Network Working Group                                      G. Jones, Ed.

Request for Comments: 3871                         The MITRE Corporation

Category: Informational                                   September 2004

              Operational Security Requirements for Large

       Internet Service Provider (ISP) IP Network Infrastructure

Status of this Memo

   This memo provides information for the Internet community.  It does

   not specify an Internet standard of any kind.  Distribution of this

   memo is unlimited.

Copyright Notice

   Copyright (C) The Internet Society (2004).

Abstract

   This document defines a list of operational security requirements for

   the infrastructure of large Internet Service Provider (ISP) IP

   networks (routers and switches).  A framework is defined for

   specifying "profiles", which are collections of requirements

   applicable to certain network topology contexts (all, core only,

   edge only...).  The goal is to provide network operators a clear,

   concise way of communicating their security requirements to vendors.

Jones                        Informational                      [Page 1]