X.800 Standard

X.800 Standard

1. Recommendation X.800 provides an overview of security services allocated to the seven layers of the OSI Reference Model.

2. X.800: “a service provided by a protocol layer of communicating open systems, which ensures adequate security of the systems or of data transfers”

3. Security Services (X.800) • Authentication - assurance that communicating entity is the one claimed – have both peer-entity & data origin authentication • Access Control - prevention of the unauthorized use of a resource • Data Confidentiality - protection of data from unauthorized disclosure • Data Integrity - assurance that data received is as sent by an authorized entity • Non-Repudiation - protection against denial by one of the parties in a communication • Availability - resource accessible/usable

4. Security Mechanisms (X.800) • specific security mechanisms: – encipherment, digital signatures, access controls, data integrity, authentication exchange, traffic padding, routing control, notarization • pervasive security mechanisms: – trusted functionality, security labels, event detection, security audit trails, security recovery

5. Encryption

6. Integrity

7. Authentication

8. Non-repudiation