ISO/IEC 27033-5:2013

Information technology — Security techniques — Network security — Part 5: Securing communications across networks using Virtual Private Networks (VPNs)

ISO/IEC 27033-5:2013 gives guidelines for the selection, implementation, and monitoring of the technical controls necessary to provide network security using Virtual Private Network (VPN) connections to interconnect networks and connect remote users to networks.

Technologies de l'information — Techniques de sécurité - Sécurité de réseau — Partie 5: Sécurité des communications au travers des réseaux utilisant des réseaux privés virtuels (VPNs)

General Information

• Status: Published
• Publication Date: 28-Jul-2013
• ICS: 35.030 - IT Security
• ICS: 35.040 - Information coding
• Technical Committee: ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
• Drafting Committee: ISO/IEC JTC 1/SC 27/WG 4 - Security controls and services
• Current Stage: 9020 - International Standard under periodical review
• Start Date: 15-Apr-2024
• Completion Date: 15-Apr-2024

Relations

• Revises: ISO/IEC 18028-5:2006 - Information technology — Security techniques — IT network security — Part 5: Securing communications across networks using virtual private networks
• Effective Date: 13-Apr-2013
• Revised: ISO/IEC 18028-4:2005 - Information technology — Security techniques — IT network security — Part 4: Securing remote access
• Effective Date: 12-May-2008

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 27033-5
First edition
2013-08-01
Information technology — Security
techniques — Network security —
Part 5:
Securing communications across
networks using Virtual Private
Networks (VPNs)
Technologies de l’information — Techniques de sécurité - Sécurité de
réseau —
Partie 5: Sécurité des communications au travers des réseaux utilisant
des réseaux privés virtuels (VPNs)
Reference number
ISO/IEC 27033-5:2013(E)
©
ISO/IEC 2013

---------------------- Page: 1 ----------------------
ISO/IEC 27033-5:2013(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2013
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail [e-mail]
Web www.iso.org
Published in Switzerland
ii © ISO/IEC 2013 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 27033-5:2013(E)

Contents Page
Foreword .iv
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Abbreviations. 2
5 Document structure . 2
6 Overview . 2
6.1 Introduction . 2
6.2 Types of VPNs . 3
7 Security Threats . 4
8 Security Requirements . 5
8.1 Overview . 5
8.2 Confidentiality . 5
8.3 Integrity . 6
8.4 Authenticity . 6
8.5 Authorization . 6
8.6 Availability . 6
8.7 Tunnel Endpoint Security .
...