Executive Summary
Meeting of ITU-T SG17 'Security', Geneva, 20-29 March 2018
Hot topics:
- 5G security
- Transformation of Security Study
- Intelligent Transport System (ITS) security
- Distributed Ledger Technology (DLT) security
- Distributed identity management
- IoT security
- Information Security Management
- Software-defined networking security
- Big Data security
- Mobile security
- Personal information protection
ITU workshop on 5G Security
The event was announced by TSB Circular 59 and was attended by 125 participants (including remote participation) from 34 countries. Outcome of this workshop identified next step advices for 5G security related study in SG17 is found at: https://1f8a81b9b0707b63-19211.webchannel-proxy.scarabresearch.com/en/ITU-T/Workshops-and-Seminars/20180319/Documents/Outcomes_Workshop_5G_security_session_Outcomes.pdf
Meeting Output:
- Approved (TAP) 3 new ITU-T Recommendations. Details are in Annex A a).
- Agreed 4 new Supplement/Amendment/Corrigendum. Details are in Annex A c).
- Determined (TAP) 2 draft new ITU-T Recommendations. Details are in Annex A d).
- Consented (AAP) 9 new/revised texts for Last Call. Details are in Annex A e).
- 20 new work items were agreed to be added to the SG17 work programme. Details are in Annex B.
Next SG17 meeting:
- Wednesday 29 August – Friday 7 September 2018, Geneva, Switzerland.
- Workshop on Advanced Persistent Threat (APT) (subject to be decided) on Tuesday 28 August 2018, Geneva, Switzerland.
- Tuesday 19 – Thursday 28 Feb 2019(To be confirmed), Geneva, Switzerland.
- Workshop on Machine Learning and Cybersecurity on Monday 18 Feb 2019(To be confirmed), Geneva, Switzerland.
- 23 texts are planned for approval, determination, consent or agreement in Sept 2018.
- Interim RGM meetings: 7 Questions plan to hold 7 RGMs.
| Q | Date | Place/Host | Subject/objective |
1. | 6/17 (collocate with 13/17) | 14-15 June 2018 | Seoul, Korea | - To address all work items and identify future topics for Q6/17.
|
2. | 7/17 | 13-14 June 2018 | Yinchuan, China | |
3. | 8/17 | 27-28 June | Beijing, China | |
4. | 10/17 | 26-27 June (tbc) | "Seattle" USA/China (tbc) | |
5. | 11/17 (collaborative meeting with ISO/IEC JTC 1/SC 6/WG 10)
| 27-31 Aug 2018 | Tokyo, Japan | - ASN.1 and OIDs:
- Resolution of pending defects on ISO/IEC 8824-All, ISO/IEC 8825-All, ISO/IEC 9534-All and ISO/IEC 24824-All.
- Directory:
- Resolution of pending defects on ISO/IEC 9594-All.
- Progression of the work on ISO/IEC 9594-8 to adapt this standard to new requirements.
- Progression of amendments of various parts of ISO/IEC 9594.
- Preparation meeting report and resolutions for SC 6 plenary.
|
6. | 13/17 (collocate with 6/17) | 14-15 June 2018 | Seoul, Korea | |
7. | 14/17 | 1st week in Jun 2018 (tbc) | Beijing, China. | - Focus X.sra-dlt and X.sct-dlt
- other work of Q14/17
- review of deliverables from FG DLT, FG DFC, FG DPM, SG 13 and SG 20
|
Bridging the Standardization Gap (BSG):
- Welcome and guided tour for newcomers;
- SG17 orientation session with SG17 overview presentation given by SG17 Chairman;
- BSG hands-on training session for 16 participants from 12 developing countries.
- Informal gathering of SG17RG-AFR and SG17RG-ARB
Tutorial presentations:
Six tutorial presentations received positive feedback on their rich information, including presentations on ETSI Middlebox Security Protocol Initiative, Measuring Cybersecurity Resilience, Governance of open-source software, Analyzing Blockchain, Cloud and IoT Security through Cybersecurity Standards, SG17 overview and ITU tools (ICT Security Standards Roadmap and new CRM based registration system).
Participation:
- 130 participants (195 announced): 40 Member States, 14 Sector Members, (3 Associates), and 1 Academia. 7 invited experts.
- 8 partial fellowships granted: Bangladesh, Burundi, Comoros, Mali, Senegal, (Sudan), Palestine, Syria
- New Member States participation from: Bangladesh, Greece, Palestine, Syria
- SG17 vice chairmen absent: Patrick-Kennedy KETTIN ZANGA, Central Africa; and Wala Latrous, Tunisia (remote participation).
Other highlights:
- SG17 plenary organized 3 sessions to discuss transformation of security study.
- JCA-IdM held its 24th meeting on 23 Mar 2018. ITU-T SG17 received updates from FIDO Alliance, DIF (Decentralized Identify Foundation), DKMS (Decentralized Key Management System) and Q10/17.
- A meeting of the Anti-Abuse Telco Network Working Group of ETIS was hosted on 21(pm)-23 March 2018. Joint sessions of Q5/17 'anti-spam' and AATN were organized.
Correspondence Groups:
- CG-ITSsec on collaboration with UNECE WP29/TFCS was terminated.
- CG-cybex and CG-xss (correspondence group on transformation of security study) to continue.
Meeting input and organization:
Contributions: 113 - ever increasing (past meetings: 106, 78, 81, 66, 74, 80)
Contribution# from: APT (85 (75%) (= China 42 (35%), Korea 32, Japan 7, Iran 3, Bangladesh 1)), Americas (13), EUR (7), AFR (6), ARAB (2), CIS (1), LAM (0). 2 new Sector Members and 2 new Associates each submitted 1 contribution.
TDs: 394 (previous meeting: 426, 368, 391, 418, 371, 386), including 46 incoming liaison statements and 37 outgoing liaison statements; 64 sourced from TSB.
249 sessions (previous meeting: 204) were organized, up to 12 parallel meetings per quarter.
25 sessions (previous meeting: 11) used remote participation
Annex A
Actions taken on Recommendations, and other texts at the 29 March 2018 SG17 plenary
a) TAP Recommendations approved (WTSA-16 Resolution 1):
The SG17 plenary meeting approved (TAP) the following draft new and one draft revised ITU-T Recommendations in accordance with WTSA-16 Resolution 1, Section 9.
| Q | Acronym | Title | New / Revised | Editor(s) | Location of text | Equivalent e.g., ISO/IEC | Start of work | Timing |
1. | 4 | X.1214 (X.samtn) | Security assessment techniques in telecommunication/ICT networks | New | Byung-moon Chin, Vibha Tomar | TD1138R1 | | 2015-04 | 2017-09 |
2. | 6 | X.1331 (X.sgsec-2) | Security guidelines for home area network (HAN) devices in smart grid systems | New | Soyoung Jung, Gunhee Lee, Haeryong Park | SG17-R12 | | 2014-09 | 2017-09 |
3. | 8 | X.1603 (X.dsms) | Data security requirements for monitoring the service of cloud computing | New | Mr. Ye Tao, Mr. Ni Zhang, Mrs.MinShu, Mrs. ZhiyuanHu | SG17-R16 | | 2015-09 | 2017-09 |
Approval of the above Recommendations will be announced by TSB Circular in April 2018.
b) TAP Recommendations not approved (WTSA-16 Resolution 1):
None.
c) Amendment approved, Corrigendum approved, Supplements agreed:
The SG17 plenary meeting agreed or approved the following texts.
| Q | Acronym | Title | New / Revised | Editor(s) | Location of Text | Equivalent e.g., ISO/IEC | Start of work | Timing |
1. | 3 | X.Sup32 (X.sup-gpim) | Supplement to ITU-T X.1058 Code of practice for personally identifiable information protection based on ITU-T X.1058 for telecommunications organizations | New | Heung Youl Youm, Lijun Liu, Jaenam Ko. Seung Woo Yu | TD1113R1 | | 2014-09 | 2018-03 |
2. | 4 | X.1500 Amd.12 | X.1500 (2011) Amendment 12, Overview of cybersecurity information exchange (CYBEX) | New | Youki Kadobayashi | TD1107 | | 2017-03 | 2018-03 |
3. | 6 | X.Sup26-Cor | Corrigendum on ITU-T X Supplement 26 | New | Gunhee Lee | TD1080 | | 2018-03 | 2018-03 |
4. | 9 | X.1080.0-Cor | Access control for telebiometrics data protection | new | Erik Anderson | TD1126R2 | | 2016-09 | 2018-03 |
d) Recommendations determined (TAP – WTSA-16 Resolution 1):
The SG17 plenary meeting determined (TAP) the following new draft ITU-T Recommendations in accordance with WTSA-16 Resolution 1, Section 9.
| Q | Acronym | Title | New / Revised | Editor(s) | Location of text | Equivalent e.g., ISO/IEC | Start of work | Timing |
1. | 5 | X.1249 (X.tfcma) | Technical Framework for Countering Mobile in-application Advertising Spam | New | Hongwei Luo, Laifu Wang, Xin Wang | TD1088R1 | | 2015-09 | 2018-03 |
2. | 6 | X.1361 (X.iotsec-2) | Security framework for Internet of Things based on the gateway model | New | Xia Junjie, Heung-Youl Youm | TD1068R1 | | 2015-04 | 2018-03 |
Member States consultation will be launched by TSB Circular in May 2018 after editorial checking. Further updates will be posted at http://1f8a81b9b0707b63-19211.webchannel-proxy.scarabresearch.com/ITU-T/studygroups/com17
e) AAP Recommendations consented for Last Call (Recommendation ITU-T A.8):
The SG17 plenary meeting gave consent (AAP) to the following draft new/revised ITU-T Recommendations and Technical Corrigenda for Last Call according to Recommendation ITU-T A.8:
| Q | Acronym | Title | New / Revised | Editor(s) | Location of text | Equivalent e.g., ISO/IEC | Start of work | Timing |
1. | 2 | X.1041 (X.voltesec-1) | Security Framework for VoLTE Network Operation | New | HaiTao Du, Zhaoji Lin, Jing Shao, Liang Wei, Feng Zhang | TD1112R1 | | 2016-03 | 2018-03 |
2. | 9 | X.1080.1rev | e-Health and world-wide telemedicines - Generic telecommunication protocol | Rev | Erik Anderson | TD1127R3 | | 2016-09 | 2018-03 |
3. | 10 | X.1276 (X.te) | Authentication Step-Up Protocol and Metadata Version 1.0
| New | Abbie Barbir Sylvan Tran | TD1074R2 (Note *) | OASIS | 2016-03 | 2018-03 |
4. | 11 | X.680 Cor.3 | Information technology - Abstract Syntax Notation One (ASN.1): Specification of basic notation Technical Corrigendum 3
| New | Jean-Paul Lemaire | TD1050 | ISO/IEC 8824-1 DTC3 | 2018-03 | 2018-03 |
5. | 11 | X.681 Cor.1 | Information technology - Abstract Syntax Notation One (ASN.1): Information object specification Technical Corrigendum 1 | New | Jean-Paul Lemaire | TD1046 | ISO/IEC 8824-2 DTC1 | 2018-03 | 2018-03 |
6. | 11 | X.682 Cor.2 | Information technology – Abstract Syntax Notation One (ASN.1): Constraint specification Technical Corrigendum 2 | New | Jean-Paul Lemaire
| TD1047 | ISO/IEC 8824-3 DTC2 | 2018-03 | 2018-03 |
7. | 11 | X.683 Cor.1 | Information technology – Abstract Syntax Notation One (ASN.1): Parameterization of ASN.1 specifications l Technical Corrigendum 1 | New | Jean-Paul Lemaire | TD1048 | ISO/IEC 8824-4 DTC1 | 2018-03 | 2018-03 |
8. | 11 | X.696 Cor.3 | Information technology - ASN.1 encoding rules: Specification of Octet Encoding Rules (OER) Technical Corrigendum 3 | New | Jean-Paul Lemaire | TD1049 | ISO/IEC 8825-7 DTC1 | 2018-03 | 2018-03 |
9. | 11 | X.680 Amd.1 | Information technology - Abstract Syntax Notation One (ASN.1): Specification of basic notation Amendment 1 | New | Paul Thorpe | TD1045R1 | ISO/IEC 8824-1 Amd.1 | 2017-03 | 2018-03 |
Note:
*A.25 justification for X.1276 (X.te) is found in TD1089R1.
These Recommendations will enter AAP Last call in April-May 2018.
f) Work items planned for action in next Sept 2018 SG17 meeting:
| Q | Acronym | Title | New / Revised | Editor(s) | Location of text | Equivalent e.g., ISO/IEC | Start of work | Timing |
1. | 3 | X.grm | Risk management implementation guidance on the assets of telecommunication organizations accessible by global IP-based networks | New | Chen Zhang, Bo Yu, Yunbo Feng
| TD1143R3 |
| 2014-09 | 2018-09 |
2. | 3 | X.sup13-rev** | Revision of Supplement 13 | Rev | Wataru Senga, Kyeong Hee Oh | TD1159 | | 2016-09 | 2018-09 |
3. | 5 | X.sup-ctss** | Supplement to ITU-T X.1231 Technical framework for countering telephone service scam | New | Gao Feng, Nan Jiang, Junjie Xia, Chen Zhang, Yanbin Zhang
| TD1100 | | 2016-09 | 2018-09 |
4. | 6 | X.sdnsec-1* | Security services using the Software-defined networking | New | Hyoungshick Kim, JungSoo Park | TD1129 | | 2014-09 | 2018-09 |
5. | 7 | X.hakm | Guidelines on hybrid authentication and key management mechanisms in client-server model | New | Jung Yeon Hwang, Kyu Young Choi, Sangrae Cho | TD1116R1 | | 2015-04 | 2018-09 |
6. | 7 | X.srfb | Security Requirements and Framework for Big Data Analytics in Mobile Internet Services | New | Junjie Xia, Feng Gao, Jongyoul Park, Nan Jiang | TD1101 | | 2016-08 | 2018-09 |
7. | 9 | X.tac | Telebiometric Access Control with smart ID Card | New | Myung Geun Chun | TD1090 | | 2017-03 | 2018-09 |
8. | 9 | X.1080.2* (X.th2) | Telebiometrics related to physics | New | Erik Andersen | TD1178 | | 2008-09 | 2018-09 |
9. | 9 | X.1080.3* (X.th3) | Telebiometrics related to chemistry | New | Erik Andersen | TD1179 | | 2008-09 | 2018-09 |
10. | 9 | X.1080.4* (X.th4) | Telebiometrics related to biology | New | Erik Andersen | TD1180 | | 2008-09 | 2018-09 |
11. | 9 | X.1080.5* (X.th5) | Telebiometrics related to culturology | New | Erik Andersen | TD1181 | | 2008-09 | 2018-09 |
12. | 9 | X.1080.6* (X.th6) | Telebiometrics related to psychology | New | Erik Andersen | TD1182 | | 2008-09 | 2018-09 |
13. | 10 | X.uaf | UAF 1.1 Proposed Standard | New | Abbie Barbir | TD1122 | | 2017-09 | 2018-09 |
14. | 10 | X.u2f | U2F 1.2 Proposed Standard | New | Abbie Barbir | TD1122 | | 2017-09 | 2018-09 |
15. | 10 | X.Sup-1254rev** | Supplement to X.1254rev on use cases and high level abstract implementations | New | Junjie Xia, Bo Yu, Feng Zhang, | TD1070 | | 2018-03 | 2018-09 |
16. | 11 | X.CMS-prof | Cryptographic Message Syntax (CMS) profile | New | Jean-Paul Lemaire | TD1032R1 | ISO24-4 2018 | 2017-09 | 2018-09 |
17. | 12 | Z.100 Annex F1 | Specification and Description Language - Overview of SDL-2010 - SDL formal definition: General overview | Rev | Edel Sherratt | TD980R1 | | 2017-03 | 2018-09 |
18. | 12 | Z.100 Annex F2 | Specification and Description Language - Overview of SDL-2010 - SDL formal definition: Static semantics | Rev | Edel Sherratt | TD981R1 | | 2017-03 | 2018-09 |
19. | 12 | Z.100 Annex F3 | Specification and Description Language - Overview of SDL-2010 - SDL formal definition: Dynamic semantics | Rev | Edel Sherratt | TD982R1 | | 2017-03 | 2018-09 |
20. | 12 | Z.109rev | Specification and Description Language - Unified modeling language profile for SDL-2010 | Rev | Alexander Kraas | - | | 2017-03 | 2018-09 |
21. | 12 | Z.151rev | User Requirements Notation (URN) - Language definition | Rev | Gunter Mussbacher | C104 | | 2015-09 | 2018-09 |
22. | 12 | Z.Imp100** | Z.Imp100 Specification and Description Language implementer's guide - Version 3.0.2 | Rev | Rick Reed | TD984 | | 2017-09 | 2018-09 |
23. | 13 | X.itssec-2* | Security guidelines for V2X communication systems | New | Sang-Woo Lee, Jae-Hoon Nah, Seungwook Park, ChangOh Kim | TD1083R2 | | 2014-09 | 2018-09 |
Annex B
New work items
The following 21 new work items were agreed to be added to the SG17 work programme:
| Q | Acronym | Title | New/ Revised | AAP/TAP/ Agreement | Editor(s) | Location of text | Equivalent e.g., ISO/IEC | Timing(1) |
1. | 2 | X.SDsec | Guideline on Software-defined Security in SDN(Software-defined Networking)/NFV(Network Fuction Virtualization) Network | New | AAP | Min Zuo, Zhiyuan Hu, Ye Tao, Xiaojun Zhuang, Bo Yang
| TD1115R1 | | 2020-09 |
2. | 3 | X.framcdc | Framework for the creation and operation of a Cyber Defense Center | New | AAP | Arnaud Taddei
| TD1062R1 | | 2020-09 |
3. | 4 | X.gcpie | Guidelines for Collection and Preservation of Cyber Security Incident Evidence | New | TAP | Jooyoung Lee, Daesung Moon, Jonghyun Kim, Ikkyun Kim | TD1085R1 | | 2020-09 |
4. | 4 | X.fgati | Framework and Guidelines for Applying Threat Intelligence in Telecom Network Operation | New | TAP | Min Zuo, Lanfang Ren, Yexia Chang
| TD1119R1 | | 2020-09 |
5. | 5 | X.tsfpp | Technical security framework for the protection of users' personal information while countering mobile messaging spam | New | TAP | Junjie Xia, Bo Yu, Yanbin Zhang, Chen Zhang, Feng Gao | TD1066R2 | | 2020-09 |
6. | 5 | X.tecwes | Technologies in countering website spoofing for telecommunication organizations | New | TAP | Chen Zhang, Ruzhen Hu, Meng Nan, | TD1093R1 | | 2020-03 |
7. | 6 | X.Sup26-Cor | Corrigendum on ITU-T X Supplement 26 | New | agreement | Gunhee Lee | TD1080 | | 2018-03 |
8. | 6 | X.ssp-iot | Security Requirements and Framework for IoT Service Platform | New | TAP | Hang Dong, Wenxin Wang, Yanfei Guo, Junjie Xia, Lijun Liu, Jae Hoon Nah
| TD1106 | | 2020-03 |
9. | 6 | X.5Gsec-q | Security guidelines for applying quantum-safe algorithms in 5G systems | New | TAP | Fuwen Liu, Yanfei Guo, Zhiyuan Hu, Zhaoji Lin, Min Zuo | TD1128R3 | | 2020-03 |
10. | 6 | X.strvms | Security threats and requirements for video management system | New | TAP | Jongwook Han, Kyungsoo Lim, Geonwoo Kim
| TD1077R1 | | 2020-09 |
11. | 7 | X.sgos | Security guidelines of Web-based online customer service | New | AAP | Hang Dong, Wenxin Wang, Lijun Liu, Jae Hoon Nah | TD1055R1 | | 2020-03 |
12. | 8 | X.sgBDIP | Security Guidelines for Big Data Infrastructure and platform | New | TAP | Ye Tao, Laifu Wang, Arnaud Taddei
| TD1176R2 | | 2020-09 |
13. | 9 | X.tas | telebiometric authentication using speaker recognition | New | AAP | Fatoumata Samake; Salif Thiaw | TD1147R1 | | 2020-03 |
14. | 10 | X.1252rev | Baseline identity management terms and definitions | Rev | TAP | Abbie Barbir | TD1125R1 | | 2020-09 |
15. | 11 | X.uav-oid | Identification mechanism for unmanned aerial vehicles using object identifiers | New | AAP | Wenjing Ma | TD1177R1 | | 2019-09 |
16. | 13 | X.mdcv | security-related misbehaviour detection mechanism based on big data analysis for connected vehicles | New | TAP | Yi Zhang, Jianhao Liu, Minrui Yan | TD1140 | | 2020-12 |
17. | 13 | X.stcv | security threats in connected vehicles | New | TAP | Koji Nakao, Seungwook Park, Sang-Woo Lee, ChangOh Kim | TD1167R2 | | 2019-03 |
18. | 13 | X.srcd | security requirements for categorized data in V2X communication | New | TAP | Yaping Sun, Huirong Tian, Nan Meng | TD1081R2 | | 2020-12 |
19. | 14 | X.das-mgt | Security framework for the data access and sharing management system based on the distributed ledger technology | New | AAP | Mee Yeon Kim; Heung Youl Youm; Keundug Park | TD1075R3 | | 2021-09 |
20. | 14 | X.tf-spd-dlt | Technical Framework for Secure Software Programme Distribution Mechanism Based on Distributed Ledger Technology | New | AAP | Nan Jiang, Junjie Xia, Bo Yu, Feng Gao, Ke Wang | TD1114R2 | | 2020-03 |
Notes:
Target date for consent or determination of Recommendations or for agreement of Supplements or non-normative text.