should read ‘this Australian/New Zealand Standard’. A full point substitutes for a comma when referring to a decimal marker.
References to International Standards should be replaced by references to Australian or Australian/New Zealand Standards, as follows: Reference to International Standard ISO/IEC 17799 Information technology—Security Techniques—Code of practice for information security management 18028 18028-1 18028-2 18028-3 Information technology—Security techniques—IT network security Part 1: Network security management Part 2: Network security architecture Part 3: Securing communications between networks using security gateways Part 4: Securing remote access Australian/New Zealand Standard AS/NZS 27002 Information technology—Security Techniques—Code of practice for information security management AS/NZS ISO/IEC 18028 Information technology—Security techniques—IT network security 18028.1 Part 1: Network security management 18028.2 Part 2: Network security architecture 18028.3 Part 3: Securing communications between networks using security gateways 18028.4 Part 4: Securing remote access
Any international references not listed have not been adopted as Australian or Australian/New Zealand Standards. The term ‘informative’ has been used in this Standard to define the application of the appendix to which it applies. An ‘informative’ appendix is only for information and guidance.
Foreword............................................................................................................................................................ iv Page Introduction ........................................................................................................................................................ v 1 2 3 3.1 3.2 4 5 5.1 5.2 5.3 5.4 6 7 7.1 7.2 7.3 7.4 7.5 7.6 8 8.1 8.2 8.3 9 9.1 9.2 Scope ......................................................................................................................................................1 Normative references ............................................................................................................................1 Terms and definitions ...........................................................................................................................2 Terms defined in other International Standards.................................................................................2 Terms defined in this part of ISO/IEC 18028 .......................................................................................2 Abbreviated terms .................................................................................................................................3 Overview of VPNs ..................................................................................................................................3 Introduction ............................................................................................................................................3 Types of VPN..........................................................................................................................................4 VPN techniques......................................................................................................................................5 Security aspects ....................................................................................................................................6 VPN security objectives ........................................................................................................................7 VPN security requirements...................................................................................................................7 Confidentiality ........................................................................................................................................8 Integrity...................................................................................................................................................8 Authentication........................................................................................................................................8 Authorization..........................................................................................................................................8 Availability ..............................................................................................................................................8 Tunnel Endpoints...................................................................................................................................8 Guidelines for the selection of secure VPNs ......................................................................................9 Regulatory and legislative aspects......................................................................................................9 VPN management aspects....................................................................................................................9 VPN architectural aspects ....................................................................................................................9 Guidelines for the implementation of secure VPNs .........................................................................12 VPN management considerations......................................................................................................12 VPN technical considerations ............................................................................................................12
Annex A (informative) Technologies and protocols used to implement VPNs...........................................15 A.1 Introduction ..........................................................................................................................................15 A.2 Layer 2 VPNs ........................................................................................................................................15 A.3 Layer 3 VPNs ........................................................................................................................................17 A.4 Higher Layer VPNs...............................................................................................................................17 A.5 Comparison of typical VPN protocol security features ...................................................................19 Bibliography ......................................................................................................................................................20
© ISO/IEC 2006 – All rights reserved
ISO/IEC 18028-5:2006(E)
The telecommunications and information technology industries are seeking cost-effective comprehensive security solutions. A secure network should be protected against malicious and inadvertent attacks, and should meet the business requirements for confidentiality, integrity, availability, non-repudiation, accountability, authenticity and reliability of information and services. Securing a network is also essential for maintaining the accuracy of billing or usage information as appropriate. Security capabilities in products are crucial to overall network security (including applications and services). However, as more products are combined to provide total solutions, the interoperability, or the lack thereof, will define the success of the solution. Security must not only be a thread of concern for each product or service, but must be developed in a manner that promotes the interweaving of security capabilities in the overall end-to-end security solution. Thus, the purpose of ISO/IEC 18028 is to provide detailed guidance on the security aspects of the management, operation and use of information system networks, and their inter-connections. Those individuals within an organization that are responsible for information security in general, and network security in particular, should be able to adapt the material in ISO/IEC 18028 to meet their specific requirements. Its main objectives are as follows: ⎯ in ISO/IEC 18028-1, to define and describe the concepts associated with, and provide management guidance on, network security – including on how to identify and analyze the communications related factors to be taken into account to establish network security requirements, with an introduction to the possible control areas and the specific technical areas (dealt with in subsequent parts of ISO/IEC 18028); ⎯ in ISO/IEC 18028-2, to define a standard security architecture, which describes a consistent framework to support the planning, design and implementation of network security; ⎯ in ISO/IEC 18028-3, to define techniques for securing information flows between networks using security gateways; ⎯ in ISO/IEC 18028-4, to define techniques for securing remote access; ⎯ in ISO/IEC 18028-5, to define techniques for securing inter-network connections that are established using virtual private networks (VPNs). ISO/IEC 18028-1 is relevant to anyone involved in owning, operating or using a network. This includes senior managers and other non-technical managers or users, in addition to managers and administrators who have specific responsibilities for information security and/or network security, network operation, or who are responsible for an organization's overall security program and security policy development. ISO/IEC 18028-2 is relevant to all personnel who are involved in the planning, design and implementation of the architectural aspects of network security (for example network managers, administrators, engineers, and network security officers). ISO/IEC 18028-3 is relevant to all personnel who are involved in the detailed planning, design and implementation of security gateways (for example network managers, administrators, engineers and network security officers). ISO/IEC 18028-4 is relevant to all personnel who are involved in the detailed planning, design and implementation of remote access security (for example network managers, administrators, engineers, and network security officers). ISO/IEC 18028-5 is relevant to all personnel who are involved in the detailed planning, design and implementation of VPN security (for example network managers, administrators, engineers, and network security officers).
This part of ISO/IEC 18028 provides detailed direction with respect to the security aspects of using Virtual Private Network (VPN) connections to inter-connect networks, and also to connect remote users to networks. It builds upon the network management direction provided in ISO/IEC 18028-1. It is aimed at those individuals responsible for the selection and implementation of the technical controls necessary to provide network security when using VPN connections, and for the subsequent network monitoring of VPN security thereafter. This part of ISO/IEC 18028 provides an overview of VPNs, presents VPN security objectives, and summarizes VPN security requirements. It gives guidance on the selection of secure VPNs, on the implementation of secure VPNs, and on the network monitoring of VPN security. It also provides information on typical technologies and protocols used by VPNs.
The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 7498 (all parts), Information technology — Open Systems Interconnection — Basic Reference Model ISO/IEC 13335-1:2004, Information technology — Security techniques — Management of information and communications technology security — Part 1: Concepts and models for information and communications technology security management ISO/IEC 17799:2005, Information technology — Security techniques — Code of practice for information security management ISO/IEC 18028-1:2006, Information technology — Security techniques — IT network security — Part 1: Network security management ISO/IEC 18028-2:2006, Information technology — Security techniques — IT network security — Part 2: Network security architecture ISO/IEC 18028-3:2005, Information technology — Security techniques — IT network security — Part 3: Securing communications between networks using security gateways
AS/NZS ISO/IEC 18028.5:2008, Information technology - Security techniques - IT network security Securing communications across networks using virtual private networks
Recommended DocumentsDocuments Similar To As NZS ISO IEC 18028.5-2008 Information Technology - Security Techniques - IT Network Security Securing CommuSkip carouselAs NZS ISO IEC 18028.4-2006 Information Technology - Security Techniques - IT Network Security Securing RemotAs NZS ISO IEC 18028.1-2008 Information Technology - Security Techniques - IT Network Security Network SecuriAs NZS ISO IEC 18028.3-2006 Information Technology - Security Techniques - IT Network Security Securing CommuAs NZS ISO IEC 18028.2-2006 Information Technology - Security Techniques - IT Network Security Network SecuriAs ISO 27799-2011 Information Security Management in Health Using ISO IEC 27002VPN BrochureMTA 98-367 OD ExternalPeribit Seq Reducer Operators Guide Sr_31_ogCVD RemoteSiteUsingLocalInternetAccessDesignGuide AUG14VPN Server With PPTPDragontech Multi-Path Load Balancing Passenger WiFi Router for Buses v11 7 WSM User Guide (en-US)ASG Network Protection EnCisco 1800 Series Integrated Services Routers (Fixed) Software Configuration GuideMEN Part 2- Day3 -Ver1_NoRestrictionAttacksA Case Study On Network Virtualization - Assis NgoloR and D Strategy EngMX_seriesCCNASv2_InstructorPPT_CH10IPSec VPNDraytek Vigor 2910 & GreenBow IPSec VPN software ConfigurationUTM Solutions - Detailed Specifications and Overviewch 9 ccna4Victor Weers Resumemp-bgp-mpls-vpnNokia_E50_UG_enInformation Security in Banking Sector.pdfiec61634{ed1.0}en-1995.pdfAs 60417.2.5-2004 Graphical Symbols for Use on Equipment - Home Electric AppliancesDocuments About Virtual Private NetworkSkip carouselGWI Social Report Q3 2014USA v. FrenchClaimBuchta and Van Rooy ComplaintTOPdesk Magazine June 2015 Securing a Diverse, Global NetworkSecuring Event Network Operations with the Cisco Adaptive Security Virtual ApplianceA Worldwide Survey of Encryption ProductsPerformance Analysis of SSL VPNPrenda CAND Motion for Attorneys' FeesNetwork Security- Arvind Kumar SharmaGen Y - Cisco IT InsightsChatlogsAutomatic login with SAMLMore From SAI Global - APACSkip carouselSAI Global expands Standards On-LineMP 99-2009 Telehealth Session Information Required for Health RecordsMP 96-2008 Standards for Enterprise-wide Patient Administration SystemsMP 94-2003 Product Numbering Standards for Electronic Health Supply ChainsMP 91-2000 Dynamic Approaches to Healthcare Risk ManagementMP 88-2000 Evolution of Australian Standard for Pressure Vessel Steel PlateMP 87.2-2007 Australian New Zealand Certification Scheme for Explosion-protected Electrical Equipment (ANZExMP 87.1-2008 Australian New Zealand Certification Scheme for Explosion-protected Electrical Equipment (ANZExMP 84-2000 Evolution of Australian Standards for Structural SteelMP 78-1999 Manual for the Assessment of Risks of Plumbing ProductsMP 76-1997 Pressure Equipment - Inspection Bodies and PersonnelMP 75-1996 Strategies for the Implementation of a Public Key Authentication Framework (PKAF) in AustraliaMP 74-1996 Strategies for the Development of Standards for Digital Video and Associated ServicesMP 67.2-1992 Standardized Interoperability Tests in the OSI Environment FTAM TestsMP 63-1992 the Australian GarmentMark - Specifications and ProceduresMP 67.1-1992 Standardized Interoperability Tests in the OSI Environment X.400 TestsMP 62-1992 OSI - VocabularyMP 61-1992 Buried Pipes - Glossary of TermsMP 59-2000 Naming and Addressing in the Australian OSI EnvironmentMP 58-1991 Workplace Injury and Disease Recording Standard - Resource KitMP 55-1988 Vehicle Identification Number (VIN) CodesMP 53-2004 Personal Financial Planning Part 1- Definitions Processes and Practices Part 2- Requirements ForMP 52-2005 Manual of Authorization Procedures for Plumbing and Drainage ProductsMP 51-1986 a Study of Language in Australian Business DocumentsMP 48-2008 Certified Gas Cylinder Test StationsMP 25-2002 Basic Guide to MicrofilmingMP 2-1938 Report on the Standardization of Minimum Requirements for Sewerage by-lawsMP 15.6-1990 Standards Australia Style Manual Drafting and Interpretation of Standards From a Legal PerspectiMP 15.2-1990 Standards Australia Style Manual Drafting of Australian StandardsMP 100-2009 Procedures for Certification of Organic and Biodynamic Products