|
US$509.00 · In stock
Delivery: <= 5 days. True-PDF full-copy in English will be manually translated and delivered via email.
GA/T 1728-2020: Information security technology Security technical requirements for IPv6-based high-performance network intrusion detection system products
Status: Valid
| Standard ID | Contents [version] | USD | STEP2 | [PDF] delivered in | Standard Title (Description) | Status | PDF |
| GA/T 1728-2020 | English | 509 |
Add to Cart
|
5 days [Need to translate]
|
Information security technology Security technical requirements for IPv6-based high-performance network intrusion detection system products
| Valid |
GA/T 1728-2020
|
PDF similar to GA/T 1728-2020
Basic data | Standard ID | GA/T 1728-2020 (GA/T1728-2020) | | Description (Translated English) | Information security technology Security technical requirements for IPv6-based high-performance network intrusion detection system products | | Sector / Industry | Public Security (Police) Industry Standard (Recommended) | | Classification of Chinese Standard | A90 | | Classification of International Standard | 35.040 | | Word Count Estimation | 22,257 | | Date of Issue | 2020-05-13 | | Date of Implementation | 2020-08-01 | | Issuing agency(ies) | Ministry of Public Security | GA/T 1728-2020: Information security technology Security technical requirements for IPv6-based high-performance network intrusion detection system products
---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
Information security technology Security technical requirements for IPv6-based high-performance network intrusion detection system products
ICS 35.040
A90
People's Republic of China Public Safety Industry Standard
Information security technology based on IPv6 high-performance network
Security Technical Requirements for Intrusion Detection System Products
2020-05-13 release
2020-08-01 Implementation
Issued by the Ministry of Public Security of the People's Republic of China
Table of contents
Preface Ⅲ
1 Scope 1
2 Normative references 1
3 Terms and definitions 1
4 Abbreviations 2
5 Product description of high-performance network intrusion detection system based on IPv6 2
6 General description 3
6.1 Classification of safety technical requirements 3
6.2 Security Level 3
7 Safety function requirements 3
7.1 Data detection function requirements 3
7.2 Intrusion analysis function requirements 4
7.3 Intrusion response function requirements 4
7.4 Management control function requirements 5
7.5 Requirements for processing test results 6
7.6 Product flexibility requirements 6
7.7 Identification 7
7.8 Administrator Management 7
7.9 Security Audit 8
7.10 Incident Data Security 8
7.11 Communication Security 8
7.12 Product safety 8
8 Network environment adaptability requirements 9
8.1 Support pure IPv6 network environment 9
8.2 Self-management under IPv6 network environment 9
8.3 Support IPv6 transition network environment (optional) 9
9 Performance requirements 9
9.1 False alarm rate 9
9.2 Underreporting rate 9
9.3 Monitoring traffic 9
9.4 Monitoring the number of concurrent connections 10
9.5 Monitoring the rate of newly created TCP connections 10
9.6 Reduction ability 10
10 Security requirements 10
10.1 Development 10
10.2 Guiding documents 11
10.3 Life Cycle Support 11
10.4 Test 12
10.5 Vulnerability assessment 13
11 Requirements for different security levels 13
11.1 Safety function requirements 13
11.2 Safety assurance requirements 15
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
This standard was proposed by the Cyber Security Bureau of the Ministry of Public Security.
This standard is under the jurisdiction of the Information System Security Standardization Technical Committee of the Ministry of Public Security.
Drafting organizations of this standard. Computer Information System Security Product Quality Supervision and Inspection Center of the Ministry of Public Security, the Third Research Institute of the Ministry of Public Security, and Wang Shenxin
Information Technology (Beijing) Co., Ltd.
The main drafters of this standard. Song Haohao, Gu Jianxin, Wu Teng, Zou Chunming, Lu Zhen, Shen Liang, Gu Jian, Li Bo, Yang Liu.
Information security technology based on IPv6 high-performance network
Security Technical Requirements for Intrusion Detection System Products
1 Scope
This standard specifies the security function requirements, environmental adaptability requirements, performance of IPv6-based high-performance network intrusion detection system products
Requirements, security requirements and security classification.
This standard applies to the design, development and testing of high-performance network intrusion detection system products based on IPv6.
2 Normative references
The following documents are indispensable for the application of this document. For dated reference documents, only the dated version applies to this document.
For undated references, the latest version (including all amendments) applies to this document.
GB/T 18336.3-2015 Information Technology Security Technology Information Technology Security Assessment Criteria Part 3.Security Assurance Components
GB/T 25069-2010 Information Security Technical Terms
3 Terms and definitions
The following terms and definitions defined in GB/T 18336.3-2015 and GB/T 25069-2010 apply to this document.
3.1
event
A record of the occurrence or change of a system, service or network status can be used as the basis for analyzing security incidents.
3.2
Security incident
Through the analysis and processing of the incident, the occurrence of a system, service or network state can be identified, indicating a possible security breach
Failure of rules or certain protective measures, or a previously unknown situation that may be related to safety, is likely to endanger business operations and
Threat information security.
3.3
Invade
Any behavior that endangers or may endanger the integrity, confidentiality or availability of resources.
3.4
Intrusion detection
By collecting information and analyzing several key points in the computer network or computer system, discover the network or system
Whether there are violations of security policies and signs of attacks.
3.5
detector
Used to collect real-time events that may indicate intrusions or abuse of information system resources, and to conduct preliminary analysis of the collected information
Intrusion detection system components.
Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of GA/T 1728-2020_English be delivered?Answer: Upon your order, we will start to translate GA/T 1728-2020_English as soon as possible, and keep you informed of the progress. The lead time is typically 3 ~ 5 working days. The lengthier the document the longer the lead time. Question 2: Can I share the purchased PDF of GA/T 1728-2020_English with my colleagues?Answer: Yes. The purchased PDF of GA/T 1728-2020_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet. Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to [email protected]. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay.
|