IEEE Std 802.10g-1995 (Supplement to IEEE Std 802.10-1992 ) -Description

Abstract: A security label option that can be used to implement rule-based access controls for the protection of IEEE 802 local area networks (LANs) and metropolitan area networks (MANs) is defined. Information carried by security labels can be used to control access, specify protective measures, and identify handling restrictions required by a communications security policy. This standard specifies the syntax for the label and basic processing rules. Other information, such as label semantics and additional processing requirements unique to a security policy, can be specified via registration.

Keywords: access control, local area network security, metropolitan area network security, secure data exchange, security labels

Content

• 1. Revisions to IEEE Std 802.10-1992 and IEEE Std 802.10f-1993
• 2. Revisions to IEEE Std 802.10-1992
• • 2.1.1 Acronyms
  • • 2.1.2 Definitions
  • 3.1 References
  • 2.3 SDE security services
  • • 2.5.1 SDE PDU format
    • 2.5.3 Building the SDE PDU
    • 2.6.4 Transmission procedures
    • 2.6.5 Reception procedures
    • 2B.2.1 Party A's proposed options
    • 2B.2.2 Party B's selected options
    • 2B.3.3 Security association parameters
    • 2B.4.3 Security association parameters
    • 2B.5.4 Forming the Protected Header
    • 2B.6.6 SDE_UNITDATA.indication
    • 2B.6.6 Security label
  • 2E.1 Introduction
  • A.1 Revisions to IEEE Std 802.10f-1993
  • 2F.3 ASN.1 productions
  • 2I.1 Introduction
  • 2I.2 Overview
  • 2I.3 SDE security label option
  • 2I.4 Security label length
  • 2I.5 Security tags
  • • 2I.5.1 Tag type
    • 2I.5.2 Tag length
    • 2I.5.3 Security data
  • 2I.6 Security Tag Type 1
  • • 2I.6.1 Restrictive security attribute bit map
  • 2I.7 Security Tag Type 2
  • • 2I.7.1 Enumerated attributes
  • 2I.8 Security Tag Type 5
  • • 2I.8.1 Security attribute ranges
  • 2I.9 Security Tag Type 6
  • • 2I.9.1 Permissive Security Attribute Bit Map
  • 2I.10 Security Tag Type 7
  • 2I.11 Additional station objects
  • 2I.12 Additional association objects
  • 2I.13 Additional Protected Header field
  • 2I.14 Detailed functional specification
  • • 2I.14.1 SDE_UNITDATA.request
    • 2I.14.2 SDE_UNITDATA.indication
  • 2K.1 Introduction
  • 2K.2 Trustworthiness of transmitted labels
  • 2K.3 Originator requirements
  • 2K.4 Receiver requirements
  • 2K.5 Error reports
  • 2K.6 Policy-based processing rules
• Annex B Bibliography

links: [Standard Status] - [Purchase] - [PDF^*] - [LAN/MAN (802) Collection - Description]

available for Standards Online LAN/MAN (802) Collection subscribers only