|
US$759.00 ยท In stock
Delivery: <= 5 days. True-PDF full-copy in English will be manually translated and delivered via email.
RB/T 205-2014: Security evaluation specifications for anti-denialrof-service system
Status: Valid
| Standard ID | Contents [version] | USD | STEP2 | [PDF] delivered in | Standard Title (Description) | Status | PDF |
| RB/T 205-2014 | English | 759 |
Add to Cart
|
5 days [Need to translate]
|
Security evaluation specifications for anti-denialrof-service system
| Valid |
RB/T 205-2014
|
PDF similar to RB/T 205-2014
Basic data | Standard ID | RB/T 205-2014 (RB/T205-2014) | | Description (Translated English) | Security evaluation specifications for anti-denialrof-service system | | Sector / Industry | Chinese Industry Standard (Recommended) | | Classification of Chinese Standard | A00 | | Classification of International Standard | 03.120.20 | | Word Count Estimation | 29,247 | | Date of Issue | 8/20/2014 | | Date of Implementation | 3/1/2015 | | Quoted Standard | GB/T 18336.1; GB/T 18336.2; GB/T 18336.3; GB/T 25069 | | Regulation (derived from) | ?PRC Industry Standard Filing Announcement 2014 No.10 (Total No.178) | | Issuing agency(ies) | National Certification and Accreditation Administration | | Summary | This standard specifies the evaluation methods for anti-denial-of-service systems, including functional, safety, performance verification and security assurance requirements. This standard applies to the testing, evaluation and certification of anti-denial-of-service systems. The design and implementation of anti-denial-of-service systems can also be used. | RB/T 205-2014: Security evaluation specifications for anti-denialrof-service system---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order.
Security evaluation specifications for anti-denialrof-service system
ICS 03.120.20
A00
Record number. 46945
People's Republic of China certification and recognition of industry standards
Anti-denial service system security evaluation specification
Published on.2014-08-20
2015-03-01 implementation
China National Certification and Accreditation Administration issued
Content
Foreword III
Introduction IV
1 Scope 1
2 Normative references 1
3 Terms, definitions and abbreviations 1
3.1 Terms and Definitions 1
3.2 Abbreviations 2
4 Evaluation process 2
4.1 General Description 2
4.2 The main link of the evaluation 2
4.3 Result determination 3
5 Evaluation Requirements 4
5.1 Functional Requirements 4
5.2 Safety requirements 5
5.3 Performance Verification Requirements 7
5.4 Warranty Requirements 7
5.5 Basic Requirements for Quality Assurance Ability 10
5.6 Product consistency check 11
6 Assessment requirements 11
6.1 General Description 11
6.2 Functional Evaluation 11
6.3 Security Evaluation 14
6.4 Performance Evaluation 18
6.5 Warranty Requirements Test 19
Reference 24
Figure 1 Functional test environment Figure 11
Figure 2 performance detection environment Figure 18
Foreword
This standard was drafted in accordance with the rules given in GB/T 1.1-2009.
This standard is proposed and managed by the National Certification and Accreditation Administration.
This standard was drafted. China Information Security Certification Center, Shanghai Information Security Evaluation and Certification Center, Anhui Zhongxin Software Co., Ltd.
The main drafters of this standard. Bu Ning, Chen Shixiang, Liu Silong, Wu Di, Yan Yi, Chen Qingming, Li Jing, Bi Qiang, Xu Weihai, Xu Hang, Chu Maoyang,
Wang Yonghua and so on.
Introduction
This standard proposes anti-denial service according to GB/T 18336 "Information Technology Security Technology Information Technology Security Evaluation Criteria"
The evaluation methods of the system's functional requirements, safety requirements, performance verification requirements and assurance requirements. At the same time, this standard gives the factory
Quality assurance capabilities and product consistency requirements.
GB/T 18336 "Information Technology Security Technology Information Technology Security Evaluation Criteria" is the evaluation object (TOE) design and development and
The basic criteria for assessing safety, giving general information on TOE's information technology, security technology and information security technology security assessment
begging. This standard refers to GB/T 18336, combined with the specific characteristics of the anti-denial service system, select the safety function requirements of GB/T 18336.2
Some of the components in the assessment as safety requirements; select all components of the EAL2 level in the GB/T 18336.3 security assurance requirements
To ensure the required assessment content.
The significance of the development of this standard is that it is beneficial for the certification body and testing organization to conduct detection, evaluation and certification against the denial of service system.
It is beneficial for enterprises to refer to the use of anti-denial service system design and implementation.
Anti-denial service system security evaluation specification
1 Scope
This standard specifies the evaluation methods for anti-denial service systems, including functional, safety, performance verification and security assurance requirements.
This standard applies to the testing, evaluation and certification of anti-denial service systems. The design and implementation of anti-denial service systems can also be used.
2 Normative references
The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this article.
Pieces. For undated references, the latest edition (including all amendments) applies to this document.
GB/T 18336 (all parts) Information technology security technology information technology security assessment criteria (ISO /IEC 15408)
GB/T 25069 Information Security Technical Terminology
3 Terms, definitions and abbreviations
3.1 Terms and definitions
The following terms and definitions established in GB/T 18336 and GB/T 25069 apply to this document.
3.1.1
Denial of service attack denial-of-serviceattack
A denial of service attack, a DoS attack. An attack that causes a denial of service is called a denial of service attack.
3.1.2
Anti-denial-of-service system
Hardware devices or hardware and software combinations against denial of service attacks, by monitoring and controlling incoming and outgoing data streams, timely discovering background traffic
Various types of denial of service attacks, filtering or bypassing attack traffic to ensure the passage of normal traffic and achieving denial of service attacks
The protective effect of the blow.
3.1.3
Throughput throughput
The ability of the anti-denial service system to forward data without packet loss, generally in percentage of the line speed (or rate)
To represent.
3.1.4
Traffic traction trafficredirection
The bypass deployment mode separates attack traffic from normal traffic, and the anti-denial service system specifically resists denial of service attacks.
A process that guarantees normal traffic as much as possible without being disturbed by an attack.
3.1.5
Bypass bypass
Through a specific trigger state (power failure or crash), the two networks do not pass through the system of the network security device, and are directly physically turned on.
3.1.6
Document review documentreview
Document review refers to the information and documents submitted by the certification body to the applicant, and is reviewed according to the product technical specifications.
Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of RB/T 205-2014_English be delivered?Answer: Upon your order, we will start to translate RB/T 205-2014_English as soon as possible, and keep you informed of the progress. The lead time is typically 3 ~ 5 working days. The lengthier the document the longer the lead time. Question 2: Can I share the purchased PDF of RB/T 205-2014_English with my colleagues?Answer: Yes. The purchased PDF of RB/T 205-2014_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet. Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to [email protected]. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay.
|