GB/T 41268-2022 English PDFUS$999.00 ยท In stock
Delivery: <= 7 days. True-PDF full-copy in English will be manually translated and delivered via email. GB/T 41268-2022: Security testing methods for critical network devices - Router Status: Valid
Basic dataStandard ID: GB/T 41268-2022 (GB/T41268-2022)Description (Translated English): Security testing methods for critical network devices - Router Sector / Industry: National Standard (Recommended) Classification of Chinese Standard: L80 Word Count Estimation: 50,528 Issuing agency(ies): State Administration for Market Regulation, China National Standardization Administration GB/T 41268-2022: Security testing methods for critical network devices - Router---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.Security testing methods for critical network devices - Router ICS 35.040 CCSL80 National Standards of People's Republic of China Network key equipment security detection method router device Published on 2022-03-09 2022-10-01 Implementation State Administration for Market Regulation Released by the National Standardization Administration directory Preface III 1 Scope 1 2 Normative references 1 3 Terms and Definitions 1 4 Abbreviations 1 5 Test environment 2 6 Safety function requirement detection method 3 6.1 Device Identification Security 3 6.2 Redundancy, Backup Recovery and Anomaly Detection 5 6.3 Vulnerability and Defect Management Security 8 6.4 Pre-installed software startup and update security 9 6.5 Default state security 13 6.6 Ability to resist common attacks 14 6.7 User Identification and Authentication 21 6.8 Access Control Security 24 6.9 Log Auditing Security 26 6.10 Communication Security 29 6.11 Data Security 33 7 Methods of assessing security requirements 34 7.1 Design and Development 34 7.2 Production and Delivery 36 7.3 Operation and Maintenance 39 Reference 44 forewordThis document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1.Structure and Drafting Rules of Standardization Documents" drafted. GB 40050-2021 "General Requirements for Network Critical Equipment Security" and GB/T 41269-2022 "Security Technical Requirements for Network Critical Equipment" Router equipment security standard system for key equipment. Please note that some content of this document may be patented. The issuing agency of this document assumes no responsibility for identifying patents. This document is proposed by the Ministry of Industry and Information Technology of the People's Republic of China. This document is under the jurisdiction of the National Communication Standardization Technical Committee (SAC/TC485). This document was drafted by. China Academy of Information and Communications Technology, Huawei Technologies Co., Ltd., Venustech Information Technology Group Co., Ltd., Shanghai Nokia Bell Co., Ltd., Beijing Qihoo Technology Co., Ltd., China United Network Communications Group Co., Ltd., ZTE Corporation Co., Ltd., Beijing Tonghe Beneficial Telecommunications Science and Technology Research Institute Co., Ltd., New H3C Technology Co., Ltd., Fiberhome Communication Technology Co., Ltd. Co., Ltd., China Communications Standards Association. The main drafters of this document. Zhang Zhibing, Zhou Kaibo, Wang Weidong, Cheng Xiaoping, Zhou Jihua, Wan Xiaolan, Qiu Linhai, Zhang Yi, Guo Xinhai, Wu Rongchun, Ye Yubai, Sun Wei, Li Haiying, Yao Yinan, Zhang Yawei, Liu Yang, Ma Zheng, Wu Ping, Yuan Yudong, Lu Qiang, Bo Jing, Liu Xindong, Deng Ke, Su Yanjin. Network key equipment security detection method router device1 ScopeThis document provides information on the identification security, redundancy, backup recovery and anomaly detection, loopholes and deficiencies of router equipment included in the network key equipment. Trap management, pre-installed software startup and update security, default state security, ability to resist common attacks, user identification and authentication security, access The detection method of the security function requirements of control security, log audit security, communication security, data security, etc., and the design of the above equipment and assessment methods for safety assurance requirements in the three phases of development, production and delivery, and operation and maintenance. This document is applicable to router equipment listed in the network key equipment catalogue, and can also provide basis for network operators to purchase router equipment. According to the data, it is also suitable for guiding the research and development and testing of router equipment.2 Normative referencesThe contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document. GB/T 25069 Information Security Technical Terminology GB 40050-2021 General requirements for network critical equipment security3 Terms and DefinitionsThe terms and definitions defined in GB/T 25069 and the following apply to this document. 3.1 router router A network device used to establish and control the flow of data between different networks. Note. Routers select paths or routes based on routing protocol mechanisms and algorithms to establish and control data flow between networks. The network itself can be based on different the same network protocol.4 AbbreviationsThe following abbreviations apply to this document. ACL. Access Control List (AccessControlList) ......Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of GB/T 41268-2022_English be delivered?Answer: Upon your order, we will start to translate GB/T 41268-2022_English as soon as possible, and keep you informed of the progress. The lead time is typically 4 ~ 7 working days. The lengthier the document the longer the lead time.Question 2: Can I share the purchased PDF of GB/T 41268-2022_English with my colleagues?Answer: Yes. The purchased PDF of GB/T 41268-2022_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to Sales@ChineseStandard.net. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay. |