安全生产协议和标准管理.pptVIP

Γ В 安全协议与标准 linfb@ 2009,12 安全标准与规范 RFC ISO FIPS X9 PKCS P1363 NESSIE 安全标准 in RFC 安全相关的协议与标准文件，当属RFC中的最全面。RFC中关于安全的文档涉及多个方面： By IETF IETF Security Area Working Groups btns Better-Than-Nothing Security dkim Domain Keys Identified Mail emu EAP Method Update hokey Handover Keying ipsecme IP Security Maintenance and Extensions isms Integrated Security Model for SNMP keyprov Provisioning of Symmetric Keys kitten Kitten (GSS-API Next Generation) krb-wg Kerberos ltans Long-Term Archive and Notary Services msec Multicast Security nea Network Endpoint Assessment pkix Public-Key Infrastructure (X.509) sasl Simple Authentication and Security Layer smime S/MIME Mail Security syslog Security Issues in Network Event Logging tls Transport Layer Security （0）安全综述，阐述了安全的概念、术语、需求，给出了一般化的考虑、建议和机制，如1675、2196、2323、2504、3631、4949等。 （1）密码算法和协议/接口规范，比如RC2(2268)、MD5(1321)、PKCS/RSA(3447)、TLS(4346)、IKE(4306)、GSS-API、SASL等。 （2）认证授权和访问控制规范，如RADIUS(2865)、Diameter(3588)、Kerberos、等。 （3）应用规范，PGP(4880)、S/MIME、HTTP over TLS(2818)、IPSec、VPN、等。 （4）其他规范。 ISO FIPS FIPS，包括DES(46)、AES(197)、DSS(186)、HMAC(198)等； /publications/PubsFIPS.html FIPS-140 FIPS 140标准历史和发展情况 CMVP The Cryptographic Module Validation Program (CMVP) is a joint American and Canadian security accreditation program for cryptographic modules. The program is available to any vendors who seek to have their products certified for use by the U.S. Government and regulated industries (such as financial and health-care institutions) that collect, store, transfer, share and disseminate sensitive, but not classfied information. All of the tests under the CMVP are handled by third-party laboratories that are accredited as Cryptographic Module Testing Laboratories by the National Voluntary Laboratory Accreditation Program (NVLAP). Product certifications under the CMVP are performed in accordance with the requirements of FIPS 140-2. The CMVP was established by the U.S. National Institute of Standar