Changes between Version 20 and Version 21 of SecurityExpertise
- Timestamp:
- 07/07/22 17:30:29 (7 months ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
SecurityExpertise
v20 v21 3 3 ''Security'' 4 4 5 The Security Area primarily focuses on protocols that provide one or more security services such as integrity, authentication, confidentiality, access control, assessment and threat mitigation. The privacy properties and usability of IETF protocols is also an important consideration.5 The Security Area primarily focuses on protocols that provide one or more security services such as integrity, authentication, authorization, confidentiality, access control, assessment and threat mitigation. The privacy properties and usability of IETF protocols are also important considerations. 6 6 7 7 Specific expertise required for a Security AD includes a strong working knowledge of IETF security protocols and mechanisms that have been developed in the Security Area, other Areas of the IETF, and outside the IETF. It is also important for Security ADs to understand the practical aspects of securing Internet resources and communication, including the use of common classes of cryptographic primitives and common misuse of such primitives. A good understanding of threat modeling and risk assessment as well as operational and industry practices is also beneficial.