2431 - 使用 z_OS 上的 RACF 保护 IP 地址和 TCP_IP 端口：大型机网络保护的统一方法.pdf

1、DTCC Public(White)Orlando,FLOctober 69IBM TechXchange2025Session Code 2431Joel Tilton,CISSPDirector,Mainframe Security EngineeringJuile Bergh,IBMAmericas zSecurity Technical LeadSecuring IP Addresses and TCP/IP Ports with RACF on z/OShttps:/ Tilton is a former employee of IBM,where he got his start

2、with mainframes,who continues to champion mainframe security issues and solutions.Over 25+years technical IT experience,the majority of which was gained in hands-on technical roles,performing a variety of duties in diverse and complex environments.The majority of Joels experience is focused on IBM m

3、ainframe systems,where he performs as a Technician and Project Manager.Joels specialist subject is IT Security,in particular z/OS and associated subsystems(CICS,DB2,MQ,zSecure,etc.)security with RACF.Joel is also an active member of the Tampa Bay RUG(RACF User Group)which meets jointly with the NY R

4、UG.Joel has a true passion for security and the mainframe.Long live the mainframe!https:/ 2025,Joel M.TiltonSecuring IP&Ports with RACF IBM TechXchange October 2025All products,trademarks,and information mentioned are the property of the respective vendors.Mention of a product does not imply a recom

5、mendation.Always test new profiles on a non-production system.Only you can prevent IPLsThe views expressed are his own personal views,and are not endorsed or supported by,and do not necessarily express or reflect,the views,positions or strategies of his employer 2025,Joel M.TiltonSecuring IP&Ports w

6、ith RACF IBM TechXchange October 20253DTCC Public(White)Agenda So what is a port anyway?Why IP&Port Security with RACF Profile Syntax&SAFNAME Design IP&Port Reservation Syntax Planning&Implementation Strategy Unreserved Ports TCP&UDP Auditing Port Access zSecure&Useful CARLa Session EvaluationSecuri