|
US$129.00 ยท In stock
Delivery: <= 3 days. True-PDF full-copy in English will be manually translated and delivered via email.
MHT0041-2013: (Guidelines for Classification and Classification of Civil Aviation Information Security Events)
Status: Valid
| Standard ID | Contents [version] | USD | STEP2 | [PDF] delivered in | Standard Title (Description) | Status | PDF |
| MH/T 0041-2013 | English | 129 |
Add to Cart
|
3 days [Need to translate]
|
(Guidelines for Classification and Classification of Civil Aviation Information Security Events)
| Valid |
MH/T 0041-2013
|
Standard similar to MHT0041-2013 MH 5064 MH 5013 MH/T 0023 Basic data | Standard ID | MH/T 0041-2013 (MH/T0041-2013) | | Description (Translated English) | (Guidelines for Classification and Classification of Civil Aviation Information Security Events) | | Sector / Industry | Civil Aviation Industry Standard (Recommended) | | Word Count Estimation | 5,586 | | Date of Issue | 13/3/2013 | | Date of Implementation | 1/6/2013 | | Issuing agency(ies) | Civil Aviation Administration of China | MHT0041-2013: (Guidelines for Classification and Classification of Civil Aviation Information Security Events)
---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
Guidelines for the category and classification of information security incidents of civil aviation
ICS 35.020
L 07
MH
Civil Aviation Industry Standard of the People's Republic of China
Guidelines for Classification and Classification of Civil Aviation Information Security Events
2013-03-13 released
2013-06-01 implementation
Issued by Civil Aviation Administration of China
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
This standard was proposed by the Personnel, Science and Education Department of China Aviation Administration.
This standard was approved by the Aircraft Airworthiness Certification Department of the Civil Aviation Administration of China.
This standard is under the jurisdiction of the China Academy of Civil Aviation Science and Technology.
Drafting organizations of this standard. Civil Aviation University of China, China Civil Aviation Science and Technology Research Institute.
The main drafters of this standard. Xie Lixia, Du Weijun, Fu Yu, Xiong Yuting, Yang Hongyu.
Guidelines for Classification and Classification of Civil Aviation Information Security Events
1 Scope
This standard specifies the classification and classification of civil aviation network and information security incidents.
This standard applies to civil aviation network and information security management and emergency response.
2 Terms and definitions
The following terms and definitions apply to this standard.
2.1
Information security incident
Due to natural or man-made and software and hardware defects or failures, they cause harm to the information system or cause a negative impact on society.
Ringing event.
[GB/Z 20986-2007, definition 2.2]
2.2
Malware incidents
Information security incidents caused by deliberately making or disseminating harmful programs, or being affected by harmful programs.
Note. An event affected by a harmful program refers to a program inserted into a civil aviation information system that harms data and application programs in the civil aviation information system.
The confidentiality, integrity or availability of the program or operating system may affect the normal operation of the civil aviation information system.
2.3
Network attacks incidents
Through the network or other technical means, the use of civil aviation information system configuration defects, protocol defects, procedural defects or the use of brute force attacks
Attacks on the civil aviation information system and cause the civil aviation information system to be abnormal or cause potential damage to the current operation of the civil aviation information system.
In the event of a compromised information security.
2.4
Information destroy incidents
The information in the civil aviation information system is tampered with, counterfeited, leaked, stolen, etc. through the Internet or other technical means
Information security incident.
2.5
Information content security incidents
Use information networks to publish and spread security incidents that endanger national security, social stability, and public interest.
[GB/Z 20986-20986, definition 4.2.4]
2.6
Facilities faults incidents
Information security incidents caused by the failure of the civil aviation information system itself or the failure of peripheral support facilities such as power and telecommunications, as well as human-made use
Information security incidents caused by the destruction of civil aviation information systems by non-technical means.
2.7
Disaster incidents
Information security incidents caused by physical damage to civil aviation information systems caused by force majeure.
3 Classification of information security incidents
3.1 Harmful program incident
Harmful program incidents include.
--Computer virus incident;
--Worm incident;
- Trojan horse incident;
--Botnet incident;
--Mixed attack program event;
--Malicious code embedded in the webpage;
--Other harmful program incidents.
3.2 Cyber Attack
Cyber attacks include.
- Denial of service attacks;
--Backdoor attack incident;
--Vulnerability attack events;
--Network scanning and eavesdropping incidents;
--Interference events;
--Other cyber attacks.
3.3 Information destruction incident
Information destruction incidents include.
--Information tampering incident;
--Information counterfeiting incident;
--Information leakage incident;
--Information theft incident;
--Information loss event;
--Other information destruction incidents.
3.4 Information content security incidents
Information content security incidents include.
--Information security incidents that violate the Constitution, laws, and administrative regulations;
- Discussions and comments on social issues have formed sensitive public opinion hotspots on the Internet, and information security incidents of a certain scale have occurred;
-Organize information security incidents that concatenate and incite assemblies and parades;
--Other information content security incidents.
3.5 Equipment failure events
Equipment failures include.
--Software and hardware failure information security events;
--Information security incidents of failure of peripheral safeguard facilities;
- Man-made destruction of fault information security incidents;
--Other equipment and facility failure information security incidents.
3.6 Catastrophic events
Disastrous events include information security incidents caused by floods, typhoons, earthquakes, lightning strikes, collapses, fires, terrorist attacks, and wars.
4 Elements to be considered in the classification of information security incidents
4.1 The importance of the information system
According to the importance of civil aviation information system to industry development, operational safety, and public interest, it is divided into.
--Important civil aviation information system. a civil aviation information system with a security protection level of three or above;
--General civil aviation information system. a civil aviation information system with a security protection level of two or lower.
4.2 System loss
Due to the destruction of the software, hardware, functions and data of the civil aviation information system, the business of the system was interrupted, which caused the incident to the unit or
The losses caused by the industry can be divided into the following costs according to the cost of restoring the normal operation of the system and eliminating the negative effects of information security incidents.
a) Severe system losses. paralysis of important civil aviation information systems, loss of business processing capabilities, or important civil aviation
The confidentiality, integrity, and availability of the key data of the information system have been severely damaged, restore the normal operation of the system and eliminate information security
The cost of the negative impact of the entire incident is huge, and it is unbearable for the unit or industry that caused the incident;
b) Large system loss. the civil aviation information system is interrupted, which obviously affects the efficiency of the system and the business processing capacity is affected.
Or the confidentiality, integrity, and availability of important data in the important civil aviation information system are destroyed, and the normal operation and
The cost of eliminating the negative impact of information security incidents is relatively high;
c) General system loss. cause a brief interruption of the civil aviation information system, affect system efficiency, and impair the system's business processing capacity
Or the confidentiality, integrity, and availability of important data in the civil aviation information system are affected, and the normal operation of the system is restored
And the cost of eliminating the negative impact of information security incidents is relatively small.
4.3 Social impact
Regarding the scope and extent of the impact of civil aviation information security incidents on society, according to its impact on national security, industry development, and operational safety
And public interest, etc., divided into.
a) Significant social impact. severely affect civil air transportation, cause extensive flight delays, threaten national security, and seriously damage
Public interest
b) Larger social impact. affecting civil air transportation, causing multiple flight delays, which may affect national security and harm public interests
beneficial;
c) General social impact. only affects the unit where the incident occurred, causing delays in individual flights; affecting public interests.
5 Classification of information security incidents
5.1 Major information security incidents
Major information security incidents include.
a) Inflict serious system losses on important civil aviation information systems;
b) Have a significant social impact.
5.2 Major information security incidents
Major information security incidents include.
a) Make important civil aviation information systems suffer greater system losses;
b) Have a greater social impact.
5.3 General information security incidents
General information security incidents include.
a) The civil aviation information system suffers general system losses;
b) Produce general social impact.
Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of MHT0041-2013_English be delivered?Answer: Upon your order, we will start to translate MHT0041-2013_English as soon as possible, and keep you informed of the progress. The lead time is typically 1 ~ 3 working days. The lengthier the document the longer the lead time. Question 2: Can I share the purchased PDF of MHT0041-2013_English with my colleagues?Answer: Yes. The purchased PDF of MHT0041-2013_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet. Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to [email protected]. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay.
|