Security Policies in OSI-Management Experiences from the DeTeBerkom Project BMSec

Security problems of network management applications are well known, and some of their solutions are specified in the OSI X.700 series. However, there is little experience with implementations of the respective security functions. This paper provides a critical view on the OSI standards of authentication and access control for management applications. A special focus is on security policies. Another focus is on our experience with our implementation.