For Immediate Release

1200 G Street, NW
Washington, D.C. 20005

202/628-6380
202/393-5453 (fax)

Contact: John Bernhards
Director of Public Relations
Phone: 202/434-8850
E-mail: jbernhards@atis.org


ATIS' Network and Services Integration Forum (NSIF) Releases Security Requirements Document

Security Requirements Support Secure Interfaces Between Operations Systems and Multiple Network Technologies

October 22, 2001, Washington, D.C. - The Alliance for Telecommunications Industry Solutions (ATIS)-sponsored Network and Services Integration Forum (NSIF) has released a new security requirements document: "Security Requirements for Operations Interfaces in a Multi-technology Network," NSIF-040-2001.

Telecom companies participating within NSIF- which include major carriers, service providers and equipment vendors - developed these requirements to identify methods for improving security of network operations. Specifically, NSIF-040-2001 identifies common security methods that can be used to secure both system access and craftsperson access to Network Elements (NEs) and Operation Systems (OS). It provides requirements for securing operations interfaces for SONET, Dense Wavelength Division Multiplexing (DWDM), and potentially other network technologies in carrier networks. The security functions addressed in the document are identification, authentication and message integrity. The method of security proposed is Secure Socket Layer protocol, version 3 (SSL3), which is commonly available in products.

"The methods of security outlined in NSIF's requirements have the potential to reduce administration and security infrastructure costs, increase the likelihood of interoperability, and speed the deployment of security implementations," said NSIF Chairman Kenneth Stephens of BellSouth.

"It is important for carriers, manufacturers and other telecom industry companies to work together in efforts to ensure that network security is not undermined in the face of new emerging technologies," said ATIS President and CEO Susan Miller.

Miller continued, "NSIF's work in this regard is one of numerous, ongoing activities undertaken by telecom standards experts that supports security and protection of network infrastructure."

The requirements can be obtained via the ATIS Document Center at www.atis.org, or by sending an e-mail request to Rachel Krajc at rkrajc@atis.org.

About ATIS

The Alliance for Telecommunications Industry Solutions (ATIS) is a member company organization that is the leader for standards and operating procedures for the telecommunications industry. Nearly 3,000 experts from more than 500 telecommunications companies participate in ATIS committees, whose work focus includes network interconnection standards, number portability, improved data transmission, wireless communications, Internet telephony, toll-free access, and order and billing issues. The Federal Communications Commission (FCC) frequently refers operations issues to ATIS committees for recommended solutions. Members of ATIS and committee participants include, but are not limited to, telecommunications service providers, manufacturers, software developers, resellers, enhanced service providers, and providers of operations support. More information is available at www.atis.org.

-30-