|
US$909.00 · In stock Delivery: <= 5 days. True-PDF full-copy in English will be manually translated and delivered via email. GA/T 403.1-2014: Information security technology. Security technical requirements for intrusion detection products. Part 1: Network-based products GA/T 403.1: Evolution and historical versions
| Standard ID | Contents [version] | USD | STEP2 | [PDF] delivered in | Standard Title (Description) | Status | PDF |
| GA/T 403.1-2014 | English | 909 |
Add to Cart
|
5 days [Need to translate]
|
Information security technology. Security technical requirements for intrusion detection products. Part 1: Network-based products
| |
GA/T 403.1-2014
|
| GA/T 403.1-2002 | English | 559 |
Add to Cart
|
3 days [Need to translate]
|
Information technology -- Technical requirements for intrusion detection products -- Part 1: Network-based products
| Obsolete |
GA/T 403.1-2002
|
PDF similar to GA/T 403.1-2014
Basic data | Standard ID | GA/T 403.1-2014 (GA/T403.1-2014) | | Description (Translated English) | Information security technology. Security technical requirements for intrusion detection products. Part 1: Network-based products | | Sector / Industry | Public Security (Police) Industry Standard (Recommended) | | Classification of Chinese Standard | A90 | | Classification of International Standard | 35.240 | | Word Count Estimation | 26,221 | | Older Standard (superseded by this standard) | GA/T 403.1-2002 | | Quoted Standard | GB 17859-1999; GB/T 25069-2010; GB/T 18336.1; GB/T 18336.2; GB/T 18336.3 | | Regulation (derived from) | Announcement on Releasing Public Safety Industry Standard (Year of 2014) | | Issuing agency(ies) | Ministry of Public Security | | Summary | This standard specifies the security functional requirements, security assurance requirements and classification requirements of network intrusion detection products. This standard is applicable to the design, development and detection of network intrusio |
GA/T 403.1-2014: Information security technology. Security technical requirements for intrusion detection products. Part 1: Network-based products ---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
Information security technology.Security technical requirements for intrusion detection products.Part 1. Network-based products
ICS 35.240
A90
People's Republic of China Public Security Industry Standards
Replacing GA/T 403.1-2002
Information Security Technology
Intrusion detection products safety technical requirements
Part 1. Network products
detectionproducts-Part 1. Network-basedproducts
Issued on. 2014-03-24
2014-03-24 implementation
People's Republic of China Ministry of Public Security
Table of Contents
Introduction Ⅲ
Introduction Ⅳ
1 Scope 1
2 Normative references 1
3 Terms and definitions
4 Abbreviations 2
5 Network Intrusion Detection Product Description 2
6 Security Environment 3
6.1 Hypothesis 3
6.2 Threat 3
4 6.3 Organization for Security Policy
7 security purposes 4
7.1 Product Safety Objective 4
7.2 Environmental security objectives 5
Security functional requirements 8 5
8.1 data acquisition capabilities in claim 5
8.2 intrusion analysis Claim 5
8.3 Intrusion Response 6 Functional requirements
8.4 Management Control functional requirements 6
8.5 7 processing requirements of the test results
8.6 product flexibility requirements 8
8.7 identification 8
8.8 Management 9 Administrator
8.9 Security Audit 9
8.10 Event Data Security 10
8.11 Communication Security 10
8.12 Security 10 product itself
9 Security assurance requirements 10
9.1 Configuration Management 10
9.2 Delivery and Operation 11
12 9.3 Development
9.4 guidance document 13
14 9.5 Life Cycle Support
9.6 Test 14
9.7 Vulnerability assessment 15
10 basic principles of technical requirements 16
10.1 16 basic principles of security functional requirements
10.2 18 basic principles of security assurance requirements
11 classification requirements 18
11.1 Overview 18
11.2 Classification of security functional requirements 18
11.3 Classification of security assurance requirements 20
Foreword
GA/T 403 "information security technology intrusion detection product safety technical requirements" is divided into two parts.
--- Part 1. network products;
--- Part 2. Host products.
This section GA/T Part 1 403.
This section drafted in accordance with GB/T 1.1-2009 given rules.
This Part replaces GA/T 403.1-2002 "IT intrusion detection products safety - Part 1. network products",
Compared with GA/T 403.1-2002 main technical changes are as follows.
--- Standard name was changed to "information security technology intrusion detection products - Safety requirements - Part 1. Network products";
--- Increased network intrusion detection product description (see Chapter 5);
--- Increase the security environment, including the assumptions, threats and organizational security policies (see Chapter 6);
--- Increased security purposes, including the purpose of product safety and environmental safety purposes (see Chapter 7);
--- Remove the network intrusion detection product performance requirements (see the 2002 edition, Chapter 7);
--- Deleted the database support (see the 2002 edition of 6.1.5.5);
--- Modify the content of security functional requirements (see Chapter 8, Chapter 8, 2002 edition);
--- Increase the technical requirements of the basic principles, including the basic principles of security functional requirements and security assurance requirements for the basic principles (see Chapter 10).
Please note that some of the content of this document may involve patents. Release mechanism of the present document does not assume responsibility for the identification of these patents.
This part is proposed by the Ministry of Public Security Network Security Protection Agency.
This part of the jurisdiction of the Ministry of Public Security Information System Standardization Technical Committee.
This section drafted by. Ministry of Public Security of Computer Information System Security Product Quality Supervision and Inspection Center, Blue Shield Information Security Technology Co. Shares
Companies, Third Institute of Ministry of Public Security.
The main drafters of this section. a good song, Wuqi Cong, Li, Gu Jian, Hu Weina, Zhao, Yang Chen Zhong.
This part of the standard replaces the previous editions are.
--- GA/T 403.1-2002.
Introduction
GA/T 403 is described in detail in this section of the network-based intrusion detection products and security environment related assumptions, threats and organizational security policies
Strategy, defines the purpose of network security intrusion detection products and their supporting environment, demonstrated by the basic principles of security functional requirements and can be traced back
Products covered security purposes, for security purposes can be traced back cover and secure environment-related assumptions, threats and organizational security policies.
This section basically level with reference to the GB/T 18336.3-2008 prescribed level EAL2 security assurance requirements, and enhance the level at EAL4 level
Security assurance requirements based on the vulnerability analysis requires upgrade to an attacker can withstand moderate attack potential attack.
This section only gives a network-based intrusion detection products should meet the technical requirements of safety, but network-based intrusion detection products of specific skills
Art implementations, a method is not required.
Information Security Technology
Intrusion detection products safety technical requirements
Part 1. Network products
1 Scope
GA/T 403 provisions of this part of the network-based intrusion detection products, security functional requirements, security assurance requirements and grading requirements.
This section applies to the design, development and testing network-based intrusion detection products.
2 Normative references
The following documents for the application of this document is essential. For dated references, only the dated version suitable for use herein
Member. For undated references, the latest edition (including any amendments) applies to this document.
GB 17859-1999 computer information system security protection classification criterion
GB/T 18336-2008 (all parts), Information technology - Security techniques - Information Technology Security Evaluation Guidelines
GB/T 25069-2010 Information security technology terms
3 Terms and Definitions
GB 17859-1999, GB/T 18336-2008 (all parts) and GB/T 25069-2010 defined and the following terms and definitions
Meaning applicable to this document.
3.1
Intrusion intrusion
Any attempt to harm the integrity of resources, confidentiality or availability of behavior.
3.2
Detector sensor
Collection may indicate intrusions or misuse of information system resources in real-time event, and the information collected for preliminary points
Analysis of network-based intrusion detection product components. Installed at key nodes in the network, and monitor data flowing through the network.
3.3
Console managementconsole
Detector for management, policy configuration, data management, alarm management, incident response, as well as other event repository upgrade management, and the
Invasion behavior of intrusion detection system components in-depth analysis. A console can manage multiple detectors.
3.4
Attack signatures attacksignature
Intrusion detection systems pre-defined information can be found in a specific attack is happening.
3.5
Alarms alert
When the attack or invasion, intrusion detection system, emergency notification issued to the authorized administrator.
Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of GA/T 403.1-2014_English be delivered?Answer: Upon your order, we will start to translate GA/T 403.1-2014_English as soon as possible, and keep you informed of the progress. The lead time is typically 3 ~ 5 working days. The lengthier the document the longer the lead time. Question 2: Can I share the purchased PDF of GA/T 403.1-2014_English with my colleagues?Answer: Yes. The purchased PDF of GA/T 403.1-2014_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet. Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to [email protected]. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay. Question 5: Should I purchase the latest version GA/T 403.1-2014?Answer: Yes. Unless special scenarios such as technical constraints or academic study, you should always prioritize to purchase the latest version GA/T 403.1-2014 even if the enforcement date is in future. Complying with the latest version means that, by default, it also complies with all the earlier versions, technically.
|