This International Standard is a companion document to the evaluation criteria for IT security defined in ISO/IEC 15408. It defines the minimum actions to be performed by an evaluator in order to conduct an ISO/IEC 15408 evaluation, using the criteria and evaluation evidence defined in ISO/IEC 15408.
This part of ISO/IEC 18033 specifies identity-based encryption mechanisms. For each mechanism the functional interface, the precise operation of the mechanism, and the ciphertext format are specified. However, conforming systems may use alternative formats for storing and transmitting ciphertexts.
This part of ISO/IEC 18033 specifies block ciphers. A block cipher maps blocks of n bits to blocks of n bits, under the control of a key of k bits. A total of seven different block ciphers are defined.
ISO/IEC 18033-2:2006 specifies encryption systems (ciphers) for the purpose of data confidentiality.
This part of ISO/IEC 18033 is general in nature, and provides definitions that apply in subsequent parts of this International Standard. The nature of encryption is introduced, and certain general aspects of its use and properties are described. The criteria used to select the algorithms specified in subsequent parts of this International Standard are defined in Annexes A and B.
The present document gives a survey of the security features in the open source management software relevant to NFV, in particular OpenStackTM as the first case study. It addresses the OpenStack modules that provide security services (such as authentication, authorization, confidentiality protection, integrity protection, and logging) together with the full graphs of their respective dependencies down to the ones that implement cryptographic protocols and algorithms. It also identifies a set of recommendations on the use of and enhancements to OpenStack as pertinent to NFV.
The present document specifies performance benchmarking metrics for virtual switching, with the goal that the metrics will adequately quantify performance gains achieved through virtual switch acceleration conforming to the associated requirements specified herein. The acceleration-related requirements will be applicable to common virtual switching functions across usage models such as packet delivery into VNFs, network overlay and tunnel termination, stateful Network Address Translators (NAT), service chaining, load balancing and, in general, match-action based policies/flows applied to traffic going to/from the VMs. The present document will also provide deployment scenarios with applicability to multiple vendor implementations and recommendations for follow-on proof of concept activities.
The present document specifies functional requirements for both the Virtualised Infrastructure Manager (VIM) and the NFV Infrastructure (NFVI), for NFV acceleration from an infrastructure management perspective. This includes the controlling and management of acceleration resources, e.g. allocation, release and discovery of acceleration resources. The present document also identifies the corresponding impacts on VIM related specifications regarding functional requirements ETSI GS NFV-IFA 010 and reference points (ETSI GS NFV-IFA 005 and ETSI GS NFV-IFA 006).
The present document specifies the interfaces supported over the Or-Vnfm reference point of the Network Functions Virtualisation Management and Orchestration (NFV-MANO) architectural framework ETSI GS NFV-MAN 001 as well as the information elements exchanged over those interfaces.
The present document specifies the interfaces supported over the Or-Vnfm reference point of the Network Functions Virtualisation Management and Orchestration (NFV-MANO) architectural framework ETSI GS NFV-MAN 001 as well as the information elements exchanged over those interfaces.
Network Functions Virtualisation (NFV) Release 2; Management and Orchestration; Os-Ma-Nfvo reference point - Interface and Information Model Specification
The present document defines the interfaces supported over the Os-Ma-nfvo reference point of the NFV-MANO architectural framework as well as the information elements exchanged over those interfaces.
