RFC 3871           Operational Security Requirements      September 2004

   [RFC1321]         Rivest, R., "The MD5 Message Digest Algorithm", RFC

                     1321, April 1992.

   [RFC1492]         Finseth, C., "An Access Control Protocol, Sometimes

                     Called TACACS", RFC 1492, July 1993.

   [RFC1510]         Kohl, J. and C. Neuman, "The Kerberos Network

                     Authentication Service (V5)", RFC 1510, September

                     1993.

   [RFC1704]         Haller, N. and R. Atkinson, "On Internet

                     Authentication", RFC 1704, October 1994.

   [RFC1812]         Baker, F., Ed., "Requirements for IP Version 4

                     Routers", RFC 1812, June 1995.

   [RFC1918]         Rekhter, Y., Moskowitz, B., Karrenberg, D., de

                     Groot, G., and E. Lear, "Address Allocation for

                     Private Internets", BCP 5, RFC 1918, February 1996.

   [RFC2026]         Bradner, S., "The Internet Standards Process   

                     Revision 3", BCP 9, RFC 2026, October 1996.

   [RFC2119]         Bradner, S., "Key words for use in RFCs to Indicate

                     Requirement Levels", BCP 14, RFC 2119, March 1997.

   [RFC2196]         Fraser, B., "Site Security Handbook", FYI 8, RFC

                     2196, September 1997.

   [RFC2246]         Dierks, T. and C. Allen, "The TLS Protocol Version

                     1.0", RFC 2246, January 1999.

   [RFC2385]         Heffernan, A., "Protection of BGP Sessions via the

                     TCP MD5 Signature Option", RFC 2385, August 1998.

   [RFC2401]         Kent, S. and R. Atkinson, "Security Architecture

                     for the Internet Protocol", RFC 2401, November

                     1998.

   [RFC2631]         Rescorla, E., "Diffie Hellman Key Agreement

                     Method", RFC 2631, June 1999.

   [RFC2827]         Ferguson, P. and D. Senie, "Network Ingress

                     Filtering: Defeating Denial of Service Attacks

                     which employ IP Source Address Spoofing", BCP 38,

                     RFC 2827, May 2000.

Jones                        Informational                     [Page 72]