Deterministic Networking (DetNet) Security Considerations
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 50
- Abstract
- A DetNet (deterministic network) provides specific performance guarantees to its data flows, such as extremely low data loss rates and bounded latency (including bounded latency variation, i.e., "jitter"). As a result, securing a DetNet requires that in addition to the best practice security measures taken for any mission-critical network, additional security measures may be needed to secure the intended operation of these novel service properties. This document addresses DetNet-specific security considerations from the perspectives of both the DetNet system-level designer and component designer. System considerations include a taxonomy of relevant threats and attacks, and associations of threats versus use cases and service properties. Component-level considerations include ingress filtering and packet arrival-time violation detection. This document also addresses security considerations specific to the IP and MPLS data plane technologies, thereby complementing the Security Considerations sections of those documents.
- Publication Date
- 2021-06-01
- Status Note
- Informational
- DOI
10.17487/RFC9055- Link
- https://doi.org/10.17487/RFC9055
- Author(s)
- Ethan GrossmanTal MizrahiAndrew J. Hacker
- Keyword(s)
- DetNet, Security
Latest version of IETF RFC 9055
Document Versions — IETF RFC 9055
-
▶ IETF RFC 9055 (2021-06-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 8655 [Active*]
- IETF RFC 8938 [Active*]
- IETF RFC 8939 [Active*]
- IETF RFC 8964 [Active*]
Bibliographic Reference(s)
- 10.1109-IEEESTD.2008.4579760 — IEEE1588 EXTERNAL
- 10.1109-IEEESTD.2011.6032690 — IEEE802.1BA EXTERNAL
- 10.1109-IEEESTD.2014.6991462 — 802.1q EXTERNAL
- 10.1109-IEEESTD.2016.8613095 — IEEE8021Qbv EXTERNAL
- 10.1109-IEEESTD.2017.7961303 — IEEE802.1Qch-2017 EXTERNAL
- 10.1109-IEEESTD.2018.8585421 — IEEE802.1AE-2018 EXTERNAL
- IETF.draft-ietf-detnet-ip-oam-02 — I-D.ietf-detnet-ip-oam EXTERNAL
- IETF.draft-ietf-detnet-mpls-oam-03 — I-D.ietf-detnet-mpls-oam EXTERNAL
- IETF.draft-ietf-detnet-yang-12 — I-D.ietf-detnet-yang EXTERNAL
- IETF.draft-ietf-ipsecme-g-ikev2-02 — I-D.ietf-ipsecme-g-ikev2 EXTERNAL
- IETF.draft-ietf-mpls-opportunistic-encrypt-03 — MPLS-Opp-Sec EXTERNAL
- IETF.draft-varga-detnet-service-model-02 — I-D.varga-detnet-service-model EXTERNAL
- IETF.yang-security-guidelines — YANG-SEC EXTERNAL
- Wikipedia, "Operational technology", March 2021, <https://en.wikipedia.org/w/index.php?title=Operational_technology&oldid=1011704361>. EXTERNAL
- Wikipedia, "Information technology", March 2020, <https://en.wikiquote.org/w/index.php?title=Information_technology&oldid=2749907>. EXTERNAL
- ARINC, "Aircraft Data Network Part 7 Avionics Full-Duplex Switched Ethernet Network", ARINC 664 P7, September 2009. EXTERNAL
- Wikipedia, "Network segmentation", December 2020, <https://en.wikipedia.org/w/index.php?title=Network_segmentation&oldid=993163264>. EXTERNAL
- IETF RFC 2474 [Active*]
- IETF RFC 2475 [Active*]
- IETF RFC 3552 [Active*]
- IETF RFC 3985 [Active*]
- IETF RFC 4107 [Active*]
- IETF RFC 4253 [Active*]
- IETF RFC 4301 [Active, Amended*]
- IETF RFC 4302 [Active*]
- IETF RFC 4385 [Active*]
- IETF RFC 4432 [Active*]
- IETF RFC 5586 [Active*]
- IETF RFC 5880 [Active*]
- IETF RFC 5905 [Active*]
- IETF RFC 5920 [Active*]
- IETF RFC 5921 [Active*]
- IETF RFC 6071 [Active*]
- IETF RFC 6073 [Active*]
- IETF RFC 6274 [Active*]
- IETF RFC 6478 [Active*]
- IETF RFC 6562 [Active*]
- IETF RFC 6632 [Active*]
- IETF RFC 6941 [Active*]
- IETF RFC 7384 [Active*]
- IETF RFC 7567 [Active*]
- IETF RFC 7641 [Active*]
- IETF RFC 7748 [Active*]
- IETF RFC 7835 [Active*]
- IETF RFC 8446 [Superseded*]
- IETF RFC 8578 [Active*]
- IETF RFC 9016 [Active*]
- IETF RFC 9023 [Active*]
- IETF RFC 9025 [Active*]
- IETF RFC 9056 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9055.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9055, Deterministic Networking (DetNet) Security Considerations. Available at https://doi.org/10.17487/RFC9055
Snippet:
IETF RFC 9055, Deterministic Networking (DetNet) Security Considerations. Available at https://doi.org/10.17487/RFC9055
HTML (ISO 690 compliant)
Preview:
IETF RFC 9055, Deterministic Networking (DetNet) Security Considerations. Available at https://doi.org/10.17487/RFC9055
Snippet:
<span class="citation"><cite>IETF RFC 9055</cite>, Deterministic Networking (DetNet) Security Considerations. Available at <a href="https://doi.org/10.17487/RFC9055" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9055</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9055, Deterministic Networking (DetNet) Security Considerations
doi: 10.17487/RFC9055
url: https://doi.org/10.17487/RFC9055
doi: 10.17487/RFC9055
url: https://doi.org/10.17487/RFC9055
Snippet:
<li> <cite id="bib-rfc9055">IETF RFC 9055</cite>, Deterministic Networking (DetNet) Security Considerations <span class="doi">10.17487/RFC9055</span> </li>
Referenced By
- IETF RFC 9056 [Active*]
- IETF RFC 9320 [Active*]
- IETF RFC 9450 [Active*]
- IETF RFC 9546 [Active*]
- IETF RFC 9550 [Active*]
- IETF RFC 9551 [Active*]
- IETF RFC 9633 [Active*]
- IETF RFC 9938 [Active*]