HOME   Cart(0)   Quotation   About-Us Policy PDFs Standard-List
www.ChineseStandard.net Database: 189759 (19 Oct 2025)

GA/T 403.1-2014 English PDF

US$909.00 · In stock
Delivery: <= 5 days. True-PDF full-copy in English will be manually translated and delivered via email.
GA/T 403.1-2014: Information security technology. Security technical requirements for intrusion detection products. Part 1: Network-based products

GA/T 403.1: Evolution and historical versions

Standard IDContents [version]USDSTEP2[PDF] delivered inStandard Title (Description)StatusPDF
GA/T 403.1-2014English909 Add to Cart 5 days [Need to translate] Information security technology. Security technical requirements for intrusion detection products. Part 1: Network-based products GA/T 403.1-2014
GA/T 403.1-2002English559 Add to Cart 3 days [Need to translate] Information technology -- Technical requirements for intrusion detection products -- Part 1: Network-based products Obsolete GA/T 403.1-2002

PDF similar to GA/T 403.1-2014


Standard similar to GA/T 403.1-2014

GB/T 37230   GB 13954   GA/T 671   GA/T 543.24   GA/T 543.23   GA/T 403.2   

Basic data

Standard ID GA/T 403.1-2014 (GA/T403.1-2014)
Description (Translated English) Information security technology. Security technical requirements for intrusion detection products. Part 1: Network-based products
Sector / Industry Public Security (Police) Industry Standard (Recommended)
Classification of Chinese Standard A90
Classification of International Standard 35.240
Word Count Estimation 26,221
Older Standard (superseded by this standard) GA/T 403.1-2002
Quoted Standard GB 17859-1999; GB/T 25069-2010; GB/T 18336.1; GB/T 18336.2; GB/T 18336.3
Regulation (derived from) Announcement on Releasing Public Safety Industry Standard (Year of 2014)
Issuing agency(ies) Ministry of Public Security
Summary This standard specifies the security functional requirements, security assurance requirements and classification requirements of network intrusion detection products. This standard is applicable to the design, development and detection of network intrusio

GA/T 403.1-2014: Information security technology. Security technical requirements for intrusion detection products. Part 1: Network-based products


---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
Information security technology.Security technical requirements for intrusion detection products.Part 1. Network-based products ICS 35.240 A90 People's Republic of China Public Security Industry Standards Replacing GA/T 403.1-2002 Information Security Technology Intrusion detection products safety technical requirements Part 1. Network products detectionproducts-Part 1. Network-basedproducts Issued on. 2014-03-24 2014-03-24 implementation People's Republic of China Ministry of Public Security

Table of Contents

Introduction Ⅲ Introduction Ⅳ 1 Scope 1 2 Normative references 1 3 Terms and definitions 4 Abbreviations 2 5 Network Intrusion Detection Product Description 2 6 Security Environment 3 6.1 Hypothesis 3 6.2 Threat 3 4 6.3 Organization for Security Policy 7 security purposes 4 7.1 Product Safety Objective 4 7.2 Environmental security objectives 5 Security functional requirements 8 5 8.1 data acquisition capabilities in claim 5 8.2 intrusion analysis Claim 5 8.3 Intrusion Response 6 Functional requirements 8.4 Management Control functional requirements 6 8.5 7 processing requirements of the test results 8.6 product flexibility requirements 8 8.7 identification 8 8.8 Management 9 Administrator 8.9 Security Audit 9 8.10 Event Data Security 10 8.11 Communication Security 10 8.12 Security 10 product itself 9 Security assurance requirements 10 9.1 Configuration Management 10 9.2 Delivery and Operation 11 12 9.3 Development 9.4 guidance document 13 14 9.5 Life Cycle Support 9.6 Test 14 9.7 Vulnerability assessment 15 10 basic principles of technical requirements 16 10.1 16 basic principles of security functional requirements 10.2 18 basic principles of security assurance requirements 11 classification requirements 18 11.1 Overview 18 11.2 Classification of security functional requirements 18 11.3 Classification of security assurance requirements 20

Foreword

GA/T 403 "information security technology intrusion detection product safety technical requirements" is divided into two parts. --- Part 1. network products; --- Part 2. Host products. This section GA/T Part 1 403. This section drafted in accordance with GB/T 1.1-2009 given rules. This Part replaces GA/T 403.1-2002 "IT intrusion detection products safety - Part 1. network products", Compared with GA/T 403.1-2002 main technical changes are as follows. --- Standard name was changed to "information security technology intrusion detection products - Safety requirements - Part 1. Network products"; --- Increased network intrusion detection product description (see Chapter 5); --- Increase the security environment, including the assumptions, threats and organizational security policies (see Chapter 6); --- Increased security purposes, including the purpose of product safety and environmental safety purposes (see Chapter 7); --- Remove the network intrusion detection product performance requirements (see the 2002 edition, Chapter 7); --- Deleted the database support (see the 2002 edition of 6.1.5.5); --- Modify the content of security functional requirements (see Chapter 8, Chapter 8, 2002 edition); --- Increase the technical requirements of the basic principles, including the basic principles of security functional requirements and security assurance requirements for the basic principles (see Chapter 10). Please note that some of the content of this document may involve patents. Release mechanism of the present document does not assume responsibility for the identification of these patents. This part is proposed by the Ministry of Public Security Network Security Protection Agency. This part of the jurisdiction of the Ministry of Public Security Information System Standardization Technical Committee. This section drafted by. Ministry of Public Security of Computer Information System Security Product Quality Supervision and Inspection Center, Blue Shield Information Security Technology Co. Shares Companies, Third Institute of Ministry of Public Security. The main drafters of this section. a good song, Wuqi Cong, Li, Gu Jian, Hu Weina, Zhao, Yang Chen Zhong. This part of the standard replaces the previous editions are. --- GA/T 403.1-2002.

Introduction

GA/T 403 is described in detail in this section of the network-based intrusion detection products and security environment related assumptions, threats and organizational security policies Strategy, defines the purpose of network security intrusion detection products and their supporting environment, demonstrated by the basic principles of security functional requirements and can be traced back Products covered security purposes, for security purposes can be traced back cover and secure environment-related assumptions, threats and organizational security policies. This section basically level with reference to the GB/T 18336.3-2008 prescribed level EAL2 security assurance requirements, and enhance the level at EAL4 level Security assurance requirements based on the vulnerability analysis requires upgrade to an attacker can withstand moderate attack potential attack. This section only gives a network-based intrusion detection products should meet the technical requirements of safety, but network-based intrusion detection products of specific skills Art implementations, a method is not required. Information Security Technology Intrusion detection products safety technical requirements Part 1. Network products

1 Scope

GA/T 403 provisions of this part of the network-based intrusion detection products, security functional requirements, security assurance requirements and grading requirements. This section applies to the design, development and testing network-based intrusion detection products.

2 Normative references

The following documents for the application of this document is essential. For dated references, only the dated version suitable for use herein Member. For undated references, the latest edition (including any amendments) applies to this document. GB 17859-1999 computer information system security protection classification criterion GB/T 18336-2008 (all parts), Information technology - Security techniques - Information Technology Security Evaluation Guidelines GB/T 25069-2010 Information security technology terms

3 Terms and Definitions

GB 17859-1999, GB/T 18336-2008 (all parts) and GB/T 25069-2010 defined and the following terms and definitions Meaning applicable to this document. 3.1 Intrusion intrusion Any attempt to harm the integrity of resources, confidentiality or availability of behavior. 3.2 Detector sensor Collection may indicate intrusions or misuse of information system resources in real-time event, and the information collected for preliminary points Analysis of network-based intrusion detection product components. Installed at key nodes in the network, and monitor data flowing through the network. 3.3 Console managementconsole Detector for management, policy configuration, data management, alarm management, incident response, as well as other event repository upgrade management, and the Invasion behavior of intrusion detection system components in-depth analysis. A console can manage multiple detectors. 3.4 Attack signatures attacksignature Intrusion detection systems pre-defined information can be found in a specific attack is happening. 3.5 Alarms alert When the attack or invasion, intrusion detection system, emergency notification issued to the authorized administrator.

Tips & Frequently Asked Questions:

Question 1: How long will the true-PDF of GA/T 403.1-2014_English be delivered?

Answer: Upon your order, we will start to translate GA/T 403.1-2014_English as soon as possible, and keep you informed of the progress. The lead time is typically 3 ~ 5 working days. The lengthier the document the longer the lead time.

Question 2: Can I share the purchased PDF of GA/T 403.1-2014_English with my colleagues?

Answer: Yes. The purchased PDF of GA/T 403.1-2014_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.

Question 3: Does the price include tax/VAT?

Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countries

Question 4: Do you accept my currency other than USD?

Answer: Yes. If you need your currency to be printed on the invoice, please write an email to [email protected]. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay.

Question 5: Should I purchase the latest version GA/T 403.1-2014?

Answer: Yes. Unless special scenarios such as technical constraints or academic study, you should always prioritize to purchase the latest version GA/T 403.1-2014 even if the enforcement date is in future. Complying with the latest version means that, by default, it also complies with all the earlier versions, technically.