Overview of data and telecommunications security standardization efforts in ISO, IEC, ITU, and IETF

Abstract

With the continuing growth of data communications — and especially the Internet and its integration with telecommunications — security matters have become increasingly important. In particular, the development of high-speed packet data communications over air interfaces and their folding into the overall converged networks present an ever increasing set of security issues for major network providers and for enterprise (information technology) environments as well. International and national standards bodies have thus focused on a broad range of subjects applicable to security. Over time, these major standards bodies have become interdependent. In this paper, we address the major efforts of the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) through Joint Technical Committee 1 (JTC 1) and also the efforts of the International Telecommunication Union (ITU) and the Internet Engineering Task Force (IETF). We undertake specifically to explain the interdependence of efforts undertaken by these organizations, whose work defines the direction in the international data and telecommunications security standards in a significant way.