1. International Telecommunication Union Eighth Global Standards Collaboration (GSC) Meeting - Ottawa, Canada, 27 April-1 May 2003 Security Standardization in ITU-T Herbert Bertine Co-Chairman ITU-T Study Group 17 hbertine@lucent.com

2. Eighth Global Standards Collaboration (GSC) Meeting - Ottawa, Canada, 27 April-1 May 2003 2 ITU Plenipotentiary Conference 2002 Resolution PLEN/2 - Strengthening the role of ITU in information and communication network security resolves 1 to review ITU's current activities in information and communication network security; 2 to intensify work within existing ITU study groups in order to: a) reach a common understanding on the importance of information and communication network security by studying standards on technologies, products and services with a view to developing recommendations, as appropriate; b) seek ways to enhance exchange of technical information in the field of information and communication network security, and promote cooperation among appropriate entities; c) report on the result of these studies annually to the ITU Council.

3. Eighth Global Standards Collaboration (GSC) Meeting - Ottawa, Canada, 27 April-1 May 2003 3 ITU-T Study Groups http://www.itu.int/ITU-T/ o SG 2 Operational aspects of service provision, networks and performance o SG 3 Tariff and accounting principles including related telecommunications economic and policy issues o SG 4 Telecommunication management, including TMN o SG 5 Protection against electromagnetic environment effects o SG 6 Outside plant o SG 9 Integrated broadband cable networks and television and sound transmission o SG 11 Signalling requirements and protocols o SG 12 End-to-end transmission performance of networks and terminals o SG 13 Multi-protocol and IP-based networks and their internetworking o SG 15 Optical and other transport networks o SG 16 Multimedia services, systems and terminals o SG 17 Data networks and telecommunication software o SSG Special Study Group "IMT-2000 and beyond" o TSAG Telecommunication Standardization Advisory Group

4. Eighth Global Standards Collaboration (GSC) Meeting - Ottawa, Canada, 27 April-1 May 2003 4 ITU-T Study Group 17 o Lead Study Group for Communication System Security Coordination/prioritization of security efforts Development of core security Recommendations o Existing Recommendations include Security architecture, model, frameworks, and protocols for open systems (X.800-series, X.270- series) Trusted Third Party Services (X.842/X.843) Public-key and attribute certificate frameworks (X.509)

5. Eighth Global Standards Collaboration (GSC) Meeting - Ottawa, Canada, 27 April-1 May 2003 5 ITU-T SG 17 Security Focus o Authentication (X.509) Ongoing enhancements as a result of more complex uses o Security Architecture (X.css) For end-to-end communications o Telebiometrics (X.tb) Telebiometric methods, devices and solutions for security purposes o Security Management (X.ism) Risk assessment, identification of assets and implementation characteristics o Mobile Security (X.msec) For low power, small memory size and small display devices

6. Eighth Global Standards Collaboration (GSC) Meeting - Ottawa, Canada, 27 April-1 May 2003 6 Security Architecture for End-to-End Communications

7. Eighth Global Standards Collaboration (GSC) Meeting - Ottawa, Canada, 27 April-1 May 2003 7 Security studies in ITU-T SG 16 o Security for multimedia systems and services Question G - “Multimedia Security” Secure H.323-based IP Telephony H.530 Security for H.323 mobility (ongoing) H.235 and associated security profiles H.248 Media Gateway Decomposition Security Secure H.320 Audio/Video and T.120 Data Conferencing o Telecommunications for disaster relief H.SETS Multimedia security aspects

8. Eighth Global Standards Collaboration (GSC) Meeting - Ottawa, Canada, 27 April-1 May 2003 8 Security studies in other SGs o SG 2 Draft new ITU-T Rec. E.sec.1 Telecommunication networks security requirements Draft new ITU-T Rec. E.sec.2 Incident organization and security incident handling o SG 9 ITU-T Rec. J.170 IPCablecom security specification o SG 13 Draft new ITU-T Rec. Y.roec Framework to support emergency communications o SGs 4, 11, 15, SSG Incorporating security requirements in their Recommendations

9. Eighth Global Standards Collaboration (GSC) Meeting - Ottawa, Canada, 27 April-1 May 2003 9 Useful References o TSB Circular 147 overviews security work being done in the ITU-T study groups o ITU-T Security Project Catalogue of ITU-T Recommendations on security Compendia of security definitions extracted from ITU-T Recommendations Security workshops (May 2002, Seoul) Writing safe and secure programs http://www.itu.int/ITU-T/ studygroups/com17/cssecurity.html

10. Eighth Global Standards Collaboration (GSC) Meeting - Ottawa, Canada, 27 April-1 May 2003 10 Security collaboration o ISO/IEC JTC 1, Information Technology SC 6, Telecommunications and Information Exchange Between Systems SC 27, IT Security Techniques SC 37, Biometrics o IETF o Many others

11. International Telecommunication Union Eighth Global Standards Collaboration (GSC) Meeting - Ottawa, Canada, 27 April-1 May 2003 Thank You!