Share

Executive Summary

ITU-T Study Group 17, Security, meeting

29 August – 7 September 2016, Geneva/Switzerland

Hot topics:

• IoT security
• Intelligent Transportation System security
• Cybersecurity
• Countering mobile messaging spam
• Telebiometrics
• Cloud computing security
• Identity management
• Security architecture, Software-defined networking security
• Information Security Management
• Mobile terminal security
• Smart-grid security
• Application security
• ASN.1, Cryptographic Message Syntax
• 8^th edition of the X.500 series on Directories
• Specification and Description Language (SDL)
• UML
• TTCN-3
• Successful use of security standards.

Newcomers and Bridging the Standardization Gap (BSG):

Associated events below assisted in identifying new actions for the study group and leverage the collaboration with other organizations and hopefully attract new experts to the ITU-T and SG17 community.

• Mentoring programme for newcomers: Comprehensive programme through tutorials (see below), welcome, feedback session and guided tour, all attended with interest.
• BSG hands-on training session for 10 newcomers from developing countries.

Tutorial presentations:

Six tutorial presentations were given at this Study Group 17 meeting and found quite some positive interest, addressing SG17 overview for newcomers; presentations from the Rapporteurs of Questions 7, 8, 10, 11, and 12/17.

New work items:

16 new work items were agreed to be added to the SG17 work programme. Details are in Annex B.

Next SG17 meeting:

• Tuesday 21 – Wednesday 29 March 2017 (shortened to 7 days), Geneva, Switzerland for its first meeting in the next study period.
• Five Questions plan to hold six interim Rapporteur meetings during the interregnum period prior to the March 2017 meeting of Study Group 17.
• 11 texts are planned for approval, determination, consent or agreement in March 2017.
• Planned ITU workshop on blockchain, Monday 20 March 2017, Geneva, Switzerland..

Meeting Output:

The SG17 plenary meeting:

1. Approved three draft new ITU-T Recommendations announced for TAP in accordance with WTSA-12 Resolution 1, Section 9. Details are in Annex A a).
2. Approved one new Amendment, agreed two new Supplements, approved one revised Implementer's guide, and agreed one new Technical Report. Details are in Annex A c).
3. Determined (TAP) seven draft new ITU-T Recommendations in accordance with WTSA-12 Resolution 1, Section 9. Details are in Annex A d).
4. Consented (AAP) four draft new ITU-T Recommendations, 17 draft revised ITU-T Recommendations, and two draft Technical Corrigenda for Last Call according to Recommendation ITU-T A.8. Details are in Annex A e).

Participation:.

143 participants (7 less than at the previous SG17 meeting, 179 pre-registered); 29 Member States, 18 Sector Members, 1 Associate, and 2 Academia. Several invited experts. Many experts could not attend (or only partially) due to parallel WTSA-16 preparatory meetings in Africa and CEPT, and a parallel cybersecurity conference in Africa.

• New participation from: Benin (Republic of), Senegal (Republic of), Singapore (Republic of), Zambia (Republic of), Orange Polska S.A, Rohde & Schwarz, INMARSAT, and Iran University of Science & Technology.

SG17 vice chairmen vacancies:

• Arab Region: SG17 vice Chairman from UAE left and the post is vacant.
• Americas Region: SG17 vice Chairman from Mexico has never participated.

SG17 appointments:

• Prof. Heung-Youl YOUM (Korea, Republic of) as Acting SG17 Chairman, for Mr Arkadiy KREMER (SG17 Chairman, Russian Federation), who could not attend due to a family emergency.
• Ms Miho NAGANUMA (NEC, Japan) as Acting WP2/17 Chairman, for Mr Sacid SARIKAYA (Turkey).
• Mr Yutaka MIYAKE (KDDI, Japan) as Acting WP4/17 Chairman, for Mr Antonio GUIMARAES (Brazil).
• Mr Yutaka MIYAKE to be acting Q6/17 Rapporteur for the first three days of the meeting.
• Mr Heung Ryong OH (Korea, Republic of) and Ms Zhiyuan HU (Alcatel-Lucent Shanghai Bell Co. Ltd) co-chaired the Q2/17 sessions.
• Mr Changoh KIM as acting Q5/17 associate Rapporteur
• Interregnum Rapporteurs and interregnum Associate Rapporteurs were appointed for the interregnum period. All Questions are covered.

Other highlights:

Four special sessions and one ad-hoc session were held to off-load the plenaries from debates:

• on addressing contributions from developing countries. The SG17 regional group for Africa presented its activity report which was agreed;
• on collaboration between SG17 and SG20 on IoT security. The meeting confirmed the TSAG collaboration agreement between SG17 and SG20, concluded to continue using the Correspondence Group (CG-IoTSec) with revised terms of reference for discussion; and to negotiate arrangements for a joint Rapporteurs Group meeting between SG17 Questions and SG20 Questions at the new Chairmen's and Vice Chairmen's meeting at the end of WTSA-16.
• on trust and finding a SG17 position on trustworthiness of the security of systems, and collaboration with SG13.
• on FG-AC deliverables with conclusions to solicit contributions from members on security aspects and analysis of the FG-AC deliverables, and to consider organizing a special session at the next SG17 meeting.
• Q11/17 Ad-hoc session on collaboration with IETF on CMS (draft Rec. ITU-T X.894 AAP Last Call comments resolution) and similar specifications where it was concluded to stop X.894 (planned disapproval in March 2017), proceed with a new work item on a CMS profile, and an improved process to collaborate with IETF on CMS and on ASN.1.
  
  The ICT Security Standards Roadmap and the Security Compendia were updated.

Coordination and promotion activities:

• One Joint Coordination Activity on IdM meeting under the SG17 parent-ship was held and coordination took place with OASIS, Open ID Foundation, FIDO Alliance and GLEIF shared information. TSB was requested to start the A.4 and A.5 qualification process with FIDO Alliance.
• Joint Coordination Activity on COP did not meet but SG17 agreed that the JCA-COP activity will continue until March 2017.

Correspondence Groups:

One Correspondence Group was continued, and one CG was terminated.

• CG-IoTSec: Continued (joint with SG20) Correspondence Group on Security and Privacy for IoT for ongoing coordination and collaboration.
• CG-CYBEX finished its work for this study period and was closed.

Meeting input and organization:

• Contributions: 63 (81 last time, 22% less), 4 contributions were withdrawn.
• TDs: more than 380 (38 less than in the previous meeting). This includes 48 incoming liaison statements, and 23 outgoing liaison statements.
• Busy and productive 8^th and final SG17 meeting of this study period having 8 working days.
• Two SG17 open, extended management team meetings were held (during the weekends), complemented by the SG17 security coordination meeting.
• 112 sessions were organized, many parallel meetings per quarter each day. 15 sessions were equipped with AdobeConnect/GotoMeeting teleconferencing to allow participation from remote.

 Annex A

Actions taken on Recommendations, and other texts at the 7 September 2016 SG17 plenary

a)          Recommendations approved (TAP – WTSA-12 Resolution 1):

The SG17 plenary meeting approved (TAP) three draft new ITU-T Recommendations in accordance with WTSA-12 Resolution 1, Section 9.

Notes:
(1)   In case of joint Question activity, the lead Question is given without parentheses and other Questions are shown in parentheses; such entries are only shown in the table against the lead Question.

Approval of the above Recommendations is reflected in TSB Circular 243 of 19 September 2016.

b)          Recommendations (not approved) (TAP – WTSA-12 Resolution 1):

None.

c)          Amendment approved, Supplements agreed, Implementer's guide approved, Technical Report agreed:

The SG17 plenary meeting approved one new Amendment, two new Supplements,  one revised Implementer's guide and one Technical Report.

Note:
**    Supplement for agreement
***  Text for approval (AAP/TAP not applicable)
(1)   Amendment 10, which updates Appendix I, supersedes Amendment 9.
(2)   Implementer's Guide for approval.

d)          Recommendations determined (TAP – WTSA-12 Resolution 1):

The SG17 plenary meeting determined (TAP) seven draft new ITU-T Recommendations in accordance with WTSA-12 Resolution 1, Section 9.

Notes:
(1)   In case of joint Question activity, the lead Question is given without parentheses and other Questions are shown in parentheses; such entries are only shown in the table against the lead Question.
(2)   WP4/17 Report (COM 17 – R 74 Annex C Attachment 3) contains the A.5 justification information for draft new Recommendation ITU-T X.1080.0 (X.pbact).

Information on the Member States consultation is available in TSB Circular ??? issued ?? September 2016.

Summaries for these draft Recommendations are given in TD 2636 Rev.2. Further updates will be posted at http://www.itu.int/ITU-T/studygroups/com17

e)          Recommendations consented for Last Call (AAP – Recommendation ITU-T A.8):

The SG17 plenary meeting gave consent (AAP) to four draft new ITU-T Recommendations, 17 draft revised ITU-T Recommendations, and two draft Tehnical Corrigenda for Last Call according to Recommendation ITU-T A.8:

Notes:
(1)   In case of joint Question activity, the lead Question is given without parentheses and other Questions are shown in parentheses; such entries are only shown in the table against the lead Question.
(2)   WP1/17 Report (COM 17 – R 68 Annex B Attachment 1) contains the A.5 justification information for draft new Rec. ITU-T X.1038 (X.sdnsec-2).
(3)   WP4/17 Report (COM 17 – R 74 Annex C Attachment 4) contains the A.5 justification information for draft new Rec. ITU-T X.1087 (X.tam).
(4)   WP5/17 Report (COM 17 – R 79 Annex A Attachment 2) contains the A.5 justification information for draft revised Rec. ITU-T X.501.
(5)   WP5/17 Report (COM 17 – R 79 Annex A Attachment 3) contains the A.5 justification information for draft revised Rec. ITU-T X.509.
(6)   WP5/17 Report (COM 17 – R 79 Annex A Attachment 4) contains the A.5 justification information for draft revised Rec. ITU-T X.511.
(7)   WP5/17 Report (COM 17 – R 79 Annex A Attachment 5) contains the A.5 justification information for draft revised Rec. ITU-T X.518.
(8)   WP5/17 Report (COM 17 – R 79 Annex A Attachment 6) contains the A.5 justification information for draft revised Rec. ITU-T X.519.
(9)   WP5/17 Report (COM 17 – R 79 Annex A Attachment 7) contains the A.5 justification information for draft revised Rec. ITU-T X.520.
(10) WP5/17 Report (COM 17 – R 79 Annex B Attachment 1) contains the A.5 justification information for draft revised Rec. ITU-T Z.109.
(11) WP5/17 Report (COM 17 – R 79 Annex B Attachment 2) contains the A.5 justification information for draft revised Rec. ITU-T Z.161.
(12) WP5/17 Report (COM 17 – R 79 Annex B Attachment 3) contains the A.5 justification information for draft revised Rec. ITU-T Z.164.
(13) WP5/17 Report (COM 17 – R 79 Annex B Attachment 4) contains the A.5 justification information for draft revised Rec. ITU-T Z.166.
(14) WP5/17 Report (COM 17 – R 79 Annex B Attachment 5) contains the A.5 justification information for draft revised Rec. ITU-T Z.169.
(15) Draft revised Recommendations ITU-T Z.100 Annex F1, Z.100 Annex F2, Z.100 Annex F3 will enter AAP Last Call after a time for final editorial checking.

Annex B

New work items

The following 16 new work items were agreed to be added to the SG17 work programme:

Notes:
*      Target date for consent or determination of Recommendations or for agreement of Supplements or non-normative text
(1)   In case of joint Question activity, the lead Question is given without parentheses and other Questions are shown in parentheses; such entries are only shown in the table against the lead Question.
(2)   X.CMS-prof is a new work item which replaces draft Rec. ITU-T X.894 (X.cms) which was agreed to be discontinued with planned dis-approval in March 2017.

Work items discontinued:

Notes:
**         Non-normative document

__________

• Results from SG17 plenary 23 March 2016
• Results from SG17 plenary 17 September 2015
• Results from SG17 plenary 17 April 2015
• Results from SG17 plenary 26 September 2014
• Results from SG17 plenary 24 January 2014
• Results from SG17 plenary 4 September 2013
• Results from SG17 plenary 26 April 2013
• Results from SG17 plenary 7 September 2012
• Results from SG17 plenary 2 March 2012
• Results from SG17 plenary 2 September 2011
• Results from April 2011 SG17 Meeting
• Results from SG17 plenary 20 December 2010
• Results from SG17 plenary 16 April 2010
• Results from SG17 plenary 25 September 2009
• Results from SG17 plenary 20 February 2009
• Results from SG17 plenary 19 September 2008
• Results from SG17 Plenary 18 April 2008
• Results from WP 2/17 Plenary December 2007 Meeting
• Results from September 2007 SG17 Meeting
• Results from April 2007 WP 1, 2 and 3/17 Meetings
• Results from December 2006 SG17 Meeting
• Results from April 2006 SG17 Meeting
• Results from March-April 2005 SG17 Meeting
• Results from October 2005 SG17 Meeting