|
URL: http://www.iso.ch/iso/en/CatalogueDetailPage.CatalogueDetail?CSNUMBER=24404&ICS1=35&ICS2=100&ICS3=1
From
http://www.csa-intl.org:
The
security frameworks address the application of security services in an Open
Systems environment, where the term Open Systems is taken to include areas such
as Database, Distributed Applications, ODP and OSI. The
security frameworks are concerned with defining the means of providing
protection for systems and objects within systems, and with the interactions
between systems. The security frameworks are not concerned with the methodology
for constructing systems or mechanisms.
The
security frameworks address both data elements and sequences of operations (but
not protocol elements) that are used to obtain specific security services.
These security services may apply to the communicating entities of systems as
well as to data exchanged between systems, and to data managed by systems.
The
security frameworks provide the basis for further standardization, providing
consistent terminology and definitions of generic abstract service interfaces
for specific security requirements. They also categorize the mechanisms that
can be used to achieve those requirements.
One
security service frequently depends on other security services, making it
difficult to isolate one part of security from the others. The security
frameworks address particular security services, describe the range of
mechanisms that can be used to provide the security services, and identify
interdependencies between the services and the mechanisms. The description of
these mechanisms may involve a reliance on a different security service, and it
is in this way that the security frameworks describe the reliance of one
security service on another.
This
part of the security frameworks:
-
describes the organization of the security frameworks;
- defines security concepts which are required in more than one part of the
security frameworks;
- describes the inter-relationship of the services and mechanisms identified in
other parts of the
frameworks.
Keywords:
|
