GA/T 1168-2014General technical requirements for the security protection of the traffic management integrated application platform (English PDF)

Foreword

This standard is drafted in accordance with the rules given in GB/T 1.1-2009.

This standard is proposed by the Traffic Administration of the Ministry of Public Security.

This standard by the Ministry of Public Security Computer and Information Processing Standardization Technical Committee.

The drafting unit. the Ministry of Public Security Traffic Management Science Institute, the State Road Traffic Safety Product Quality Supervision and Inspection Center.

Introduction

This standard describes the public security traffic management integrated application platform and important plug-in system should achieve the safety protection technical requirements for public security traffic Management of integrated application platform and an important plug-in system to provide a safe construction and management guidance.

This standard is aimed at GB/T 22239-2008 on the information system security level protection of the third level of basic requirements, GA/T 710-2007 on Information system security level protection of the third level of basic configuration requirements, as well as other relevant standards, based on the combination of public security traffic management information system security Full protection of technical requirements and characteristics, selected for public security traffic management integrated application platform for security protection technology elements, and to expand and fine , From the specific operational level to guide the public security traffic management application platform and an important plug-in system security construction and management.

Security management of public security traffic management platform General technical requirements

1 Scope

This standard specifies the general technical requirements for the safety protection of the integrated application platform of public security traffic management.

This standard applies to the construction and management of the integrated application platform of public security traffic management, also applies to the comprehensive application platform of public security traffic management to plug the system construction and management.

2 Normative reference documents

The following documents are indispensable for the application of this document. For dated references, only the dated edition applies to this article Pieces. For undated references, the latest edition (including all modifications) applies to this document.

Code for fire protection of building design GB 50016-2006 Code for design of room for electronic information system GB 50174-2008 Code for safety protection of lightning electromagnetic pulse in computer information system Information security technology - Information systems - Security - level protection system framework

3 Terms and definitions

The following terms and definitions apply to this document.

Local computing environment localareacomputingenvironment which consists of one or more computer systems (host/server) to store and process the data in the information system.

To the purpose, there is a clear boundary of the computing environment. A local computing environment can be composed of a computer system, or by a number of computers the system is composed of LAN connection.

[GA/T 708-2007, definition 3.4] 3.2 User environment by one or more terminal computers to provide users with the use of information systems in the data information as the main purpose of the environment, also known as independence User/user group.

[GA/T 708-2007, definition 3.7] 3.3 Network system networks A system that connects a local computing environment with a local computing environment and a local computing environment and a user environment.

[GA/T 708-2007, definition 3.9] 3.4 Security domain the area in the information system that performs the same security policy. In the implementation of hierarchical protection of the information system, the security domain can be the same security Full level of information systems or subsystems.

[GA/T 708-2007, definition 3.11]