RFC 3871           Operational Security Requirements      September 2004

   Open Review.

      "Open review" refers to processes designed to generate public

      discussion and review of proposed technical solutions such as data

      communications protocols and cryptographic algorithms with the

      goals of improving and building confidence in the final solutions.

      For the purposes of this document "open review" is defined by

      [RFC2026].  All standards track documents are considered to have

      been through an open review process.

      It should be noted that organizations may have local requirements

      that define what they view as acceptable "open review".  For

      example, they may be required to adhere to certain national or

      international standards.  Such modifications of the definition of

      the term "open review", while important, are considered local

      issues that should be discussed between the organization and the

      vendor.

      It should also be noted that section 7 of [RFC2026] permits

      standards track documents to incorporate other "external standards

      and specifications".

   Service.

      A number of requirements refer to "services".  For the purposes of

      this document a "service" is defined as "any process or protocol

      running in the control or management planes to which non transit

      packets may be delivered".  Examples might include an SSH server,

      a BGP process or an NTP server.  It would also include the

      transport, network and link layer protocols since, for example, a

      TCP packet addressed to a port on which no service is listening

      will be "delivered" to the IP stack, and possibly result in an

      ICMP message being sent back.

   Secure Channel.

      A "secure channel" is a mechanism that ensures end to end

      integrity and confidentiality of communications.  Examples include

      TLS [RFC2246] and IPsec [RFC2401].  Connecting a terminal to a

      console port using physically secure, shielded cable would provide

      confidentiality but possibly not integrity.

   Single Homed Network.

      A "single homed network" is defined as one for which

         *  There is only one upstream connection

Jones                        Informational                     [Page 10]