1909-summary
|
Executive Summary Meeting of ITU-T SG17 'Security', Geneva, 27 August - 5 September 2019 Hot topics: - 9th edition of X.500-series Recommendations on 'Directory' and PKI
- Security Architecture
- Cybersecurity
- Quantum-based security
- Preparation for WTSA2020
- Distributed identity management
The event was announced by TSB Circular 158 and was attended by 71 participants (including remote participation) from 22 countries. Outcome of this workshop identified next step advices for SG17 is found here. Meeting Output:- Agreed 3 texts: Amendment, Supplement, Implementers' Guide. Details are in Annex A c).
- Determined (TAP): 8 new Recommendation, Details are in Annex A d).
- Consented (AAP): 8 new, 26 25 revised Recommendation and 2 new Corrigenda for Last Call. Details are in Annex A e).
- New work items: 25 26 NWIs were agreed to be added to the SG17 Work Programme. One work item to be removed. Details are in Annex B.
Next SG17 meeting:- 1st SG17 meeting in 2020: Tuesday 17 – Thursday 26 March 2020 in Geneva (8 Working days)
- 24 texts are candidate for action in next SG17 meeting, see in Annex A f).
- Interim RGMs: 9 Questions plan to hold 11 RGMs.
- 2nd SG17 meeting in 2020: Tuesday 25 August – Thursday 3 September 2020, venue to be confirmed (8 Working days)
-
| Q | Date | Place/Host | Subject/objective | 1. | 3/17
| Dec 2019 | Japan
| - To address all work items of Q3/17
| 2. | 4/17 (colocated with Q16/13 | Dec 2019 | Japan | | 3. | 6/17 | 13-14 Jan 2020 | Kuala Lumpur, Malaysia | - To address all work items and identify future topics for Q6/17
| 4. | 7/17 | 22 - 23 Oct 2019 | Haikou, China | - To address all items of Q7/17
| 5. | 8/17 | 7-8 Jan 2020 | Beijing, China | - To address all items of Q8/17
| 6. | 10/17 | 5-6 Dec 2019 | Japan | - To progress all the work of Q10/17
| 7. | 11/17 | 3-7 Feb 2020 | London, UK | - Collaborative meeting ITU-T Q11/17 and ISO/IEC/JTC 1/SC 6/WG 10
| 8. | 11/17 | 11 Dec 2019 | e-meeting | | 9. | Joint meeting of Q11/17 and Q14/17 | 5-6 Dec 2019 | Fribourg, Switzerland | | 10. | 13/17 | 7-8 Jan 2020 | Fukuoka, Japan | - To address all work items of Q13/17
| 11. | 14/17
| Jan 2020 | e-meeting | - Focus on work items toward consent (X.sra-dlt, X.str-dlt, and X.tf-spd-dlt)
- work on coordination matters
|
Bridging the Standardization Gap (BSG):- Welcome and guided tour for newcomers;
- SG17 orientation session with SG17 overview presentation given by SG17 Chairman;
- ITU-T leadership training to Rapporteurs and Editors
- Informal gatherings of SG17RG-AFR and SG17RG-ARB
- Trial on use of a daily 'check-in' sheet to track and evaluate participation of delegates attending this SG17 meeting on an ITU fellowship
Tutorial presentations: TD2147Participation:- 206 participants (263 announced): 41 countries, 27 Sector Members, 5 Associates, and 1 Academia. 7 invited experts.
- 6 partial fellowships granted: Congo DRC, Guinea, Liberia, Mali, Senegal, Sudan
- 2 New Member States participation: Eswatini and Mozambique
- SG17 vice chairmen absent (6/9): Gökhan EVREN (Turkey), Juan GONZALEZ (USA), Muataz Elsadig ISHAG (Sudan), Patrick-Kennedy KETTIN ZANGA (Central Africa), Hugo Darío MIGUEL (Argentina) and Wala TURKI LATROUS (Tunisia)
Correspondence Groups (both to continue):- CG-xss (correspondence group on transformation of security study)
- CG-wtsa20-prep (Correspondence Group on SG17 preparation for WTSA-20)
Meeting input and organization:- 151 – double of last Study Period (past meetings: 118, 144, 113, 106, 78, 81, 66, 74, 80)
- Contribution# from: APT (120 (79%) (= China 57 (38%), Korea 50, Japan 10, India 2, Malaysia 1)), Americas (16), EUR (5), AFR (6), ARAB (2), LAM (2), Russia (1).
- TDs: 508 (previous meeting: 380, 420, 395, 426, 368, 391, 418, 371, 386), including 64 incoming liaison statements and 42 outgoing liaison statements; 100+ prepared by SG17 secretary.
- 240 sessions (previous meeting: 240, 252, 249, 204) were organized, up to 12 parallel meetings per quarter.
- 30 sessions (previous meeting: 29, 27, 25, 11) used remote participation
Annex A Actions taken on Recommendations, and other texts at the 5 Sept 2019 plenarya) TAP Recommendations approved (WTSA-16 Resolution 1):None. b) TAP Recommendations not approved (WTSA-16 Resolution 1):None. c) Amendment approved, Corrigendum approved, Supplements agreed:The SG17 plenary meeting agreed the following 3 texts: Q | Acronym | Title | New / Revised | Editor(s) | Location of text | Equivalent e.g., ISO/IEC | Start of work | Timing | 6/17 | X.1197 Amd.1 | Amendment 1 of ITU-T Recommendation X.1197, Guidelines on criteria for selecting cryptographic algorithms for IPTV service and content protection | New | Stiepan Kovac
| TD2442 | | 2019-01 | 2019-09 | 10/17 | X.Sup35 (X.sup-1254) | ITU-T X.1254 - Supplement on use cases and high level abstract implementations | New | Junjie Xia, Bo Yu, Feng Zhang | TD2471 | | 2017-03 | 2019-09 | 12/17 | Z.Imp100-rev | Z.Imp100 Specification and Description Language Implementer's guide – Version 4.0 | Rev | Rick Reed | TD2182 | | 2018-09 | 2019-09 |
d) Recommendations determined (TAP – WTSA-16 Resolution 1):
The SG17 plenary meeting determined the following 8 texts:
| Q | Acronym | Title | New / Revised | Editor(s) | Location of text | Equivalent e.g., ISO/IEC | Start of work | Timing | 1. | 6/17 | X.1332 (X.sgsec-3) | Security guidelines for smart metering service in smart grids | New | Gunhee Lee | TD2352 | | 2016-09 | 2019-09 | 2. | 6/17 | X.1363 (X.iotsec-3) | Technical framework of personally identifiable information (PII ) handling system in IoT environment | New | Yutaka Miyake, Bo Yu | TD2396 | | 2017-03 | 2019-09 | 3. | 6/17 | X.1364 (X.nb-iot) | Security requirements and framework for narrow band internet of things | New | Feng Gao, Junjie Xia, Heung Youl Youm, Bo Yu | TD2398 | | 2017-09 | 2019-09 | 4. | 6/17 | X.1365 (X.ibc-iot) | Security framework for use of identity-based cryptography in support of IoT services over telecom networks | New | Zhaohui Cheng, Haiguang Wang, Jiang Yu | TD2365 | | 2017-09 | 2019-09 | 5. | 13/17 | X.1371 (X.stcv) | Security threats in connected vehicles | New
| ChangOh Kim, Sang-Woo Lee, Koji Nakao, Seungwook Park | TD2424 | | 2018-03 | 2019-09 | 6. | 13/17 | X.1372 (X.itssec-2) | Security guidelines for V2X communication systems | New | ChangOh Kim, Sang-Woo Lee, Jae-Hoon Nah, Seungwook Park | TD2431 | | 2014-09 | 2019-09 | 7. | 8/17 | X.1604 (X.SRNaaS) | Security requirements of network as a service (NaaS) in cloud computing | New | Zhiyuan Hu, Ye Tao, Chen Zhang, Ni Zhang | TD2411 | | 2016-08 | 2019-09 | 8. | 8/17 | X.1605 (X.SRIaaS) | Security requirements of public infrastructure as a service (IaaS) in cloud computing | New | Huamin Jin, Laifu Wang, Mengxi Wang, Shuai Wang | TD2443 | | 2016-03 | 2019-09 |
e) AAP Recommendations consented for Last Call (Recommendation ITU-T A.8):The SG17 plenary meeting gave consent (AAP) to the following 35 new/rev ITU-T Recommendations and Technical Corrigendum for Last Call according to Recommendation ITU-T A.8:
| Q | Acronym | Title | New / Revised | Editor(s) | Location of text | Equivalent e.g., ISO/IEC | Start of work | Timing | 1. | 2/17 | X.1044 (X.srnv) | Security requirements of network virtualization
| New | Di Liu, Min Shu, Ye Tao, Min Zuo | TD2410
| | 2017-09
| 2019-09
| 2. | 2/17 | X.1045 (X.ssc) | Security service chain architecture and its application | New | Zhiyuan Hu, Min Shu, Ye Tao, Xiaojun Zhuang, Min Zuo | TD2383 | | 2017-09 | 2019-09 | 3. | 3/17 | X.1059 (X.grm) | Risk management implementation guidance on the assets of telecommunication organizations accessible by global IP-based networks | New | Yunbo Feng, Bo Yu, Chen Zhang | TD2409 | | 2014-09 | 2019-09 | 4. | 4/17 | X.1702 (X.qrng-a) | Quantum noise random number generator architecture | New | Matthieu Legré, Zhangchao Ma, Hao Qin, Dong-Hi Sim | TD2391 | | 2018-09 | 2019-09 | 5. | 5/17 | X.1232 (X.tfcas) | Technical framework for countering advertising spam in user generated information | New | Kepeng Li, Zhaoji Lin, Keundug Park, Feng Zhang | TD2390 | | 2017-03 | 2019-09 | 6. | 11/17 | X.500rev | Information technology – The Directory – Overview of concepts, models and services | Rev | Erik Andersen | TD2329 | ISO/IEC 9594-1 | 2017-09 | 2019-09 | 7. | 11/17 | X.501rev | Information technology – The Directory – Models | Rev | Erik Andersen | TD2330 | ISO/IEC 9594-2 | 2017-09 | 2019-09 | 8. | 11/17 | X.509rev | Information technology – The Directory – Public-key and attribute certificate frameworks | Rev | Erik Andersen | TD2328 | ISO/IEC 9594-8 | 2017-09 | 2019-09 | 9. | 11/17 | X.511rev | Information technology – The Directory – Abstract service definition | Rev | Erik Andersen | TD2331 | ISO/IEC 9594-3 | 2017-09 | 2019-09 | 10. | 11/17 | X.518rev | Information technology – The Directory – Procedures for distributed operation | Rev | Erik Andersen | TD2332 | ISO/IEC 9594-4 | 2017-09 | 2019-09 | 11. | 11/17 | X.519rev | Information technology – The Directory – Protocol specifications | Rev | Erik Andersen | TD2333 | ISO/IEC 9594-5 | 2017-09 | 2019-09 | 12. | 11/17 | X.520rev | Information technology – The Directory – Selected attribute types | Rev | Erik Andersen | TD2334 | ISO/IEC 9594-6 | 2017-09 | 2019-09 | 13. | 11/17 | X.521rev | Information technology – The Directory – Selected object classes | Rev | Erik Andersen | TD2335 | ISO/IEC 9594-7 | 2017-09 | 2019-09 | 14. | 11/17 | X.525rev | Information technology – The Directory – The Directory: Replication | Rev | Erik Andersen | TD2336 | ISO/IEC 9594-9 | 2017-09 | 2019-09 | 15. | 11/17 | X.677 (X.uav-oid) | Identification mechanism for unmanned aerial vehicles using object identifiers | New | Wenjing Ma | TD2389 | | 2018-03 | 2019-09 | 16. | 11/17 | X.694 Cor.1 | Information technology - ASN.1 encoding rules: Mapping W3C XML schema definitions into ASN.1 Corrigendum 1 | New | Jean-Paul Lemaire | TD2326 | ISO/IEC 8825-5 | 2019-09 | 2019-09 | 17. | 11/17 | X.893 Cor.1 | Information technology - Generic applications of ASN.1: Fast infoset security Technical Corrigendum 1 | New | Jean-Paul Lemaire | TD2325 | ISO/IEC 24824-3 | 2019-09 | 2019-09 | 18. | 12/17 | Z.100 Annex F1-rev | Specification and Description Language - Overview of SDL-2010 - SDL formal definition: General overview | Rev | Rick Reed, Edel Sherratt | TD2179 | | 2018-09 | 2019-09 | 19. | 12/17 | Z.100 Annex F2-rev | Specification and Description Language - Overview of SDL-2010 - SDL formal definition: Static semantics | Rev | Rick Reed, Edel Sherratt | TD2180 | | 2018-09 | 2019-09 | 20. | 12/17 | Z.100 Annex F3-rev | Specification and Description Language - Overview of SDL-2010 - SDL formal definition: Dynamic semantics | Rev | Rick Reed, Edel Sherratt | TD2181 | | 2018-09 | 2019-09 | 21. | 12/17 | Z.100rev | Specification and Description Language - Overview of SDL-2010 | Rev | Rick Reed | TD2171 | | 2017-09 | 2019-09 | 22. | 12/17 | Z.101rev | Specification and Description Language - Basic SDL-2010 | Rev | Rick Reed | TD2172 | | 2017-09 | 2019-09 | 23. | 12/17 | Z.102rev | Specification and Description Language - Comprehensive SDL-2010 | Rev | Rick Reed | TD2173 | | 2017-09 | 2019-09 | 24. | 12/17 | Z.103rev | Specification and Description Language - Shorthand notation and annotation in SDL-2010 | Rev | Rick Reed | TD2174 | | 2017-09 | 2019-09 | 25. | 12/17 | Z.104rev | Specification and Description Language - Data and action language in SDL-2010 | Rev | Rick Reed | TD2175 | | 2017-09 | 2019-09 | 26. | 12/17 | Z.105rev | Specification and Description Language - SDL-2010 combined with ASN.1 modules | Rev | Rick Reed | TD2176 | | 2017-09 | 2019-09 | 27. | 12/17 | Z.106rev | Specification and Description Language - Common interchange format for SDL-2010 | Rev | Rick Reed | TD2177 | | 2017-09 | 2019-09 | 28. | 12/17 | Z.107rev | Specification and Description Language - Object-oriented data in SDL-2010 | Rev | Rick Reed | TD2178 | | 2017-09 | 2019-09 | 29. | 12/17 | Z.161rev | Testing and Test Control Notation version 3: TTCN-3 core language | Rev | Dieter Hogrefe | TD2251 | ETSI ES 201 873-1 | 2018-09 | 2019-09 | 30. | 12/17 | Z.161.2rev | Testing and Test Control Notation version 3: TTCN-3 language extensions: Configuration and deployment support | Rev | Dieter Hogrefe | TD2252 | ETSI ES 202 781 | 2018-09 | 2019-09 | 31. | 12/17 | Z.161.6rev | Testing and Test Control Notation version 3: TTCN-3 language extensions: Advanced Matching | Rev | Dieter Hogrefe | TD2253 | ETSI ES 203 022 | 2018-09 | 2019-09 | 32. | 12/17 | Z.161.7 | Testing and Test Control Notation version 3: TTCN-3 language extensions: Object-Oriented Features | New | Dieter Hogrefe | TD2254 | ETSI ES 203 790 | 2019-09 | 2019-09 | 33. | 12/17 | Z.166rev | Testing and Test Control Notation version 3: TTCN-3 control interface (TCI) | Rev | Dieter Hogrefe | TD2255 | ETSI ES 201 873-6 | 2018-09 | 2019-09 | 34. | 12/17 | Z.169rev | Testing and Test Control Notation version 3: Using XML schema with TTCN-3 | Rev | Dieter Hogrefe | TD2256 | ETSI ES 201 873-9 | 2018-09 | 2019-09 | 35. | 14/17 | X.1401 (X.sct-dlt) | Security threats to Distributed Ledger Technology | New | Zhaoji Lin, Ke Wang, Kai Wei, Junjie Xia, Heung Youl Youm, Min Zuo | TD2441 | | 2017-09 | 2019-09
|
These Recommendations will enter AAP Last call from Sept 2019. f) Work items planned for action in next SG17 meeting: | Q | Acronym | Title | New / Revised | Editor(s) | Location of text | Equivalent e.g., ISO/IEC | Start of work | Timing | 1. | 4 | TR.sec-qkd | Technical Report: Security framework for quantum key distribution in telecom network | New | Matthieu Legré, Dong-Hi Sim | TD2502 | | 2018-09 | 2020-03
| 2. | 4 | X.cf-QKDN | The use of cryptographic functions on a key generated by a Quantum Key Distribution networks" | New | Matthieu Legré, Dong-Hi Sim, | TD2415 | | 2019-01
| 2020-03 | 3. | 4 | X.gcpie*
| Guidelines for Collection and Preservation of Cyber Security Incident Evidence | New | Jooyoung Lee, Daesung Moon, Jonghyun Kim, Ikkyun Kim | TD2375 |
| 2018-03 | 2020-03 | 4. | 4 | X.sec-QKDN_ov | Security Requirements for QKD Networks - Overview | New | Dong-Hi SIM Matthieu Legré Hao Qin Zhangchao Ma | TD2460 | | 2019-01 | 2020-03 | 5. | 5 | X.tecwes*
| Technologies in countering website spoofing for telecommunication organizations | New | Chen Zhang, Ruzhen Hu, Nan Meng | TD2394 | | 2018-03 | 2020-03 | 6. | 6 | X.5Gsec-q* | Security guidelines for applying quantum-safe algorithms in 5G systems | New | Fuwen Liu, Yanfei Guo, Zhiyuan Hu, Zhaoji Lin, Min Zuo | TD2388 | | 2018-03 | 2020-03 | 7. | 6 | X.amas-iot* | Aggregate Message Authentication Scheme with Group Authentication Capability for IoT environment | New | Koji Nakao, Junji Shikata | TD2422 | | 2018-09 | 2020-03 | 8. | 6 | X.elf-iot * | Standard format of IoT error logs for security incident operations | New | Koji Nakao, Kiyotaka Atsumi | TD2399 | | 2018-09 | 2020-03 | 9. | 6 | X.secup-iot * | Secure Software Update Procedure for IoT Devices | New | Takeshi Takahashi, Koji Nakao, Yunchul Choi | TD1959 | | 2017-09 | 2020-03 | 10. | 7 (10) | X.fdip* | Framework of de-identification processing service for telecommunication service providers | New | Ye Won Lee, Hyungjin, Lim, Lijun Liu, Jongyoul Park, Heung Youl Youm | TD2380 | | 2016-08 | 2020-03 | 11. | 7 | X.sfop | Security framework of open platform for FinTech services | New | Jae Hoon Nah, Feng Gao, Xin Wang, HyungJin Lim | TD2461 | | 2017-09 | 2020-03 | 12. | 7 | X.tfrca | Technical framework of risk control to support authentication | New | Min Zuo, Xin Wang | TD2458 | | 2018-09 | 2020-03 | 13. | 8 | X.GSBDaaS*
| Guidelines on security of Big Data as a Service | New | Nan Meng Chen Zhang Mark McFadden | TD2407 | | 2016-09 | 2020-03 | 14. | 8 | X.sgtBD*
| Security guidelines of lifecycle management for telecom Big Data | New | Lanfang Ren Jin Peng Feng Gao | TD2386 | | 2017-09 | 2020-03 | 15. | 8 | X.SRCaaS*
| Security requirements for communication as a service application environments | New | Chen Zhang Nan Meng, Xuetao Du, Ye Tao | TD2403 | | 2016-09 | 2020-03 | 16. | 10 | X.1254rev* | Entity authentication assurance framework | Rev | Abbie Barbir, David Tuner | TD2372 | | 2016-09 | 2020-03 | 17. | 10 | X.eaasd* | Framework of enhanced authentication in telebiometric environments using anti-spoofing detection mechanisms | New | Kepeng Li Hongwei Luo | TD2478 | | 2016-09 | 2020-03 | 18. | 10 | X.upu*
| UPU S68 Postal identity management framework | New | Abbie Barbir Gustavo Damy | TD2507 | UPU S68 | 2019-09 | 2020-03 | 19. | 11 | TR.ors | Technical Report: Problems, requirements and potential solutions for OID resolution | New | Mark McFadden Ruifen Mu Linjian Song | TD2417 | | 2019-09 | 2020-03 | 20. | 11 | X.509prot | Protocol specifications for public-key infrastructure and privilege management infrastructure | New | Erik Andersen | TD2494 | ISO/IEC 9594-11 | 2017-09 | 2020-03 | 21. | 13 | X.itssec-3 | Security requirements for external device with vehicle access capability | New | Aram Cho, Seungwook Park, Sang-Woo Lee, Whapyeong Lim | TD2437 | | 2017-09 | 2020-03 | 22. | 14 | X.dlt-sec* | Security considerations for using DLT data in Identity Management | New | Abbie Barbir | TD2497 | | 2017-09 | 2020-03 | 23. | 14 | X.sra-dlt | Security framework for Distributed Ledger Technology | New | Hongru Zhu, Xiaoyuan Bai, Petr Kalambet, Qiwi Kirill Ivkushkin, Bilyk Tatiana, Min Shu | TD2348 | | 2017-09 | 2020-03 | 24. | 14 | X.str-dlt | The security threats and requirements for digital payment services based on distributed ledger technology | New | Kyeong Hee Oh, ChangOh Kim, Preetika Singh | TD2360 | | 2017-09 | 2020-03 |
Annex B New work itemsThe following 25 26 new work items were agreed to be added to the SG17 Work Programme: # | Question | NWI | Title | A.1 justification | 1.
| 2/17
| X.arch-design
| Design Principles and Best Practices for Security Architectures
| TD2451
| 2. | 2/17 | TP.sec-arch** | Technical Paper - Implications and further considerations of security architecture patterns | TD2421 | 3. | 2/17 | X.rf-csap | Reference framework for continuous protection of service access process | TD2382 | 4. | 2/17 | X.nsom-sec | Security requirements and architecture for network slice orchestration and management | TD2428 | 5. | 4/17 | TP.usm** | Technical Paper: Unified Security Model (USM) - An integrated system approach to Cybersecurity | TD2462 | 6. | 4/17 | X.ics-schema | Security data schemas for integrated cyber defence solutions | TD2452 | 7. | 4/17 | X.arc-ev | Security architecture for evaluation of technical vulnerabilities | TD2419 | 8. | 4/17 | X.sec_QKDN_tn | Security requirements for quantum key distribution networks - trusted node | TD2455 | 9. | 4/17 | X.tfmpc | Technical framework and application for secure multi-party computation | TD2426 | 10. | 5/17 | TR.cs-ml** | Technical Report - Countering spam based on AI | TD2363 | 11. | 5/17 | X.1246rev* | Revision to X.1246 | TD2486 | 12. | | X.1247rev* | Revision to X.1247 | | 13. | 6/17 | X.sg-rat* | Security guidelines for the use of remote access tools in Internet-connected control system | TD2453 | 14. | 6/17 | X.5Gsec-netec* | Security capabilities of network layer for 5G edge computing | TD2420 | 15. | 7/17 | X.scpa | Security measures for countering password related online attacks | TD2354 | 16. | 7/17 | X.sles* | Security measures for location enabled smart office services | TD2385 | 17. | 8, 14/17 | TR.BaaS-sec** | Technical Report - Guideline on blockchain as a service (BaaS) security | TD2408 | 18. | 8/17 | X.nssa-cc* | Requirements of network security situational awareness platform for cloud computing | TD2429 | 19. | 8/17 | X.sgmc* | Security guidelines for multi-cloud | TD2433 | 20. | 10/17 | X.upu* | UPU S68 Postal identity management framework | TD2507 | 21. | 11/17 | TR.ors** | Technical Report - Problems, Requirements and Potential solutions for OID Resolution
| TD2417 | 22.
| 12/17
| Z.161.7
| Testing and Test Control Notation version 3: TTCN-3 Language Extensions: Object-Oriented Features
| TD2254
| 23. | 13/17 | X.rsu-sec | Security requirements for road side unit in intelligent transport systems | TD2374 | 24. | 13/17 | X.ipscv | Methodologies for intrusion prevention systems for connected vehicles | TD2425 | 25. | 14/17 | TR.dlt-td** | Technical Report - Terms and definitions for distributed ledger technology | TD2357 | 26. | 14/17 | X.sc-dlt
| Security controls for distributed ledger technology | TD2358 |
Notes: (1) Target date for consent or determination of Recommendations or for agreement of Supplements or non-normative text. *: for determination, **: for agreement
Annex C Work items RemovedQ | Acronym | Title | 11/17 | X.Imp500-rev | Directory implementer's guide
| 11/17 | X.500-series.amd | Amendments to 8th edition (2016) of X.500-series
|
|
|
|
|
|