RFC: Guidelines and Security Standards
Transport Layer Protocols:
- AH - IP Authentication Header.
- EGP - Exterior Gateway Protocol.
- ESP - Encapsulating Security Payload.
- GGP - Gateway to Gateway Protocol.
- GRE - Generic Routing Encapsulation.
- ICMP - Internet Control Message Protocol.
- ICMPv6 - Internet Control Message Protocol for IPv6.
- IGRP - Interior Gateway Routing Protocol.
- L2TP - Level 2 Tunneling Protocol.
- MOSPF - Multicast Open Shortest Path First.
- OSPF - Open Shortest Path First Routing Protocol.
- RSVP - Resource ReSerVation Protocol.
- SEND - SEcure Neighbor Discovery.
- SKIP - Simple Key management for Internet Protocol.
- TCP - Transmission Control Protocol.
- UDP - User Datagram Protocol.
- UDP-Lite, Lightweight User Datagram Protocol.
Application Layer Protocols:
- AURP - AppleTalk Update-based Routing Protocol.
- Authentication Server Protocol.
- BFTP - Background File Transfer Program.
- BGP - Border Gateway Protocol.
- BOOTP - Bootstrap Protocol.
- CMP - Certificate Management Protocols.
- CRANE - Common Reliable Accounting for Network Element.
- DCAP - Data Link Switching Client Access Protocol.
- DHCP - Dynamic Host Configuration Protocol.
- DHCPv6 - Dynamic Host Configuration Protocol for IPv6.
- DIAMETER.
- DNS - Domain Name System.
- Finger.
- FTP - File Transfer Protocol.
- Gopher.
- HOSTNAME.
- HTTP - HyperText Transfer Protocol.
- IKE - Internet Key Exchange.
- IMAP - Interactive Mail Access Protocol.
- IPFIX - IP Flow Information Export.
- IRC - Internet Relay Chat.
- ISAKMP - Internet Security Association and Key Management
Protocol.
- Kerberos.
- Kermit.
- L2F, Layer 2 Forwarding.
- L2TP, Level 2 Tunneling Protocol.
- POP - Post Office Protocol.
- PPTP - Point to Point Tunneling Protocol.
- RADIUS - Remote Authentication Dial-In User Service.
- RAP - Internet Route Access Protocol.
- RIP - Routing Information Protocol.
- SIP - Session Initiation Protocol.
- SMTP - Simple Mail Transfer Protocol.
- SNMP - Simple Network Management Protocol.
IETF and Security Standards
RFC 1244 And RFC 2196
The site security handbook of the IETF for security standards was
the RFC 1244 this is now obsolete and is replaced by RFC 2196 which
is a guide to developing computer security policies and procedures
for systems that have access to the internet. References for site
security can also be found at RFC 768, RFC 791, RFC 793, RFC 854,
RFC 959, RFC 1087, RFC 1113, RFC 1114, RFC 1115, and RFC 1200.
The major approach for this book is related to risk assessment
and security policies for a more secure network. It details about
firewalls, security services and procedures, authentication, confidentiality,
and integrity of information. Most of the recommendations are for
network security management and services. Data manager network security
must remember that a good security policy must be implemented, enforced
and clearly contain areas of responsibility. You could look at the
guidelines given before framing a policy for your network.
Also enumerated are requirements for security of services
- Name Servers (DNS and NIS(+))
- Password/Key Servers (NIS(+) and KDC)
- Authentication/Proxy Servers (SOCKS, FWTK)
- Electronic Mail
- World Wide Web (WWW)
- File Transfer (FTP, TFTP)
- NFS
RFC 1281
This includes security standards as guidelines are for the secure
operation of the internet and concern the entire internet community.
Security issues that are addressed are
- privacy of information
- Protection of information against unauthorized modification
- Protection of systems against denial of Service
- Protection of systems against unauthorized access.
Security Guidelines
Some of the security issues dealt with in this are related to the
users, administrators and the manufacturers and their responsibilities.
Users are
- Responsible and accountable for security policies of their
own system
- Required to employ the available security mechanism for protection
of their data and systems
- Network service providers are
- Responsible for security of the systems they operate and for
notifying the users of policies and changes to policies.
- Manufacturers are
- Responsible for providing proper systems which provide adequate
security controls
- Cooperate with uses and providers for better security
Rival bodies are cropping up and are offering alternative approaches
to the security standards many of which are already under the purview
of the IETF. Many of these bodies are essentially governmental bodies
that offer suggestions and standards such that security is bettered
and crime is reduced.
Related Articles
Best Tools for a Secure Network
Network Security: Sites, Forums and Tools That Help You
How to Eliminate Major Security Concerns for SME's?
Bookmark
this page
Email
this to your friend
Add
this page to del.icio.us