Which of the following security controls is standardized by the Internet Engineering Task Force (IETF) as the primary network layer protection…

Internet Protocol Security (IPSec) is a suite of protocols standardized by the Internet Engineering Task Force (IETF) to provide security services at the network layer (Layer 3) of the OSI model. It secures IP communications by authenticating and encrypting each IP packet, offering confidentiality, integrity, and authenticity. Its operation at the network layer allows it to protect all traffic between two endpoints transparently to the applications running on them, making it the primary IETF-standardized mechanism for this purpose.

A. Internet Key Exchange (IKE) Protocol: IKE is a component protocol within the IPSec suite used for key management and establishing Security Associations (SAs), not the protection mechanism itself.

B. SMIME: Secure/Multipurpose Internet Mail Extensions (SMIME) is an IETF standard for securing email at the application layer, not the network layer.

D. Secure Socket Layer (SSL): SSL and its successor, Transport Layer Security (TLS), are protocols that operate at the transport layer (Layer 4) to secure application-specific connections.

1. Kent

S.

& Seo

K. (2005). Security Architecture for the Internet Protocol (RFC 4301). Internet Engineering Task Force (IETF).

Section 1.1

"What IPsec Does": "IPsec is a suite of protocols for securing Internet Protocol (IP) communications by authenticating and/or encrypting each IP packet in a data stream. IPsec also includes protocols for cryptographic key establishment." This document is the foundational IETF standard defining the IPSec architecture.

2. National Institute of Standards and Technology (NIST). (2005). Guide to IPsec VPNs (Special Publication 800-77).

Section 1

"Introduction"

Page 1: "The Internet Protocol Security (IPsec) is a suite of protocols for securing network connections. IPsec is an IETF standard that was originally developed to provide security at the network layer for IPv6..."

3. Massachusetts Institute of Technology (MIT) OpenCourseWare. (2017). 6.857 Computer and Network Security

Lecture 15: Network Security / IPsec.

Slide 3

"IPsec: security at the network layer": The lecture notes explicitly state

"IPsec: security at the network layer... Standardized by IETF." This contrasts it with SSL/TLS

which is described as operating at the transport layer.

4. Perrig

A.

Canetti

R.

Tygar

J. D.

& Song

D. (2002). The TESLA broadcast authentication protocol. RSA CryptoBytes

5(2).

Section 2

"Related Work": This paper discusses network security protocols and notes

"The IP security protocol (IPsec) [20

21] provides cryptographic protection at the IP layer..." This academic source confirms IPSec's role at the network layer.