|

ISO/IEC 27033
Information technology -- Security techniques -- Network security (draft)
信息技术—安全技术—网络安全
该标准目前处于起草阶段(其中的第一部分 ISO/IEC 27033-1已于2009年12月正式发布)。
标准介绍:
ISO/IEC 27033将是一个包含多个部分的标准,来自于已经存在的网络安全标准ISO/IEC 18028的五个部分。现有的标准将不仅是改换名称,而是被大幅修改。
ISO/IEC 27033为实施ISO/IEC 27002所介绍的网络安全控制提供详细指南,包含以下部分:
ISO/IEC 27033-1:2009 Information technology -- Security techniques -- Network security -- Part 1: Overview and concepts
ISO/IEC 27033-2: Guidelines for the design and implementation of network security
ISO/IEC 27033-3: Reference networking scenarios -- threats, design techniques and control issues
ISO/IEC 27033-4: Securing communications between networks using security gateways -- threats, design techniques and control issues
ISO/IEC 27033-5: Securing Virtual Private Networks -- threats, design techniques and control issues
ISO/IEC 27033-6: IP convergence
ISO/IEC 27033-7: Guidelines for securing wireless networking -- Risks, design techniques and control issues
ISO/IEC 27033-8: Guidelines for securing [insert other network security aspects] -- Risks, design techniques and control issues
|