GB/T 41266-2022 English PDFUS$839.00 ยท In stock
Delivery: <= 6 days. True-PDF full-copy in English will be manually translated and delivered via email. GB/T 41266-2022: Security testing methods for critical network devices - Switch Status: Valid
Basic dataStandard ID: GB/T 41266-2022 (GB/T41266-2022)Description (Translated English): Security testing methods for critical network devices - Switch Sector / Industry: National Standard (Recommended) Classification of Chinese Standard: L80 Word Count Estimation: 42,411 Issuing agency(ies): State Administration for Market Regulation, China National Standardization Administration GB/T 41266-2022: Security testing methods for critical network devices - Switch---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.Security testing methods for critical network devices - Switch ICS 35.040 CCSL80 National Standards of People's Republic of China Network key equipment security detection method switch equipment Published on 2022-03-09 2022-10-01 Implementation State Administration for Market Regulation Released by the National Standardization Administration directory Preface III 1 Scope 1 2 Normative references 1 3 Terms and Definitions 1 4 Abbreviations 1 5 Test environment 2 6 Safety detection method 4 6.1 Device Identification Security 4 6.2 Redundancy, Backup Recovery and Anomaly Detection 6 6.3 Vulnerability and Defect Management Security 9 6.4 Pre-installed software startup and update security 10 6.5 Default state security 14 6.6 Ability to resist common attacks 15 6.7 User Identification and Authentication 23 6.8 Access Control Security 26 6.9 Log Audit Security 28 6.10 Communication Security 30 6.11 Data Security 35 7 Methods of assessing safety and security requirements 36 Reference 37 forewordThis document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1.Structure and Drafting Rules of Standardization Documents" drafted. GB 40050-2021 "General Requirements for Network Critical Equipment Security" and GB/T 41267-2022 "Security Technical Requirements for Network Critical Equipment" Switch equipment security standard system for key equipment. Please note that some content of this document may be patented. The issuing authority of this document assumes no responsibility for identifying these patents. This document is proposed by the Ministry of Industry and Information Technology of the People's Republic of China. This document is under the jurisdiction of the National Communication Standardization Technical Committee (SAC/TC485). This document was drafted by. China Academy of Information and Communications Technology, Shanghai Nokia Bell Co., Ltd., Huawei Technologies Co., Ltd., ZTE Information Technology Co., Ltd., New H3C Technology Co., Ltd., Beijing Tonghe Beneficial Telecommunications Science and Technology Research Institute Co., Ltd., Venustech Information Technology Co., Ltd. Technology Group Co., Ltd., China United Network Communications Group Co., Ltd., Beijing Qihoo Technology Co., Ltd., Alibaba Cloud Computing Co., Ltd., FiberHome Communication Technology Co., Ltd., China Communication Standardization Association. The main drafters of this document. Zhang Zhibing, Zhou Kaibo, Shen Lei, Cheng Xiaoping, Zhao Jianfeng, Wan Xiaolan, Wang Weidong, Sun Wei, Guo Xinhai, Zhang Yi, Bo Jing, Qiu Linhai, Ye Yubai, Zhou Jihua, Wu Rongchun, Bu Yuling, Liu Xindong, Yuan Yudong, Xu Wen, Ma Zheng, Zhang Yawei, Yao Yinan, Yang Guanghe, Liu Yang, Deng Ke, Xi Yongqing. Network key equipment security detection method switch equipment1 ScopeThis document specifies the security, redundancy, backup recovery and anomaly detection, loopholes and deficiencies of the switch equipment included in the network key equipment. Trap management, pre-installed software startup and update security, default state security, ability to resist common attacks, user identification and authentication security, access Security detection methods for control security, log audit security, communication security, data security, etc., and specify the security requirements for the above equipment. Ask for an evaluation method. This document is applicable to the switch equipment listed in the network key equipment catalogue, and can also provide the basis for network operators to purchase switch equipment. According to the data, it is also suitable for guiding the research and development and testing of switch equipment.2 Normative referencesThe contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document. GB/T 25069 Information Security Technical Terminology GB/T 41268-2022 Network key equipment security detection method router equipment3 Terms and DefinitionsThe terms and definitions defined in GB/T 25069 and the following apply to this document. 3.1 switch switch A device that utilizes an internal switching mechanism to provide connectivity between networked devices. NOTE. Switching mechanisms in switches are usually implemented at layer 2 or layer 3 of the OSI reference model.4 AbbreviationsThe following abbreviations apply to this document. ACL. Access Control List (AccessControlList) ......Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of GB/T 41266-2022_English be delivered?Answer: Upon your order, we will start to translate GB/T 41266-2022_English as soon as possible, and keep you informed of the progress. The lead time is typically 4 ~ 6 working days. The lengthier the document the longer the lead time.Question 2: Can I share the purchased PDF of GB/T 41266-2022_English with my colleagues?Answer: Yes. The purchased PDF of GB/T 41266-2022_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to Sales@ChineseStandard.net. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay. |