Trusted Network Connect
Encyclopedia
Trusted Network Connect or TNC is an open architecture for Network Access Control
, promulgated by the Trusted Network Connect Work Group (TNC-WG) of the Trusted Computing Group
(TCG).http://fedtechmagazine.com/article.asp?item_id=619 http://www.networkcomputing.com/wireless/product-analysis-network-access-control.php http://www.interop.com/archive/pdfs/2007-04WhatisTCGTNC.pdf
in 2005. http://www.informationweek.com/news/hardware/desktop/showArticle.jhtml?articleID=180201733 TNC was originally a network access control standard with a goal of multi-vendor endpoint policy enforcement. http://www.computerworld.com/s/article/101608/Vendor_Group_Adds_Net_Access_Specs?taxonomyId=016
In 2009 TCG announced expanded specifications which extended the specifications to systems outside of the enterprise network. http://www.darkreading.com/security/perimeter/showArticle.jhtml?articleID=217500658 Additional uses for TNC which have been reported include Industrial Control System (ICS) and SCADA
security, http://www.tofinosecurity.com/blog/not-your-fathers-control-system http://www.automation.com/content/securing-scada-and-control-networks physical security and http://www.hirschelectronics.com/Hirsch-PR--PhysSec-NAC_interoperability_demo.asp.
ArcSight
,
Aruba Networks
,
Avenda Systems
,
Enterasys,
Extreme Networks
,
Fujitsu
,
IBM
,
Juniper Networks
,
Lumeta,
McAfee
,
Microsoft
,
Nortel
,
ProCurve
,
strongSwan
,
Wave Systems, also
Networking by HP,
Symantec
,
Trapeze Networks
,
Tofino.
The South Carolina Department of Probation, Parole, and Pardon Services has tested a TNC-SCAP
integration combination in a pilot program. http://fcw.com/articles/2010/09/28/scap-and-tnc-combine-in-south-carolina.aspx
Network Access Control
Network Access Control is an approach to computer network security that attempts to unify endpoint security technology , user or system authentication and network security enforcement.-Background:Network Access Control is a computer networking solution that uses a set of protocols to define and...
, promulgated by the Trusted Network Connect Work Group (TNC-WG) of the Trusted Computing Group
Trusted Computing Group
The Trusted Computing Group , successor to the Trusted Computing Platform Alliance , is an initiative started by AMD, Hewlett-Packard, IBM, Intel, and Microsoft to implement Trusted Computing...
(TCG).http://fedtechmagazine.com/article.asp?item_id=619 http://www.networkcomputing.com/wireless/product-analysis-network-access-control.php http://www.interop.com/archive/pdfs/2007-04WhatisTCGTNC.pdf
History
The TNC architecture was first introduced at the RSA ConferenceRSA Conference
The RSA Conference is a cryptography and information security-related conference held annually in the San Francisco Bay Area.The RSA Conference started in 1991 as a forum for cryptographers to gather and share the latest knowledge and advancements in the area of Internet security...
in 2005. http://www.informationweek.com/news/hardware/desktop/showArticle.jhtml?articleID=180201733 TNC was originally a network access control standard with a goal of multi-vendor endpoint policy enforcement. http://www.computerworld.com/s/article/101608/Vendor_Group_Adds_Net_Access_Specs?taxonomyId=016
In 2009 TCG announced expanded specifications which extended the specifications to systems outside of the enterprise network. http://www.darkreading.com/security/perimeter/showArticle.jhtml?articleID=217500658 Additional uses for TNC which have been reported include Industrial Control System (ICS) and SCADA
SCADA
SCADA generally refers to industrial control systems : computer systems that monitor and control industrial, infrastructure, or facility-based processes, as described below:...
security, http://www.tofinosecurity.com/blog/not-your-fathers-control-system http://www.automation.com/content/securing-scada-and-control-networks physical security and http://www.hirschelectronics.com/Hirsch-PR--PhysSec-NAC_interoperability_demo.asp.
Specifications
Specifications introduced by the TNC Work Group: http://www.currentanalysis.com/h/2009/TrustedComputingGroup-TNC.asp- TNC Architecture for Interoperability
- IF-IMC - Integrity Measurement Collector Interface
- IF-IMV - Integrity Measurement Verifier Interface http://www.opus1.com/nac/tnc/TNC_IFIMV_v1_2_r8.pdf
- IF-TNCCS - Trusted Network Connect Client-Server Interface http://www.opus1.com/nac/tnc/if-tnccs-soh-v1_0_r8.pdf
- IF-M - Vendor-Specific IMC/IMV Messages Interface
- IF-T - Network Authorization Transport Interface http://www.trustedcomputinggroup.org/files/resource_files/51F0757E-1D09-3519-AD63B6FD099658A6/TNC_IFT_TLS_v1_0_r16.pdf
- IF-PEP - Policy Enforcement Point Interface http://www.opus1.com/nac/tnc/TNC_IF-PEP_v1_1_rev_0_7.pdf
- IF-MAPIF-MAPThe Interface for Metadata Access Points is an open standard client/server protocol developed by the Trusted Computing Group as one of the core protocols of the Trusted Network Connect open architecture....
- Metadata Access Point Interface - CESP - Clientless Endpoint Support Profilehttp://www.scmagazineus.com/naked-endpoints-on-your-net-and-what-to-do-about-them/article/165892/
- Federated TNC http://www.darkreading.com/security/perimeter/showArticle.jhtml?articleID=217500658
TNC Vendor Adoption
A partial list of vendors who have adopted TNC Standards. http://scap.nist.gov/events/2010/itsac/presentations/day2/Network_Automation-TNC.pdf#page=18ArcSight
ArcSight
ArcSight, an HP company, was founded in 2000 and is a technology company that provides security information and event management solutions. ArcSight headquarters are located in Cupertino, California, USA, with sales offices around the globe including the United States, the United Kingdom, France,...
,
Aruba Networks
Aruba Networks
Aruba Networks, Inc. is a networking vendor selling enterprise wireless LAN and edge access networking equipment. The company has over 500 employees and is headquartered in Sunnyvale, CA...
,
Avenda Systems
Avenda Systems
Avenda Systems is a Silicon Valley start-up, that develops network access security products with operations in Santa Clara, California, USA and Bangalore, India..-About the Company:...
,
Enterasys,
Extreme Networks
Extreme Networks
Extreme Networks, founded in 1996, is a publicly listed company that designs, builds, and installs Ethernet network solutions for enterprise and Carrier Class networks.-Corporate History:Extreme Networks is located in Santa Clara, California...
,
Fujitsu
Fujitsu
is a Japanese multinational information technology equipment and services company headquartered in Tokyo, Japan. It is the world's third-largest IT services provider measured by revenues....
,
IBM
IBM
International Business Machines Corporation or IBM is an American multinational technology and consulting corporation headquartered in Armonk, New York, United States. IBM manufactures and sells computer hardware and software, and it offers infrastructure, hosting and consulting services in areas...
,
Juniper Networks
Juniper Networks
Juniper Networks is an information technology and computer networking products multinational company, founded in 1996. It is head quartered in Sunnyvale, California, USA. The company designs and sells high-performance Internet Protocol network products and services...
,
Lumeta,
McAfee
McAfee
McAfee, Inc. is a computer security company headquartered in Santa Clara, California, USA. It markets software and services to home users, businesses and the public sector. On August 19, 2010, electronics company Intel agreed to purchase McAfee for $7.68 billion...
,
Microsoft
Microsoft
Microsoft Corporation is an American public multinational corporation headquartered in Redmond, Washington, USA that develops, manufactures, licenses, and supports a wide range of products and services predominantly related to computing through its various product divisions...
,
Nortel
Nortel
Nortel Networks Corporation, formerly known as Northern Telecom Limited and sometimes known simply as Nortel, was a multinational telecommunications equipment manufacturer headquartered in Mississauga, Ontario, Canada...
,
ProCurve
ProCurve
HP ProCurve was the name of the networking division of Hewlett-Packard from 1998 to 2010 and associated with the products that it sold. The name of the division was changed to HP Networking in September 2010 after HP bought 3Com Corporation.-History:...
,
strongSwan
StrongSwan
strongSwan is a complete IPsec implementation for Linux 2.6 and 3.x kernels.As a descendant of the FreeS/WAN project, it continues to be released under the GPL license. The project is actively maintained by Andreas Steffen who is a professor for Security in Communications at the University of...
,
Wave Systems, also
Networking by HP,
Symantec
Symantec
Symantec Corporation is the largest maker of security software for computers. The company is headquartered in Mountain View, California, and is a Fortune 500 company and a member of the S&P 500 stock market index.-History:...
,
Trapeze Networks
Trapeze Networks
Trapeze Networks, Inc. was founded in 2002. It is a Wi-Fi networking infrastructure and services vendor. Trapeze has 17 awarded patents and 40+ patent filings pending. In Sept 2007 Trapeze was recognized by Frost and Sullivan as the first company to apply controller virtualization techniques to...
,
Tofino.
TNC Customer Adoption
The U.S. Army has planned to use this technology to enhance the security of its computer networks. https://www.trustedcomputinggroup.org/news/press/member_releases/2006/General_Dynamics_Release.pdfThe South Carolina Department of Probation, Parole, and Pardon Services has tested a TNC-SCAP
SCAP
SCAP may refer to:* Société de Constructions Automobiles* Security Content Automation Protocol* Separation of Content and Presentation* Shackled City Adventure Path* SREBP cleavage activating protein...
integration combination in a pilot program. http://fcw.com/articles/2010/09/28/scap-and-tnc-combine-in-south-carolina.aspx