2021년 2월 17일 (수) 08:01에 Pythagoras0님의 편집

2021-02-17T08:01:12Z

Pythagoras0: /* 메타데이터 */ 새 문단

2020-12-26T12:13:59Z

메타데이터: 새 문단

Pythagoras0: /* 노트 */ 새 문단

2020-12-21T14:29:28Z

노트: 새 문단

새 문서

== 노트 ==

===위키데이터===
* ID : [https://www.wikidata.org/wiki/Q917824 Q917824]
===말뭉치===
# The FIPS 140-2 security requirements cover 11 areas related to the design and implementation of a cryptographic module.<ref name="ref_c0e704b2">[https://docs.microsoft.com/en-us/compliance/regulatory/offering-fips-140-2 Federal Information Processing Standard (FIPS) Publication 140-2 - Microsoft Compliance]</ref>
# “FIPS 140 Validated” means that the cryptographic module, or a product that embeds the module has been validated (“certified”) by the CMVP as meeting the FIPS 140-2 requirements.<ref name="ref_c0e704b2" />
# If you are required to use cryptographic modules validated through FIPS 140-2, you need to verify that the version you use appears on the validation list.<ref name="ref_c0e704b2" />
# This caveat informs the reader that required configuration and security rules must be followed to use the cryptographic module in a way that is consistent with its FIPS 140-2 security policy.<ref name="ref_c0e704b2" />
# Windows has a hidden setting that will enable only government-certified “FIPS-compliant” encryption.<ref name="ref_f34e8c48">[https://www.howtogeek.com/245859/why-you-shouldnt-enable-fips-compliant-encryption-on-windows/ Why You Shouldn’t Enable “FIPS-compliant” Encryption on Windows]</ref>
# FIPS defines certain specific encryption methods that can be used, as well as methods for generating encryption keys.<ref name="ref_f34e8c48" />
# “FIPS mode” doesn’t make Windows more secure.<ref name="ref_f34e8c48" />
# It just blocks access to newer cryptography schemes that haven’t been FIPS-validated.<ref name="ref_f34e8c48" />
# As geographers and data analysts we are interested in specific FIPS codes developed to assign ID tags for various geographic entities.<ref name="ref_dff40f9d">[https://www.policymap.com/2012/07/tips-on-fips-a-quick-guide-to-geographic-place-codes/ Tips on FIPS: A Quick Guide to Geographic Place Codes]</ref>
# FIPS codes numbered 5-2 and 6-4 were originally published in the 1970s (as previous versions 5-1 and 6-3) and then updated in 1987 and 1990 respectively.<ref name="ref_dff40f9d" />
# FIPS 5-2 issued a 2-digit numeric value for each U.S. state, the District of Columbia, outlying territories and other affiliated areas.<ref name="ref_dff40f9d" />
# FIPS 6-4 issued a 3-digit numeric value identifying counties and equivalent subdivisions.<ref name="ref_dff40f9d" />
# Codes: for instance, standards for encoding data (such as FIPS county codes or codes to indicate weather conditions or emergency indications).<ref name="ref_e239364b">[https://en.wikipedia.org/wiki/Federal_Information_Processing_Standards Federal Information Processing Standards]</ref>
# In 1994 NOAA began broadcasting coded signals called FIPS codes along with their standard weather broadcasts from local stations.<ref name="ref_e239364b" />
# Some examples of FIPS Codes for geographical areas include FIPS 10-4 for country codes or region codes and FIPS 5-2 for state codes.<ref name="ref_e239364b" />
# FIPS 140-2 validation is mandatory for use in federal government departments that collect, store, transfer, share and disseminate sensitive but unclassified (SBU) information.<ref name="ref_01738af0">[https://www.mcafee.com/enterprise/en-us/about/cloud-compliance/fips-140-2-encryption-compliance-requirements.html FIPS 140-2 Overview & Compliance Requirements]</ref>
# Anyone deploying systems into a U.S. federal SBU environment – and this includes cloud services – are required to comply with FIPS 140-2 certification.<ref name="ref_01738af0" />
# In other words, the encryption associated with the computer systems, solutions and services used by federal government agencies must meet the minimum standards specified in FIPS PUB 140-2.<ref name="ref_01738af0" />
# FIPS 140-2 has also become the de-facto standard for encryption beyond the federal government and is recognized as an important security standard outside the United States.<ref name="ref_01738af0" />
# VMware has validated various cryptographic modules against the FIPS 140-2 standard.<ref name="ref_1caa2ea6">[https://www.vmware.com/kr/security/certifications/fips.html Federal Information Processing Standards (FIPS) - VMware Security]</ref>
# The FIPS 140-2 standard specifies and validates the cryptographic and operational requirements for the modules within security systems that protect sensitive information.<ref name="ref_1caa2ea6" />
# The Bouncy Castle FIPS Java API is a comprehensive suite of FIPS Approved algorithms implemented in pure Java.<ref name="ref_1caa2ea6" />
# The Computer Security Act of 1987 contained a waiver process for FIPS; however, this Act was superseded by FISMA of 2002, which no longer allows this practice.<ref name="ref_c31c88bd">[https://www.nist.gov/standardsgov/compliance-faqs-federal-information-processing-standards-fips Compliance FAQs: Federal Information Processing Standards (FIPS)]</ref>
# When industry standards become available the federal government will withdraw a FIPS.<ref name="ref_c31c88bd" />
# FIPS are applied to the potential use case and align with the government data’s perceived value.<ref name="ref_d9561958">[https://www.hypr.com/federal-information-processing-standard/ Whats is the Federal Information Processing Standard (FIPS)?]</ref>
# FIPS has been adopted as the de facto security standard by governments and regulated industries around the world, including the healthcare, financial and legal services sectors.<ref name="ref_bf5a3bc1">[https://www.globenewswire.com/news-release/2020/06/24/2052674/0/en/Cloudian-HyperStore-Obtains-Federal-Information-Processing-Standard-FIPS-Security-Certification.html Cloudian HyperStore Obtains Federal Information Processing Standard (FIPS) Security Certification]</ref>
# “The FIPS certification is the latest demonstration of Cloudian’s commitment to providing the most secure object storage platform on the market.<ref name="ref_bf5a3bc1" />
# FIPS PUB 140-2 is a U.S. government computer security standard that is used to approve cryptographic modules and is published by the U.S. National Institute of Standards and Technologies (NIST).<ref name="ref_bf5a3bc1" />
# Vendors can only earn a FIPS 140-2 certification after their software has undergone extensive testing and been independently validated by one of 13 NIST-specified laboratories.<ref name="ref_bf5a3bc1" />
# It is recommended that you verify that the cryptography module used in the applications in your implementation have FIPS 140-1 or FIPS 140-2 certification.<ref name="ref_f2819961">[https://docs.oracle.com/cd/E14004_01/books/SecurHarden/SecurHarden_PCI_Standard4.html 8.2: Federal Information Processing Standard (FIPS) 140]</ref>
# The RSA BSAFE libraries used in Siebel Business Applications are FIPS 140-2 certified.<ref name="ref_f2819961" />
# FIPS 201 is the technical standard that HSPD-12 required the National Institute of Standards and Technology (NIST) to develop.<ref name="ref_42b48860">[https://www.fedidcard.gov/faq/what-federal-information-processing-standard-fips-201 What is the Federal Information Processing Standard (FIPS) - 201?]</ref>
# FIPS 201 is entitled _Personal Identity Verification (PIV) for Federal Employees and Contractors.?<ref name="ref_42b48860" />
# FIPS 201 was issued on February 27, 2005.<ref name="ref_42b48860" />
# The first revision of FIPS 201-1 was finalized in June 2006.<ref name="ref_42b48860" />
# For a list of FIPS prerequisites, see FIPS 140-2 Supported Platforms.<ref name="ref_ff2ca5df">[https://www.vertica.com/docs/10.0.x/HTML/Content/Authoring/Security/FIPS/FIPSOverview.htm Federal Information Processing Standard]</ref>
# FIPS are compulsory and binding for federal agencies.<ref name="ref_e1d3d5fd">[https://itlaw.wikia.org/wiki/Federal_Information_Processing_Standards Federal Information Processing Standards]</ref>
# AWS is updating all AWS FIPS endpoints to a minimum Transport Layer Security (TLS) version of 1.2 across all AWS Regions, with a targeted completion date of March 31, 2021.<ref name="ref_a6a20239">[https://aws.amazon.com/compliance/fips/ Amazon Web Services (AWS)]</ref>
# Once completed, these updates will revoke the ability to use TLS 1.0 and TLS 1.1 on all FIPS endpoints.<ref name="ref_a6a20239" />
# The FIPS endpoints for the AWS services listed below have been updated and require TLS 1.2 or higher.<ref name="ref_a6a20239" />
# For the secure protection of high-security information, Plasma Ruggedized Solutions offers Level 1-4 Federal Information Processing Standards (FIPS) compliance services.<ref name="ref_930c7455">[https://www.plasmarugged.com/fips-compliance Federal Information Processing Standards (FIPS) Capabilities & Compliance]</ref>
# Our FIPS capabilities will ensure that your hardware meets or exceeds FIPS compliance certification standards for physical security.<ref name="ref_930c7455" />
# Plasma Ruggedized Solutions (PRS) is one of the industry’s highest-volume producers of FIPS-approved products.<ref name="ref_930c7455" />
# Our FIPS capabilities will protect your products—and the data stored in them—from potential theft or information probing.<ref name="ref_930c7455" />
# A FIPS standard is developed only when there are no voluntary standards in existence to address federal requirements.<ref name="ref_88582a2c">[https://docs.genesys.com/Documentation/System/8.5.x/SDG/FIPS Documentation:System:SDG:FIPS:8.5.x]</ref>
# These components use the security library directly and require the additional configuration option FIPS Mode Enabled to control their usage.<ref name="ref_88582a2c" />
# FIPS integrity verification is performed when the dracut-fips package is present on the system, regardless of whether the system operates in FIPS mode or not.<ref name="ref_b4aaf69d">[https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security_guide/sect-security_guide-federal_standards_and_regulations-federal_information_processing_standard 10.2. Federal Information Processing Standard (FIPS) Red Hat Enterprise Linux 6]</ref>
# The FIPS 140 2 portion of the standards specifically deals with cryptographic modules.<ref name="ref_7cf1bb5c">[https://cipherpoint.com/blog/what-is-fips-140-2/ What is FIPS 140 2? Federal Information Processing Standards]</ref>
# All of the federal government departments that interact with sensitive unclassified information must be compliant to FIPS 140-2.<ref name="ref_7cf1bb5c" />
# Each level in the FIPS 140 2 portion of the standards is specifically designed to be appropriate for a given type of task and working environment.<ref name="ref_7cf1bb5c" />
# You may have seen the terms, ‘FIPS Compliant Encryption’, ‘FIPS 140 2 Validated Encryption’ or ‘FIPS 140 2 Certified Encryption’.<ref name="ref_7cf1bb5c" />
# FIPS mandates a number of different types of security and auditing procedures that depend on the type of data being stored and protected.<ref name="ref_4149cc30">[https://www.abacusnext.com/blog/federal-information-processing-standards-fips/ Federal Information Processing Standards (FIPS)]</ref>
# FIPS works in tandem with other federal data security standards to fill in any compliance gaps or loopholes.<ref name="ref_4149cc30" />
# We have many clients who are using FIPS-compliant Abacus Private Cloud accounts.<ref name="ref_4149cc30" />
# The Uplogix Local Manager can be operated in a secure manner that complies with FIPS 140-2 for customers whose corporate security policy requires it.<ref name="ref_825d95b6">[https://uplogix.com/docs/local-manager-user-guide/security/fips-mode Federal Information Processing Standard (FIPS) 140-2 Mode]</ref>
# To enable FIPS mode, the Local Manager must be running the -g version of LMS software.<ref name="ref_825d95b6" />
# ** ** unless the management server is also running in FIPS mode.<ref name="ref_825d95b6" />
# Of most interest to microwave backhaul users are two particular FIPS standards, FIPS 197 and FIPS 140-2.<ref name="ref_eba9b287">[https://aviatnetworks.com/tag/federal-information-processing-standards/ Federal Information Processing Standards]</ref>
# FIPS 197 is straightforward enough: it provides the definition of the Advanced Encryption Standard (AES), which is the basis of so much of the security industry.<ref name="ref_eba9b287" />
# However, not all FIPS validations are created equal.<ref name="ref_eba9b287" />
# FIPS 140-2 that sets the standard for the Security Requirements for Cryptographic Modules has different levels of validation.<ref name="ref_eba9b287" />
# Typically, FIPS codes deal with US states and counties.<ref name="ref_08744c0a">[https://support.esri.com/en/technical-article/000002594 FAQ: What are FIPS codes?]</ref>
# FIPS 140-2 is a standard first published in 2001 by the U.S. National Institute of Standards and Technology (NIST), a non-regulatory agency of the U.S. Department of Commerce.<ref name="ref_c79f0ee9">[https://www.ipswitch.com/resources/best-practices/fips What is FIPS (Federal Information Processing Standard)]</ref>
# The Canadian government also has policies requiring FIPS-validated software, and it cooperates with NIST in establishing FIPS standards.<ref name="ref_c79f0ee9" />
# FIPS includes standards regarding the formatting of location and personal identification information, encryption algorithms, key storage, and other data processing areas.<ref name="ref_c79f0ee9" />
# According to the FIPS specification, "allows the software and firmware components of a cryptographic module to be executed on a general purpose computing system using an unevaluated operating system.<ref name="ref_c79f0ee9" />
# A FIPS 140-2 validation certificate is issued for each validated module.<ref name="ref_841e7926">[https://www.cse-cst.gc.ca/en/page/what-fips-140 What is FIPS 140?]</ref>
# Cisco Unified Border Element is Common Criteria (CC) and The Federal Information Processing Standards (FIPS) certified.<ref name="ref_b028a029">[https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/voi-cube-cc-fips-compliance.html Common Criteria (CC) and The Federal Information Processing Standards (FIPS) Compliance [Cisco Unified Border Element]]</ref>
# FIPS 200 specifies the minimum security requirements for non-military federal information systems.<ref name="ref_7e03babf">[https://www.ssh.com/compliance/fips-200/ Minimum Security Requirements for Federal]</ref>
# FIPS 200 addresses the specification of minimum security requirements for federal information and information systems.<ref name="ref_7e03babf" />
# FIPS 199 addresses the classification divides systems.<ref name="ref_7e03babf" />
# The Federal Information Processing Standards (FIPS) are standards published by NIST for use by the United States federal government and government contractors in relation to computer systems.<ref name="ref_7e03babf" />
# FIPS 140-2 is a statement that is titled "Security Requirements for Cryptographic Modules.<ref name="ref_ba911531">[https://docs.logrhythm.com/docs/enterprise/client-console-administrator-guide/deployment-security/federal-information-processing-standards-fips Federal Information Processing Standards (FIPS)]</ref>
# It is insufficient to use an algorithm just because it is listed on the approved lists in FIPS 140-2.<ref name="ref_ba911531" />
# FIPS mode does not support Acrobat versions earlier than 7.0.<ref name="ref_45b8cfab">[https://help.adobe.com/en_US/livecycle/10.0/UpgradeTurnkey/WS624e3cba99b79e12-7bd2337c12f028b239e-7fff.html Adobe LiveCycle ES3 * 6.1 Enabling Federal Information Processing Standard (FIPS)]</ref>
# In general, when FIPS is enabled, the Assembler service does not apply password encryption to any document.<ref name="ref_45b8cfab" />
# Additionally, the PDFsFromBookmarks element is not supported in FIPS mode when the base document is password-encrypted.<ref name="ref_45b8cfab" />
# Definition - What does Federal Information Processing Standards (FIPS) mean?<ref name="ref_25460008">[https://www.techopedia.com/definition/24742/federal-information-processing-standards-fips What are Federal Information Processing Standards (FIPS)?]</ref>
# We are very pleased to announce that we have received Federal Information Processing Standards (FIPS) Validation (CMVP Cert #3702) for the D2iQ Kubernetes Platform (DKP).<ref name="ref_e974cf5f">[https://d2iq.com/blog/why-we-care-about-fips-and-you-should-too Why We Care About FIPS (And You Should Too) UPDATE!]</ref>
# Many government agencies in the United States require Federal Information Processing Standards (FIPS) compliance or validation for deployed software.<ref name="ref_e974cf5f" />
# D2iQ works with many U.S. government agencies and has a history of delivering FIPS compliant platforms as part of these partnerships.<ref name="ref_e974cf5f" />
# Products can either be FIPS compliant or validated/certified.<ref name="ref_e974cf5f" />
# FIPS 140-2 is the mandatory standard associated with encryption of unclassified information.<ref name="ref_e60a33db">[https://kemptechnologies.com/au/products/industry/government/fips/ What is FIPS and Why Should You Care?]</ref>
# There are two basic approaches to achieving compliance with FIPS 140-2.<ref name="ref_e60a33db" />
# B, FIPS 140-2 Level 1 can be achieved by incorporating a software- based certified encryption module.<ref name="ref_e60a33db" />
# FIPS 140-2 Level 2 and above can be achieved by incorporating an embedded hardware based certified encryption module.<ref name="ref_e60a33db" />
===소스===
<references />

@@ 93번째 줄: / 93번째 줄: @@
   <references />
-== 메타데이터 ==
+==메타데이터==
 ===위키데이터===
 * ID :  [https://www.wikidata.org/wiki/Q917824 Q917824]

← 이전 판		2020년 12월 26일 (토) 12:13 판
92번째 줄:		92번째 줄:
	===소스===		===소스===
	<references />		<references />
		+
		+	== 메타데이터 ==
		+
		+	===위키데이터===
		+	* ID : [https://www.wikidata.org/wiki/Q917824 Q917824]

Federal Information Processing Standard - 편집 역사

2021년 2월 17일 (수) 08:01에 Pythagoras0님의 편집

Pythagoras0: /* 메타데이터 */ 새 문단

Pythagoras0: /* 노트 */ 새 문단