The role of a security service

Consider the role of a security service, and what may be required.

• enhance security of data processing systems and information transfers of an organization
• intended to counter security attacks
• using one or more security mechanisms
• often replicates functions normally associated with physical documents

Note both similarities and differences with traditional paper documents, which for example:

  have signatures & dates;

  need protection from disclosure, tampering, or destruction;

  may be notarized or witnessed;

  may be recorded or licensed

Also have a couple of definition of “security services” from relevant standards.

X.800:“a service provided by a protocol layer of communicating open systems, which ensures adequate security of the systems or of data transfers”

RFC 2828:“a processing or communication service provided by a system to give a specific kind of protection to system resources”