ISO/IEC 27033-7:2023

Information technology – Network security — Part 7: Guidelines for network virtualization security

This document aims to identify security risks of network virtualization and proposes guidelines for the implementation of network virtualization security. Overall, this document intends to considerably aid the comprehensive definition and implementation of security for any organization’s virtualization environments. It is aimed at users and implementers who are responsible for the implementation and maintenance of the technical controls required to provide secure virtualization environments.

Technologies de l'information — Sécurité des réseaux — Partie 7: Lignes directrices pour la sécurité de la virtualisation des réseaux

General Information

• Status: Published
• Publication Date: 29-Nov-2023
• ICS: 35.030 - IT Security
• Technical Committee: ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
• Drafting Committee: ISO/IEC JTC 1/SC 27/WG 4 - Security controls and services
• Current Stage: 6060 - International Standard published
• Start Date: 30-Nov-2023
• Due Date: 16-Sep-2024
• Completion Date: 30-Nov-2023

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 27033-7
First edition
2023-11
Information technology – Network
security —
Part 7:
Guidelines for network virtualization
security
Technologies de l'information — Sécurité des réseaux —
Partie 7: Lignes directrices pour la sécurité de la virtualisation des
réseaux
Reference number
ISO/IEC 27033-7:2023(E)
© ISO/IEC 2023

---------------------- Page: 1 ----------------------
ISO/IEC 27033-7:2023(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
  © ISO/IEC 2023 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 27033-7:2023(E)
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Abbreviated terms . 2
5 Overview . 4
5.1 General . 4
5.2 Description of network virtualization . 4
5.3 Security model . 4
5.3.1 Model of network virtualization security . 4
5.3.2 Network virtualization components . 6
6 Security threats . 6
7 Security recommendations . 7
7.1 General . 7
7.2 Confidentiality . 7
7.3 Integrity . 8
7.4 Availability . 8
7.5 Authenticatio
...

FINAL
INTERNATIONAL ISO/IEC
DRAFT
STANDARD FDIS
27033-7
ISO/IEC JTC 1/SC 27
Information technology – Network
Secretariat: DIN
security —
Voting begins on:
2023-07-31
Part 7:
Voting terminates on:
Guidelines for network virtualization
2023-09-25
security
RECIPIENTS OF THIS DRAFT ARE INVITED TO
SUBMIT, WITH THEIR COMMENTS, NOTIFICATION
OF ANY RELEVANT PATENT RIGHTS OF WHICH
THEY ARE AWARE AND TO PROVIDE SUPPOR TING
DOCUMENTATION.
IN ADDITION TO THEIR EVALUATION AS
Reference number
BEING ACCEPTABLE FOR INDUSTRIAL, TECHNO-
ISO/IEC FDIS 27033-7:2023(E)
LOGICAL, COMMERCIAL AND USER PURPOSES,
DRAFT INTERNATIONAL STANDARDS MAY ON
OCCASION HAVE TO BE CONSIDERED IN THE
LIGHT OF THEIR POTENTIAL TO BECOME STAN-
DARDS TO WHICH REFERENCE MAY BE MADE IN
NATIONAL REGULATIONS. © ISO/IEC 2023

---------------------- Page: 1 ----------------------
ISO/IEC FDIS 27033-7:2023(E)
FINAL
INTERNATIONAL ISO/IEC
DRAFT
STANDARD FDIS
27033-7
ISO/IEC JTC 1/SC 27
Information technology – Network
Secretariat: DIN
security —
Voting begins on:
Part 7:
Voting terminates on:
Guidelines for network virtualization
security
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
RECIPIENTS OF THIS DRAFT ARE INVITED TO
ISO copyright office
SUBMIT, WITH THEIR COMMENTS, NOTIFICATION
OF ANY RELEVANT PATENT RIGHTS OF WHICH
CP 401 • Ch. de Blandonnet 8
THEY ARE AWARE AND TO PROVIDE SUPPOR TING
CH-1214 Vernier, Geneva
DOCUMENTATION.
Phone: [phone]
IN ADDITION TO THEIR EVALUATION AS
Reference number
Email: [e-mail]
BEING ACCEPTABLE FOR INDUSTRIAL, TECHNO­
ISO/IEC FDIS 27033­7:2023(E)
Website: www.iso.org
LOGICAL, COMMERCIAL AND USER PURPOSES,
DRAFT INTERNATIONAL STANDARDS MAY ON
Published in Switzerland
OCCASION HAVE TO BE CONSIDERED IN THE
LIGHT OF THEIR POTENTIAL TO BECOME STAN­
DARDS TO WHICH REFERENCE MAY BE MADE IN
ii
  © ISO/IEC 2023 – All rights reserved
NATIONAL REGULATIONS. © ISO/IEC 2023

---------------------- Page: 2 ----------------------
ISO/IEC FDIS 27033-7:2023(E)
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Abbreviated terms . 2
5 Overview . 4
5.1 General . 4
5.2 Description of network virtualization . 4
5.3 Security model . 4
5.3.1 Model of network virtualization security . 4
5.3.2 Network virtualization components . 6
6 Security threats .
...

ISO/IEC JTC1/SC 27 WG4 Style Definition: Heading 1: Indent: Left: 0 pt, First line: 0
pt, Tab stops: Not at 21.6 pt
Date : 2023-05-12
Style Definition: Heading 2: Font: Bold, Tab stops: Not at
18 pt
ISO/IEC DIS FDIS 27033--7 :2023(E)
Style Definition: Heading 3: Font: Bold
ISO/IEC JTC 1/SC 27/WG 4
Style Definition: Heading 4: Font: Bold
Secretariat: DIN
Style Definition: Heading 5: Font: Bold
Date: 2023-07-14 Style Definition: Heading 6: Font: Bold
Style Definition: zzCopyright
Information technology — Network security — Part 7: Guidelines for
Style Definition: ANNEX
network virtualization security
Style Definition: AMEND Terms Heading: Font: Bold
Style Definition: AMEND Heading 1 Unnumbered: Font: Bold
Style Definition: List Bullet: Indent: Left: 0 pt, Hanging: 18
pt, No bullets or numbering, Tab stops: 18 pt, List tab
Style Definition: List Bullet 2: Indent: Left: 14.15 pt,
Hanging: 18 pt, No bullets or numbering, Tab stops: 32.15
pt, List tab
Style Definition: List Bullet 3: Indent: Left: 28.3 pt,
Hanging: 18 pt, No bullets or numbering, Tab stops: 46.3 pt,
List tab
Style Definition: List Bullet 4: Indent: Left: 42.45 pt,
Hanging: 18 pt, No bullets or numbering, Tab stops: 60.45
pt, List tab
Style Definition: List Bullet 5: Indent: Left: 56.6 pt,
Hanging: 18 pt, No bullets or numbering, Tab stops: 74.6 pt,
List tab
Style Definition: List Number: Indent: Left: 0 pt, Hanging:
18 pt, No bullets or numbering, Tab stops: 18 pt, List tab
Style Definition: List Number 5: Indent: Left: 56.6 pt,
Hanging: 18 pt, No bullets or numbering, Tab stops: 74.6 pt,
List tab
Formatted: Don't adjust space between Latin and Asian text,
Don't adjust space between Asian text and numbers
Formatted: Don't adjust space between Latin and Asian text,
Don't adjust space between Asian text and numbers

---------------------- Page: 1 ----------------------
Formatted: Section start: New page
© ISO/IEC 2023
Formatted: Default Paragraph Font
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no
Formatted: Default Paragraph Font
part of this publication may be reproduced or utilized otherwise in any form or by any means,
Formatted: No page break before, Adjust space between
electronic or mechanical, including photocopying, or posting on the internet or an intranet, without
Latin and Asian text, Adjust space between Asian text and
prior written permission. Permission can be requested from either ISO at the address below or numbers
ISO's member body in the country of the requester.
Formatted: Adjust space between Latin and Asian text,
Adjust space between Asian text and numbers
ISO copyright officeCopyright Office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva Formatted: Adjust space between Latin and Asian text,
Adjust space between Asian text and numbers
Phone: + 41 22 749 01 11
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail [e-mail]
Web www.iso.org
Email: [e-mail]
Website: www.iso.org
Published in Switzerland. Formatted: Adjust space between Latin and Asian text,
Adjust space between Asian text and numbers

---------------------- Page: 2 ----------------------
ISO/IEC FDIS 27033-7:2023(E) Formatted: Space After: 30 pt, Line spacing: Exactly 12 pt
Formatted: Font: 11.5 pt
Formatted: Font: Bold
Contents Formatted: None, Tab stops: Not at 20 pt + 28 pt
Foreword . i
Introduction. ii
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Symbols and abbreviated terms . 2
5 Overview . 3
5.1 General . 3
5.2 Description of network virtualization . 3
5.3 Security model .
...