安全生产协议与标准管理课件.pptVIP

安全生产协议与标准管理

安全标准与规范?RFC?ISO?FIPS?X9?PKCS?P1363?NESSIEΓ

安全标准inRFC安全相关的协议与标准文件，当属RFC中的最全面。RFC中关于安全的文档涉及多个方面：?ByIETFΓ

IETFSecurityAreaWorkingGroups?btnsBetter-Than-NothingSecurity?dkimDomainKeysIdentifiedMail?emuEAPMethodUpdate?hokeyHandoverKeying?ipsecmeIPSecurityMaintenanceandExtensions?ismsIntegratedSecurityModelforSNMP?keyprovProvisioningofSymmetricKeys?kittenKitten(GSS-APINextGeneration)?krb-wgKerberos?ltansLong-TermArchiveandNotaryServices?msecMulticastSecurity?neaNetworkEndpointAssessment?pkixPublic-KeyInfrastructure(X.509)?saslSimpleAuthenticationandSecurityLayer?smimeS/MIMEMailSecurity?syslogSecurityIssuesinNetworkEventLoggingΓ?tlsTransportLayerSecurity

?（0）安全综述，阐述了安全的概念、术语、需求，给出了一般化的考虑、建议和机制，如1675、2196、2323、2504、3631、4949等。Γ

?（1）密码算法和协议/接口规范，比如RC2(2268)、MD5(1321)、PKCS/RSA(3447)、TLS(4346)、IKE(4306)、GSS-API、SASL等。Γ

?（2）认证授权和访问控制规范，如RADIUS(2865)、Diameter(3588)、Kerberos、等。Γ

?（3）应用规范，PGP(4880)、S/MIME、HTTPoverTLS(2818)、IPSec、VPN、等。Γ

?（4）其他规范。Γ

Γ

ISOΓ

FIPS?FIPS，包括DES(46)、AES(197)、DSS(186)、HMAC(198)等；?/publications/PubsFIPS.htmlΓ

FIPS-140Γ

FIPS140标准历史和发展情况?Γ

Γ

CMVP?TheCryptographicModuleValidationProgram(CMVP)isajointAmericanandCanadiansecurityaccreditationprogramforcryptographicmodules.TheprogramisavailabletoanyvendorswhoseektohavetheirproductscertifiedforusebytheU.S.Governmentandregulatedindustries(suchasfinancialandhealth-careinstitutions)thatcollect,store,transfer,shareanddisseminatesensitive,butnotclassfiedinformation.AllofthetestsundertheCMVParehandledbythird-partylaboratoriesthatareaccreditedasCryptographicModuleTestingLaboratoriesbytheNationalVoluntaryLaboratoryAccreditationProgram(NVLAP).ProductcertificationsundertheCMVPareperformedinaccordancewiththerequirementsofFIPS140-2.?TheCMVPwasestablishedbytheU.S.NationalInstituteofStandardsandTechnology(NIST)and