World Class Standards What is ETSI? Osservatorio Sicurezza Anfov Dionisio Zumerle Technical Officer - ETSI [email protected] © ETSI 2007. All rights reserved Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 World Class Standards ETSI? European Telecommunications Standards Institute Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 2 World Class Standards ETSI is A Standards Development Organization Setting globally-applicable standards for Telecommunications other Electronic Communications networks and services Independent, not-for-profit, created in 1988 ISO 9001:2000 certified Offering direct participation We have more than 18 000 publications - freely available! http://www.etsi.org http://portal.etsi.org Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 3 World Class Standards We are the home of the GSM™ standards And a founding partner in Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 4 World Class Standards ETSI is not … a REGULATORY body, but… we provide technical specifications to support regulation a CERTIFICATION body, but… we provide specifications and other tools to assist certification a FREQUENCY ALLOCATION body, but… we collect, co-ordinate and contribute frequency requirements for the ICT community part of the European Commission, nor part of CEPT, but… we work closely with these and many other organisations Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 5 World Class Standards ETSI’s three primary roles European Standards (EN) Harmonised Standards (HS) ESO European Standards Organization GSP Global Standards Producer Technical Specifications Technical Reports ETSI Standards ETSI Guides (TS) (TR) (ES) (EG) Interoperability service SPO Service Providing Organization Forum hosting and secretariat services Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 6 World Class Standards Partnerships International ITU-T ITU-R ITU-D Inter regional Europe GTSC GRSC EC CEPT Partnerships JTC1 CEN/ CLC Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 • • • • • • • • • • • • • • • ENISA CCSA OMA CITEL WIMAX forum DVB Project IEEE GCF IPv6 Forum The Parlay Group GSM LA AHCIET NENA TETRA MoU (70+ active) 7 World Class Standards Global Standards Collaboration ISACC Canada Japan EU USA International China Korea Australia Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 8 World Class Standards Some of ETSI’s activities UMTS Next Generation Networks (NGN) Ultra wideband (UWB) Grid RFID Low Power Devices Emergency communications GSM on aircraft Communications for Public Safety Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 9 World Class Standards ETSI members in Italy AETHRA S.p.A Alcatel-Lucent Italia SpA ANIE ANUIT AREA Spa CEFRIEL CNIT CTE International DURATEL S.P.A. Eurotel S.P.A. Fondazione UGO BORDONI H3G SpA Iridium Italia s.r.l. ISMB ITALTEL SpA M.B. INTERNATIONAL TELECOM MINISTERO DELLE COMUNICAZIONI Nokia Siemens Networks S.p.A OTE SpA - a Finmeccanica Cie PROD.EL Prodotti Elettronici RFI SpA Selex Communications S.p.A SIAE Microelettronica SpA SKYLOGIC SPA ST Incard S.r.l. STUDIO NOTARILE GENGHINI TELECOM ITALIA S.p.A. Telit Communications S.p.A Uninfo Vodafone Omnitel N.V WIND TELECOMUNICAZIONI SPA Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 10 World Class Standards Why ETSI believes in Security? Security is not an additional feature that can be patched on after the adoption of a technology it must be taken into account from the beginning of the design process Security can be a winning driver that enables the overall success Security failures are not just an embarrassment they cause substantial financial loss they directly affect the stock value of companies Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 11 World Class Standards The role of Security Standards Information Security Standards are essential to ensure interoperability Standardisation ensures compliance of products with Adequate levels of security Legislative action Information Security Standardisation facilitates economic realization and cost reduction ETSI has 20 years of experience in Security Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 12 World Class Standards Some examples of Security in ETSI Standards for cryptographic algorithms and protocols To prevent fraud and unauthorised access To protect customers’ privacy GSM, UMTS, DECT, GPRS, EDGE algorithms • Integrity and confidentiality ETSI Lawful Interception Handover Interface standards Globally de jure and de facto standards for LI ETSI GSM Subscriber Identity Module (SIM) card Perhaps the most widely deployed smart card ever Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 13 World Class Standards ETSI Committees per Security Areas Emergency Telecommunications Mobile/Wireless Algorithms SES Security Algorithms Group of Experts (SAGE) MESA* 2G/3G Mobile 3GPP* EMTEL DECT TETRA AT Electronic Signatures (ESI) SmartCard Platform (SCP) Smart Cards Information Technology Infrastructure Next Generation Networks (TISPAN) Fixed and Convergent Networks * ETSI is a founding partner for this partnership project ** Closed Committee Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 14 World Class Standards Maggiori informazioni ETSI Security Workshop: 15-16 January 2008 Participation free http://portal.etsi.org/securityworkshop/ ETSI website: http://www.etsi.org/ ETSI portal: portal.etsi.org Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007 15 World Class Standards Domande? Osservatorio Sicurezza ANFOV - Milano, 14 Novembre 2007