​Executive Summary

Study Group 17 meeting

(26 August – 4 September 2013, Geneva/Switzerland)

Participation:

The second Study Group 17 meeting in the 2013-2016 study period was attended by 22 Member States, 12 Sector Members, 5 Associates, and 1 Academia. In total 131 participants attended the SG17 meeting.

Approved ITU-T Recommendations:

One new ITU-T Recommendations (under TAP) was approved.

• X.1255 (X.discovery), Framework for discovery of identity management information.

Four Member states asked for four weeks in accordance of WTSA-12 Resolution 1 clause 9.5.5 for draft Recommendation ITU-T X.1208 (X.csi), Guideline for cybersecurity index to enhance confidence and security in the use of telecommunication/information and communication technology.  Objections were subsequently received from three of these Member States and consequently X.1208 is not approved..

Approved Amendment and agreed Implementer's Guide:

One new Amendment was approved, and one Implementer's Guide was agreed.

• X.1500 Amd.4, Overview of cybersecurity information exchange – Amendment 3 – Revised structured cybersecurity information exchange techniques
• Z.Imp100, Specification and Description Language implementer's guide – Version 2.0.1.

Determined draft ITU-T Recommendations:

Four draft new Recommendations ITU-T, two draft revised Recommendations ITU-T, and one Corrigendum were determined:

• X.1210 (X.trm), Overview of source-based security troubleshooting mechanisms for Internet protocol-based networks
• X.1243 Cor.1, Corrigendum 1 to Recommendation ITU-T X.1243
• X.1520 revised (X.cve), Common vulnerabilities and exposures
• X.1526 revised (X.oval), Open vulnerability and assessment language
• X.1546 (X.maec), Malware attribute enumeration and classification
• X.1582 (X.cybex-tp), Transport protocols supporting cybersecurity information exchange
• X.1600 (X.ccsec), Security framework for cloud computing.

Consented draft ITU-T Recommendations:

Consent was reached on one draft new Recommendation, and one draft revised Recommendation:

• X.1144 (X.xacml), eXtensible Access Control Markup Language (XACML) 3.0
• Z.109 revised, Specification and Description Language – Unified modeling language profile for SDL-2010.

New work items:

The following three new work items were agreed to be added to the work programme:

• X.oer, Recommendation ITU-T X.oer, Specification of  octet encoding rules (OER) (in Q11/17).
• X.cms, Recommendation ITU-T X.CMS, Cryptographic message syntax (CMS) (in Q11/17).
• TR HBPKI, Technical Report: New challenges for Public-Key Infrastructure standardization: Mobile Networks, Machine-to-Machine communication, Cloud Computing and Smart Grid (in Q11/17).

In addition, three work items were removed from the work programme.

Coordination and promotion activities:

• One Joint Coordination Activity meeting (JCA-IdM) was held. A virtual meeting of JCA-COP was held prior to the SG17 meeting on 23 July 2013.
• Updates made in ICT Security Roadmap and Security Compendium.
• Planned ITU security workshop in September 2014.

Correspondence Groups:

Seven existing Correspondence Groups were continued:

• Correspondence group (CG-pverify) on Verification process for cryptographic protocols (for Q1/17), Chairman: Yutaka Miyake.
• Correspondence group (CG-cybex) on Cybersecurity information exchange capabilities (for Q4/17), Chairmen: Youki Kadobayashi, and Robert A. Martin.
• Correspondence group (CG-wmsec) on Web mashup security activities (for 7/17), Chairman: Jae Hoon Nah.
• Correspondence group (CG-Xccsec) on High-level security framework for cloud computing and cloud computing security collaboration (for Q8/17), Chairman: Huirong Tian.
• Correspondence group (CG-giim) on Generic IdM interoperability mechanisms activities (for Q10/17), Chairman: Jing Wu.
• Correspondence group (CG-idmcc) on IdM requirement in cloud computing activities, (for Q10/17, and assisted by Q8/17), Chairman: Jing Wu.
• Correspondence group (CG-oitf) on Open identity trust framework activities, (for Q10/17), Chairman: David Turner.

Other highlights:

• SG17 agreed to revise Question 6/17 and has selected the traditional approval process (TAP) to be applied for Q6/17.
• Q6/17 will start risk analysis and assessment on the Vehicle-to-Infrastructure and Vehicle-to-Vehicle scenarios in the Intelligent Transportation System (ITS); such work is a prerequisite for launching new ITS work items in Q6/17.
• One special session was held on Bridging the standardization gap.
• Continued reporting by SG17 is taking place on the WTSA-12, WTDC-10 and PP-10 Resolutions.
• Work in progress on a template for Correspondence Group reports was informed to all study groups.
• Strong collaboration with ISO/IEC JTC1/SCs, ISO/TCs and IEC/TCs continues.

Associated events:

Associated events below assisted in identifying new actions for the study group and leverage the collaboration with other organizations and hopefully attract new experts in the ITU-T and SG17 community.

• Mentoring programme for newcomers: Comprehensive programme through tutorials (see below), welcome, feedback session and guided tour, all well attended with interest.
• Seven tutorial presentations were given:
• SG17 Orientation session for newcomers, Arkadiy Kremer, SG17 Chairman;
• ETSI ISG ISI Standardization, Gérard Gaudin, chairman of ETSI ISG ISI
• Introduction to 3^rd Cyber Space conference, Seoul, 17 – 18 October 2013, Heung-Youl Youm; SG17 vice chairman
• Authoring Recommendations – Tips and tricks for streamlining editing, Anibal Cabrera Montoya, TSB
• GotoMeeting Training for Rapporteurs, Carlos Muñoz, TSB
• Collaborative environment – ITU Collaboration Tools, Dominique Pittet, ITU IS
• Conformance & Interoperability – Key activities and main results of ITU-T SGs for the implementation of ITU C&I Programme, Denis Andreev, TSB.
• A SG17 reception and social networking event was sponsored by ETRI.

Next SG17 meeting:

• 15 – 24 January 2014, Geneva.