GA/T 1107-2013 English PDF

US$529.00 · In stock
Delivery: <= 3 days. True-PDF full-copy in English will be manually translated and delivered via email.
GA/T 1107-2013: Information security technology. Security technical requirements for web application security scanning products

Standard ID	USD	BUY PDF	Lead-Days	Standard Title (Description)	Status
GA/T 1107-2013	529	Add to Cart	3 days	Information security technology. Security technical requirements for web application security scanning products

Similar standards

GB/T 37230   GA/T 1059   GB 13954   GA/T 2000.148   GA/T 1106   GA/T 1105   

Basic data

Standard ID: GA/T 1107-2013 (GA/T1107-2013)
Description (Translated English): Information security technology. Security technical requirements for web application security scanning products
Sector / Industry: Public Security (Police) Industry Standard (Recommended)
Classification of Chinese Standard: A90
Classification of International Standard: 35.240
Word Count Estimation: 15,199
Quoted Standard: GB 17859-1999; GB/T 18336.3-2008; GB/T 25069-2010
Regulation (derived from): Industry standard filing notice 2014 No. 4 (total 172)
Issuing agency(ies): Ministry of Public Security
Summary: This standard specifies the security features, performance requirements, self-security functional requirements, security assurance requirements and grading requirements for web application security scanning products. This standard applies to web applicati

GA/T 1107-2013: Information security technology. Security technical requirements for web application security scanning products

---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
Information security technology.Security technical requirements for web application security scanning products ICS 35.240 A90 People's Republic of China Public Security Industry Standards Information Security Technology web application security scanning technology requirements for product safety Issued on. 2013-10-15 2013-10-15 implementation People's Republic of China Ministry of Public Security

Table of Contents

Introduction Ⅲ 1 Scope 1 2 Normative references 1 3 Terms and definitions 4 Abbreviations 2 5 security functional requirements 3 6 5 performance requirements 7 own security functional requirements 5 8 7 Security assurance requirements 9 classification requirements 10

Foreword

This standard was drafted in accordance with GB/T 1.1-2009 given rules. This standard was proposed by the Ministry of Public Security Network Security Protection Agency. This standard is under the jurisdiction of the Ministry of Public Security Information System Standardization Technical Committee. This standard was drafted. Ministry of Public Security of Computer Information System Security Product Quality Supervision and Inspection Center, Hangzhou Hengxin Information Technology Co., Secretary, Green League in the information technology (Beijing) Co., Ltd., Beijing State-sun Technology Co., Ltd. Shanghai-day Thai Network Technology Co., Ltd. The main drafters of this standard. Excellent Yu, Zhang Yan, Shen Liang, Gu Jian, Lu Zhen, Yang Yuan, Li Fan Yuan, Zou Chunming, Zhang smiled, Gu Jianxin, Song good, Sun Xiaoping, Li Chen, Jiang Qiang, Cheng-sheng years. Information Security Technology web application security scanning technology requirements for product safety

1 Scope

This standard specifies the safety function web application security scanning product requirements, performance requirements, its own security functional requirements, security assurances to Requirements and classification requirements. This standard applies to the design, development and testing web application security scanning products.

2 Normative references

The following documents for the application of this document is essential. For dated references, only the dated version suitable for use herein Member. For undated references, the latest edition (including any amendments) applies to this document. GB 17859-1999 computer information system security protection classification criterion GB/T 18336.3-2008 Information technology - Security techniques - Evaluation criteria for IT security - Part 3. Security assurance Claim GB/T 25069-2010 Information security technology terms

3 Terms and Definitions

GB 17859-1999, GB/T 18336.3-2008 and GB/T 25069-2010 define the following terms and definitions apply In this document. 3.1 web application security scanning products webapplicationsecurityscanningproduct A scanning system found web application layer vulnerabilities products can be found on the web application based on policy and system URL Scan for security vulnerabilities found propose appropriate improvements. 3.2 web application webapplication A combination of dynamic script, compiled from the application code, etc., are usually set up in the web server, users send the web browser Send requests, which use the HTTP protocol over the network and interactive web applications by web applications and back-end databases and other movable Ternary Content communications. 3.3 URL found URLdetection By accessing a URL, the URL through the discovery process to be able to link to other URL, the URL can be found included in the Page full URL appearing through various calculated URL, the URL and other various jumps. 3.4 web service webservice A WSDL file-based application, to provide the outside world can be invoked by a web API. WSDL is a An XML-based language for describing webservice its functions, parameters and return values. ......

Image     

Tips & Frequently Asked Questions:

Question 1: How long will the true-PDF of GA/T 1107-2013_English be delivered?

Answer: Upon your order, we will start to translate GA/T 1107-2013_English as soon as possible, and keep you informed of the progress. The lead time is typically 1 ~ 3 working days. The lengthier the document the longer the lead time.

Question 2: Can I share the purchased PDF of GA/T 1107-2013_English with my colleagues?

Answer: Yes. The purchased PDF of GA/T 1107-2013_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.

Question 3: Does the price include tax/VAT?

Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countries

Question 4: Do you accept my currency other than USD?

Answer: Yes. If you need your currency to be printed on the invoice, please write an email to Sales@ChineseStandard.net. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay.