ISO/IEC 27033-7:2023 PDF

Name: ISO/IEC 27033-7:2023 — Information technology – Network security — Part 7: Guidelines for network virtualization security
SKU: ISO/IEC 27033-7:2023
Price: 25 EUR
Availability: InStock

Information technology – Network security — Part 7: Guidelines for network virtualization security

Название (английский):

ISO/IEC 27033-7:2023

Information technology – Network security — Part 7: Guidelines for network virtualization security

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 23
Дата публикации:: 30 ноября 2023 г.
Издание:: ISO/IEC IS 27033 edition 1 version 1
ICS:: 35.030

Тип поставки:

Full version345 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:4 раб. дн. (перевод)

Цена:345 €

Описание (английский):

This document aims to identify security risks of network virtualization and proposes guidelines for the implementation of network virtualization security. Overall, this document intends to considerably aid the comprehensive definition and implementation of security for any organization’s virtualization environments. It is aimed at users and implementers who are responsible for the implementation and maintenance of the technical controls required to provide secure virtualization environments.

Abstract

Похожие стандарты

Стандарты, упомянутые в описании

Overview

ISO/IEC 27033-7:2023 introduces comprehensive guidelines for managing network security risks related to network virtualization technology. As virtualized environments become the backbone of modern IT systems and communication networks, ensuring robust security measures is critical. Network virtualization abstracts physical network resources to create logically isolated partitions, supporting diverse applications over a shared infrastructure. This international standard assists organizations, IT professionals, network operators, and implementers in defining and maintaining effective security controls throughout the virtual network's lifecycle.

ISO/IEC 27033-7:2023 focuses on identifying security threats unique to network virtualization and provides practical recommendations for implementing security controls across virtual infrastructure, network functions, and management systems. Its application supports system flexibility and agility while minimizing the vulnerabilities inherent in virtualized environments.

Key Topics

Security Threat Identification: The standard details risks specific to virtual network environments, including malware infection, information leakage, unauthorized access, insider threats, privilege escalation, denial-of-service (DoS/DDoS) attacks, and network segmentation breaches.

Security Recommendations:

Confidentiality: Safeguarding data both at rest (such as virtual machine images, credentials, and sensitive business information) and in transit across all network interfaces and links.
Integrity: Ensuring hardware, firmware, operating systems, and applications (e.g., SDN controllers) support secure boot and integrity checks to prevent unauthorized changes.
Availability: Providing resilience against failures and attacks (e.g., disaster recovery, anti-DDoS measures) to maintain uninterrupted network services.
Authentication & Access Control: Applying robust authentication and access management across all physical and virtual components, supporting role-based or attribute-based controls to enforce least-privilege access.
Non-repudiation: Logging and monitoring access activities with digital signatures to verify authenticity and prevent denial of actions performed.

Security Controls:

Protecting physical hardware and implementing secure environments for network devices.
Deploying robust virtual machine and container isolation, securing management traffic and data through dedicated interfaces.
Monitoring network functions, leveraging AI and machine learning to detect and remediate threats in real time.
Managing software-defined networking (SDN) and network functions virtualization (NFV) orchestrator configurations to avoid policy conflicts and ensure proper synchronization.

Applications

ISO/IEC 27033-7:2023 delivers practical value across several key IT domains:

Cloud Computing: Enhances security for virtual environments in public, private, and hybrid clouds by guiding best practices for network virtualization.

Telecommunications: Assists network operators in deploying secure SDN, NFV, network slicing, and other virtual network functions essential for next-generation services like 5G.

Enterprise IT: Enables organizations to maintain secure, cost-effective, and flexible infrastructure by implementing standardized controls for virtual machines and containers in data centers.

Service Providers: Provides software and hardware vendors with a framework to design, develop, and assess secure network virtualization solutions for clients.

Compliance and Risk Management: Supports alignment with broader information security frameworks and can facilitate regulatory or contractual cybersecurity requirements.

Related Standards

Organizations deploying or managing network virtualization security can benefit from familiarizing themselves with these related international standards:

ISO/IEC 27033-1: Concepts and models for network security risk management.

ISO/IEC 27033-2: Guidelines for network security architectural design.

ISO/IEC 27033-3: Design and implementation of security controls for networks.

ISO/IEC 21878: Guidelines for virtualized servers security.

ISO/IEC 22123 series: Cloud computing overview and architecture.

ISO/IEC 22417 & ITU-T Y.3300: Network functions virtualization and software-defined networking concepts and requirements.

By adhering to ISO/IEC 27033-7:2023, organizations can better manage the complex security challenges of network virtualization, ensuring robust and resilient IT infrastructure that supports digital transformation and modern service delivery.

ISO/IEC 27033-7:2023 PDF

Abstract

Похожие стандарты

Overview

Key Topics

Applications

Related Standards

Технические детали

ISO/IEC 27033-1:2009

Information technology — Security techniques — Network security — Part 1: Overview and concepts

ISO/IEC 27033-2:2012

Information technology — Security techniques — Network security — Part 2: Guidelines for the design and imple…

BS ISO/IEC 27033-3:2010

Information technology. Security techniques. Network security. Reference networking scenarios. Threats, desig…

ISO/IEC 21878:2018

Information technology — Security techniques — Security guidelines for design and implementation of virtualiz…

SIST EN ISO 22123-2:2026

Information technology - Cloud computing - Part 2: Concepts (ISO/IEC 22123-2:2023)