ISO/IEC 24767-1:2008 PDF

Name: ISO/IEC 24767-1:2008 — Information technology — Home network security — Part 1: Security requirements
SKU: ISO/IEC 24767-1:2008
Price: 25 EUR
Availability: InStock

Information technology — Home network security — Part 1: Security requirements

Название (английский):

ISO/IEC 24767-1:2008

Information technology — Home network security — Part 1: Security requirements

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 20
Дата публикации:: 30 сентября 2008 г.
Издание:: ISO/IEC IS 24767 edition 1 version 1
ICS:: 35.110

Тип поставки:

Full version300 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:4 раб. дн. (перевод)

Цена:300 €

Описание (английский):

ISO/IEC 24767-1:2008 specifies the security requirements that may come from inside or outside a home. This standard gives guidance for the design of security mechnisms applied either inside home networks or through the Internet, and it provides means to analyse the risks for each networked device and to define its specific security requirements.

Abstract

Похожие стандарты

Другие стандарты ISO

Overview

ISO/IEC 24767-1:2008 - Information technology - Home network security - Part 1: Security requirements - defines security requirements and guidance for home electronic systems (HES) and home networks. It addresses threats originating inside or outside the home, offers risk-analysis approaches for each networked device, and gives design guidance for security mechanisms implemented locally or via the Internet. The standard is advisory (guidelines rather than prescriptive conformance clauses) and is intended as a foundation for developing HES security services.

Key topics and technical requirements

Scope and purpose: Security requirements for a range of home devices (A/V “brown goods”, appliances “white goods”, informational devices) and the home network as a whole.

Risk and threat analysis: Identification of threats such as unauthorized access, malicious software, denial-of-service (DoS/DDoS), unintended data modification, user errors and system failures.

Security services & requirements:

Access control and user authentication to ensure only authorized users/processes access devices and services.
Data and message authentication and data integrity to verify source and prevent tampering.
Protection of communications (confidentiality and secure channels).
Remote access control for services accessed from outside the home.
Firewalls, virus/malware protection, and DoS mitigation.
Auditing and recovery capabilities to support incident analysis and system restoration.

Operational challenges: Always-on devices, power-line and wireless vulnerabilities, diverse device capabilities and user requirements, and complex device assortments.

Security models: Deployment models with differing responsibilities and requirements - Owner Supported Single home (OSS), Externally Supported Single home (ESS), Externally Supported Multiple homes (ESM).

Design constraints: Multiple security levels per application, emphasis on convenience/usability, and requirement that the homeowner remains the security manager (even if functions are outsourced).

Applications and who should use it

Product designers and firmware developers for connected appliances and entertainment devices.

Home network architects, integrators and system engineers designing secure HES deployments.

Service providers and content providers defining contractual security expectations for customer premises equipment.

Security analysts and risk managers performing threat assessments for smart-home environments.

Policy makers and consultants preparing home security guidance and best practices.

Related standards

Other parts of the ISO/IEC 24767 series (see IEC web site for the list) and broader IT/security standards (e.g., authentication, secure communications) are complementary to this Part 1 guidance.

Keywords: ISO/IEC 24767-1:2008, home network security, security requirements, HES, access control, threat analysis, remote access, firewalls, data integrity.

ISO/IEC 24767-1:2008 PDF

Abstract

Похожие стандарты

Overview

Key topics and technical requirements

Applications and who should use it

Related standards

Технические детали

ISO 8689-1:2000

Water quality — Biological classification of rivers — Part 1: Guidance on the interpretation of biological qu…

ISO/ASTM51540-04(2012)

Standard Practice for Use of a Radiochromic Liquid Dosimetry System (Withdrawn 2020)

ISO/ASTM51204-04

Standard Practice for Dosimetry in Gamma Irradiation Facilities for Food Processing (Withdrawn 2013)

ISO/ASTM51431-05

Standard Practice for Dosimetry in Electron Beam and X-Ray (Bremsstrahlung) Irradiation Facilities for Food P…

ISO/ASTM52628-20e1

Standard Practice for Dosimetry in Radiation Processing

ISO/ASTM52921-13(2019)

Standard Terminology for Additive Manufacturing—Coordinate Systems and Test Methodologies

ISO/ASTMTR52917-EB

Additive Manufacturing — Round Robin Testing — General Guidelines

ISO/ASTM52901-17(2023)

Standard Guide for Additive Manufacturing – General Principles – Requirements for Purchased AM Parts