ISO/IEC 10164-7:1992 情報技術—オープンシステム相互接続—システム管理：セキュリティアラームレポート機能 | ページ 2

Foreword

ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work.

In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. Draft International Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of the national bodies casting a vote.

International Standard ISO/IEC 10164-7 was prepared by the Joint Technical Committee ISO/IEC JTC 1, Information technology, in collaboration with the CCITT. The identical text is published as CCITT Recommendation X.736.

ISO/IEC 10164 consists of the following parts, under the general title Information technology — Open Systems Interconnection — Systems Management:

• Part 1: Object management function
• Part 2: State management function
• Part 3: Attributes for representing relationships
• Part 4: Alarm reporting function
• Part 5: Event report management function
• Part 6: Log control function
• Part 7: Security alarm reporting function
• Part 8: Security audit trail function
• Part 9: Objects and attributes for access control
• Part 10: Accounting meter function
• Part 11: Workload monitoring function
• Part 12: Test management function
• Part 13: Summarization function
• Part 14: Confidence and diagnostic test categories

Introduction

ISO/IEC 10164 is a multipart standard developed according to ISO 7498 and ISO/IEC 7498-4. ISO/IEC 10164 is related to the following International Standards

• ISO/IEC 9595: 1990, Information technology — Open Systems Interconnection — Common management information service definition;
• ISO/IEC 9596: 1990, Information technology — Open Systems Interconnection — Common management information protocol;
• ISO/IEC 10040: 1992, Information technology — Open Systems Interconnection — Systems management overview;
• ISO/IEC 10165: 1992, Information technology — Open Systems Interconnection — Structure of management information.

1 Scope

This Recommendation | International Standard defines the security alarm reporting function. The security alarm reporting function is a systems management function which may be used by an application process in a centralized or decentralized management environment to exchange information for the purpose of systems management, as defined by CCITT Rec. X.700 | ISO/IEC 7498-4. This Recommendation | International Standard is positioned in the application layer of CCITT Rec. X.200 | ISO 7498 and is defined according to the model provided by ISO/IEC 9545. The role of systems management functions is described by CCITT Rec. X.701 | ISO/IEC 10040. The security alarm notifications defined by this systems management function provide information regarding operational condition and quality of service, pertaining to security.

Security-related events are of relevance to the provision of security. The security policy determines the actions to be undertaken whenever a security-related event has occured. The security policy may, for example, specify that a security alarm report be generated, a record of the event be made in a security audit trail, a threshold counter be incremented, the event be ignored, or a combination of these actions be taken. This Recommendation | International Standard is only concerned with security alarm reporting.

This Recommendation | International Standard

• establishes user requirements for the service definition needed to support the security alarm reporting function;
• defines the service provided by the security alarm reporting function;
• specifies the protocol that is necessary in order to provide the service;
• defines the relationship between the service and management notifications;
• defines relationships with other systems management functions;
• specifies conformance requirements.

This Recommendation | International Standard does not

• define the nature of any implementation intended to provide the security alarm reporting function;
• specify the manner in which management is accomplished by the user of the security alarm reporting function;
• define the nature of any interactions which result in the use of the security alarm reporting function;
• specify the services necessary for the establishment, normal and abnormal release of a management association;
• define any other notifications, defined by other Recommendations | International Standards, which may be of interest to a security administrator.

2 Normative references

The following CCITT Recommendations and International Standards contain provisions which, through reference in this text, constitute provisions of this Recommendation | International Standard. At the time of publication, the editions indicated were valid. All Recommendations and Standards are subject to revision, and parties to agreements based on this Recommendation | International Standard are encouraged to investigate the possibility of applying the most recent editions of the Recommendations and Standards listed below. Members of IEC and ISO maintain registers of currently valid International Standards. The CCITT Secretariat maintains a list of the currently valid CCITT Recommendations.

2.1 Identical CCITT Recommendations | International Standards

2.2 Paired CCITT Recommendations | International Standards equivalent in technical content

2.3 Additional references