标准摘要
[中文适用范围]： ISO/IEC 18028 的这一部分提供了有关使用虚拟专用网络 (VPN) 连接进行互连网络以及将远程用户连接到网络的安全方面的详细指导。 它建立在 ISO/IEC 18028-1 中提供的网络管理方向的基础上。 它针对的是负责选择和实施使用 VPN 连接时提供网络安全所需的技术控制以及随后对 VPN 安全进行网络监控的个人。 ISO/IEC 18028 的这一部分概述了 VPN，提出了 VPN 安全目标，并总结了 VPN 安全要求。 它对安全 VPN 的选择、安全 VPN 的实施以及 VPN 安全的网络监控提供了指导。 它还提供有关 VPN 使用的典型技术和协议的信息。 [外文原描述]： ISO/IEC 18028-5:2006 provides detailed guidance on the security aspects of the management, operation and use of IT networks, and their inter-connections. ISO/IEC 18028-5:2006 defines techniques for securing inter-network connections that are established using virtual private networks (VPNs). It is relevant to all personnel who are involved in the detailed planning, design and implementation of VPN security (for example IT network managers, administrators, engineers, and IT network security officers). The general objectives of ISO/IEC 18028 are to extend the security management guidelines provided in ISO/IEC TR 13335 and ISO/IEC 17799, by detailing the specific operations and mechanisms needed to implement network security controls in a wider range of network environments, providing a bridge between general IT security management issues and network security technical implementations. The objective of ISO/IEC 18028-5:2006 is to provide support service to different organizations, IT network managers, administrators, technicians, and IT security officers in choosing the appropriate virtual private network solution. ISO/IEC 18028-5:2006 describes general principals of organization, structure, framework and usage of a virtual private IT networks (VPN). It discusses functional area, used standards and network protocols, the various different types of VPN, their respective requirements, characteristics, and other aspects.
英文名称Information technology - Security techniques - IT network security - Part 5: Securing communications across networks using virtual private networks