-
>
决战行测5000题(言语理解与表达)
-
>
软件性能测试.分析与调优实践之路
-
>
第一行代码Android
-
>
深度学习
-
>
Unreal Engine 4蓝图完全学习教程
-
>
深入理解计算机系统-原书第3版
-
>
Word/Excel PPT 2013办公应用从入门到精通-(附赠1DVD.含语音视频教学+办公模板+PDF电子书)
网络安全等级保护测评要求应用指南 版权信息
- ISBN:9787512437746
- 条形码:9787512437746 ; 978-7-5124-3774-6
- 装帧:一般胶版纸
- 册数:暂无
- 重量:暂无
- 所属分类:>
网络安全等级保护测评要求应用指南 本书特色
市面仅有的全面解读中国网络安全等级保护标准体系及等级保护实施的读本; 业内专家对中国网络安全等级保护制度的深入阐释; 来自官方团队的中国网络安全等级保护标准体系全面解读; 切实指导中国网络安全等级保护落地实施的指南; 助力一带一路等国外组织和公司在中国做好信息安全合规,确保业务平顺
网络安全等级保护测评要求应用指南 内容简介
《网络安全等级保护测评要求应用指南:英文》由郭启全主编
网络安全等级保护测评要求应用指南 目录
Chapter 1Basic Concepts 1
1.1Classified Evaluation1
1.2Evaluation Targets Selection1
1.3Evaluation Index Selection2
1.4The Mapping Relationship Between Evaluation Targets and Evaluation Index
3
1.5NonApplicable Evaluation Index4
1.6Evaluation Strength5
1.7Evaluation Method6
1.8Singular Evaluation6
1.9Overall Evaluation7
1.10Evaluation Conclusion7
Chapter 2General Introduction of the Evaluation Requirements9
2.1Relevant Description of the Evaluation Requirements9
2.2Text Structure of the Evaluation Requirements11
2.3General Requirements and Extended Requirements of Security Evaluation12
Chapter 3Application and Interpretation of the General Security Evaluation
Requirements at Level Ⅲ and Level Ⅳ13
3.1Security Physical Environment13
3.1.1Selection of Physical Location13
3.1.2Physical Access Control 14
3.1.3AntiTheft and AntiVandal15
3.1.4Lightning Prevention 16
3.1.5Fire Protection17
3.1.6Water Resistance and Moisture Resistance19
3.1.7Static Electricity Prevention20
3.1.8Temperature and Humidity Control20
3.1.9Power Supply21
3.1.10Electromagnetic Protection23
3.2Security Communication Network24
3.2.1Network Architecture24
3.2.2Communication Transmission27
3.2.3Trusted Verification29
3.3Security Area Boundary31
3.3.1Boundary Protection31
3.3.2Access Control34
3.3.3Intrusion Prevention37
3.3.4Malicious Code and Spam Prevention39
3.3.5Security Audit40
3.3.6Trusted Verification43
3.4Security Computing Environment44
3.4.1Network Device and Security Device 44
3.4.2Server and Terminal55
3.4.3Application System67
3.4.4Data Security79
3.5Security Management Center87
3.5.1System Management87
3.5.2Audit Management88
3.5.3Security Management89
3.5.4Centralized Management and Control90
3.6Security Management Systems94
3.6.1Security Strategy94
3.6.2Management Systems95
3.6.3Development and Release96
3.6.4Review and Revision97
3.7Security Management Organization98
3.7.1Post Setting98
3.7.2Staffing99
3.7.3Authorization and Approval101
3.7.4Communication and Cooperation102
3.7.5Review and Inspection104
3.8Security Management Personnel106
3.8.1Staff Recruitment106
3.8.2Staff Dismissal108
3.8.3Security Awareness Education and Training109
3.8.4External Visitor Access Management110
3.9Security Development Management113
3.9.1Grading and Filing113
3.9.2Security Scheme Design114
3.9.3Product Procurement and Usage116
3.9.4Software SelfDevelopment118
3.9.5Outsourcing Software Development122
3.9.6Security Engineering Implementation123
3.9.7Test and Acceptance125
3.9.8System Delivery126
3.9.9Classified Security Evaluation127
3.9.10Service Provider Management128
3.10Security Operation and Maintenance Management130
3.10.1Environment Management130
3.10.2Asset Management132
3.10.3Media Management133
3.10.4Device Maintenance Management134
3.10.5Vulnerability and Risk Management136
3.10.6Network and System Security Management137
3.10.7Malicious Code Prevention Management142
3.10.8Configuration Management143
3.10.9Password Management144
3.10.10Change Management145
3.10.11Backup and Recovery146
3.10.12Security Incident Handling148
3.10.13Contingency Plan Management150
3.10.14Outsourcing Operation and Maintenance Management152
Chapter 4Application and Interpretation of the Extended Security Evaluation
Requirements of Cloud Computing155
4.1Overview of Cloud Computing155
4.1.1Basic Concepts155
4.1.2Characteristics of Cloud Computing System156
4.1.3Deployment Model of Cloud Computing157
4.1.4Service Model of Cloud Computing157
4.1.5Cloud Computing Evaluation158
4.2Application and Interpretation of the Extended Security Evaluation
Requirements of Cloud Computing at Level Ⅲ and Level Ⅳ162
4.2.1Security Physical Environment162
4.2.2Security Communication Network163
4.2.3Security Area Boundary168
4.2.4Security Computing Environment175
4.2.5Security Management Center186
4.2.6Security Management System190
4.2.7Security Management Organization190
4.2.8Security Management Personnel190
4.2.9Security Development Management190
4.2.10Security Operation and Maintenance Management194
Chapter 5Application and Interpretation of the Extended Security Evaluation
Requirements of Mobile Internet196
5.1Basic Concepts196
5.1.1Mobile Interconnection196
5.1.2Mobile Terminals196
5.1.3Wireless Access Gateway196
5.1.4Mobile Application Software196
5.1.5Mobile Terminal Management System197
5.2Application Interpretation of Extended Security Evaluation
Requirements of Mobile Internet at Level Ⅲ and Level Ⅳ197
5.2.1Security Physical Environment197
5.2.2Security Communication Network198
5.2.3Security Area Boundary199
5.2.4Security Computing Environment206
5.2.5Security Management Center230
5.2.6Security Management System230
5.2.7Security Management Organization231
5.2.8Security Management Personnel231
5.2.9Security Development Management231
5.2.10Security Operation and Maintenance Management233
Chapter 6Application and Interpretation of the Extended Security Evaluation
Requirements of IoT235
6.1Overview of IoT System235
6.1.1Characteristics of IoT System235
6.1.2Composition of IoT System235
6.1.3Overview of Extended Requirements for IoT Security237
6.1.4Basic Concepts238
6.2Application and Interpretation of the Extended Security Evaluation
Requirements of IoT at Level Ⅲ and Level Ⅳ 239
6.2.1Security Physical Environment239
6.2.2Security Communication Network241
6.2.3Security Area Boundary245
6.2.4Security Computing Environment253
6.2.5Security Management Center268
6.2.6Security Management System277
6.2.7Security Management Organization277
6.2.8Security Management Personnel277
6.2.9Security Development Management277
6.2.10Security Operation and Maintenance Management277
Chapter 7Application and Interpretation of the Extended Security Evaluation
Requirements of Industrial Control System280
7.1Overview of Industrial Control System280
7.1.1Characteristics of Industrial Control System280
7.1.2Functional Hierarchy Model of Industrial Control System282
7.1.3Evaluation Target and Index of Industrial Control System284
7.1.4Typical Industrial Control System287
7.2Application and Interpretation of the Extended Security Evaluation
Requirements of Industrial Control System at Level Ⅲ and Level Ⅳ290
7.2.1Security Physical Environment290
7.2.2Security Communication Network291
7.2.3Security Area Boundary300
7.2.4Security Computing Environment317
7.2.5Security Management Center343
7.2.6Security Management System343
7.2.7Security Management Organization343
7.2.8Security Management Personnel344
7.2.9Security Development Management344
7.2.10Security Operation and Maintenance Management345
Chapter 8Application and Interpretation of the Extended Security Evaluation
Requirement of Big Data346
8.1Basic Concepts346
8.1.1Big Data346
8.1.2Targets of Big Data Classification Protection347
8.2Extended Security Requirements and Best Practices348
8.3Application and Interpretation of the Extended Security Evaluation
Requirements of Big Data at Level Ⅲ and Level Ⅳ358
8.3.1Security Physical Environment358
8.3.2Security Communication Network358
8.3.3Security Area Boundary363
8.3.4Security Computing Environment364
8.3.5Security Management Center382
8.3.6Security Management System385
8.3.7Security Management Organization387
8.3.8Security Management Personnel390
8.3.9Security Development Management392
8.3.10Security Operation and Maintenance Management396
网络安全等级保护测评要求应用指南 作者简介
郭启权,公安部网络安全保护局总工程师。 刘建伟,北京航空航天大学网络空间安全学院 院长,主要研究领域包括:密码学、5G网络安全、移动通信网络安全、天空地一体化网络安全、电子健康网络安全、智能移动终端安全、星地数据链安全等。 王新杰,北京时代新威信息技术有限公司总经理。 2003年开始从事网络安全行业,参与了“全国信息安全标准化”系列标准的研制。主要担任:信息安全等级保护高级测评师 、全国信息安全标准化技术委员会(SAC/TC 260)委员、国际信息系统安全认证联盟((ISC)2)中国顾问。
- >
李白与唐代文化
李白与唐代文化
¥9.5¥29.8 - >
新文学天穹两巨星--鲁迅与胡适/红烛学术丛书(红烛学术丛书)
新文学天穹两巨星--鲁迅与胡适/红烛学术丛书(红烛学术丛书)
¥9.9¥23.0 - >
月亮与六便士
月亮与六便士
¥13.4¥42.0 - >
名家带你读鲁迅:故事新编
名家带你读鲁迅:故事新编
¥13.0¥26.0 - >
随园食单
随园食单
¥15.4¥48.0 - >
罗曼·罗兰读书随笔-精装
罗曼·罗兰读书随笔-精装
¥24.9¥58.0 - >
我与地坛
我与地坛
¥16.8¥28.0 - >
企鹅口袋书系列·伟大的思想20:论自然选择(英汉双语)
企鹅口袋书系列·伟大的思想20:论自然选择(英汉双语)
¥6.3¥14.0
-
基于近邻思想和同步模型的聚类算法
¥44.1¥59 -
深度学习
¥92.4¥168 -
微信背后的产品观
¥62.6¥88 -
NGINX经典教程
¥89.9¥119.8 -
图解TCP/IP(第6版)
¥56.9¥79.8 -
物联网动态服务的协同感知与调控优化
¥51.4¥72