Networking on z/OS
Previous topic | Next topic | Contents | Glossary | Contact z/OS | PDF


Industry standard network security features

Networking on z/OS

The term industry standard is used to describe security features of z/OS that are widely implemented and either formally or informally standardized. One item discussed, Transport Layer Security (TLS), is treated in some detail because it is probably the most widely used security protocol on the Internet today. And in order to implement it on z/OS, it is a concept that should be fully understood.

  • Application layer security
    Although application layer security is not standardized, there is one application layer form of security that approaches an industry standard: user ID and password authentication.
  • Transport Layer Security (TLS)
    Secure Sockets Layer (SSL) is a protocol standard developed by the Netscape Communications Corporation that uses encryption to provide confidentiality and authentication between two TCP/IP applications. As SSL gained in popularity, the IETF formally standardized SSL, made a few improvements and changed the name to Transport Layer Security (TLS). TLS is defined in Request for Comments (RFC) 2246.
  • Virtual Private Network
    Virtual Private Network (VPN) is a general term used to describe a secure tunnel (data stream) between two endpoints. The term does not describe a protocol. The industry standard protocol for a VPN is an architecture called IPSec. The IPSec architecture is outlined in RFC 2401, and its implementation encompasses RFCs 2402, 2406, and 2407 (there are various others, but those are the big three).
  • Application Transparent TLS
    Application Transparent TLS (AT-TLS) is a unique usage of TLS on the z/OS end of the session. In principle, it is quite simple: Instead of having the application itself be TLS-capable and TLS-aware, the establishment of the TLS connection is pushed down the stack into the TCP layer.
  • OpenSSH
    OpenSSH stands for "Open Secure SHell," and it is sometimes referred to as "secure shell." Unlike TLS and IPSec, OpenSSH is not a formalized standard, but it is used widely in the IP community and consequently it was ported to the z/OS platform. As of the time of writing, the IETF is working on producing RFCs to standardize OpenSSH.
Parent topic: TCP/IP security

Go to the previous page   |   Go to the next page

Notices | Terms of use | Support | Contact z/OS



Copyright IBM Corporation 1990, 2010