Valid

GA/T 1396-2017Information security technology - Security technical requirements for web content security inspection products (English PDF)

信息安全技术网站内容安全检查产品安全技术要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (12 pages)

Need quotation for your management?

Get a formal quotation for GA/T 1396-2017 in 30 minutes.

Issued by

Ministry of Public Security

Level / Type

National · Recommended

Issue date

April 19, 2017

Implementation date

April 19, 2017

Scope

GA/T 1396-2017 is the English-translated version of 信息安全技术网站内容安全检查产品安全技术要求.

GA/T 1396-2017 — This standard specifies the site content security inspection product safety function requirements, security requirements and classification requirements.

This standard applies to the site content security inspection product design, development and testing.

Found what you need?

Document preview — GA/T 1396-2017

National Standard of the People's Republic of China

ICS
35.240
Classification
A 90

Issued by: Ministry of Public Security

Contents

  • Foreword
  • 1 Scope
  • 2 Normative references
  • 3 Terms and definitions
  • 4 Website Content Security Check Product Description
  • 5 General Description
  • 5.1 Safety Technical Requirements Classification
  • 5.2 Security classification
  • 6 Safety function requirements
  • 6.1 Basic Information Management
  • 6.2 Information Collection
  • 6.3 Illegal content feature library
  • 6.4 Strategy Customization
  • 6.5 Domain Name Whitelist
  • 6.6 Inspection Strategy
  • 6.7 Violation content inspection
  • 6.8 Malicious code check
  • 6.9 Manual Audit Function
  • 6.10 Active scanning function
  • 6.11 Semantic Recognition
  • 6.12 Record of inspection results
  • 6.13 Web page snapshot
  • 6.14 Alarm function
  • 6.15 Website Type Support
  • 6.16 Blocking function
  • 6.17 Statistical Analysis
  • 6.18 Identification and Identification
  • 6.19 Data Transfer Security
  • 6.20 Data Storage Security
  • 6.21 Audit Log
  • 6.22 Safety Management
  • 7 Security Requirements
  • 7.1 Development
  • 7.2 Guidance Document
  • 7.3 Life Cycle Support
  • 7.4 Test
  • 7.5 Vulnerability Assessment
  • 8 Grade division requirements
  • 8.1 Overview
  • 8.2 Classification of safety function requirements
  • 8.3 Security Assurance Requirements Classification

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

This standard proposed by the Ministry of Public Security Network Security Bureau.

This standard by the Ministry of Public Security Information System Safety Standardization Technical Committee.

1 Scope

This standard specifies the site content security inspection product safety function requirements, security requirements and classification requirements.

This standard applies to the site content security inspection product design, development and testing.

2 Normative references

The following documents for the application of this document is essential. For dated references, only the dated version applies to this article Pieces. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 18336.3-2015 Information Technology Security Technology Information Technology Security Assessment Guidelines Part 3. Security components Information technology - Security terminology

3 Terms and definitions

GB/T 18336.3-2015 and GB/T 25069-2010 defined by the following terms and definitions apply to this document.

Web Content Security Check webcontentsecurityinspectionproduct Content posted on the site for security checks, according to the set of security management strategies on the website of the violation of the alarm, so indeed Securing website content compliance.

4 Website Content Security Check Product Description

Website content inspection products through data acquisition and analysis of the site content (including web pages of text, pictures, documents, audio and video, etc.

Like the information contained in) to monitor, detect violations, and record and analyze. In addition, the site content security inspection product is also responsible for insurance Protect the product itself and its important internal data.

Website content security inspection products typical operating environment shown in Figure 1.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 12 pages — is available in the English PDF.

Referenced standards

How to Download GA/T 1396-2017

  1. 1

    Add to cart

    Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.

  2. 2

    Checkout

    Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).

  3. 3

    Instant delivery (0–9 sec)

    Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.

  4. 4

    Invoice included

    A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.

Related Standards

English PDF
12 pages
Instant delivery (0–9 sec)
Invoice included
View Cart

Secure payment via Stripe

Payments accepted

VisaMastercardAmerican ExpressApple PayGoogle PayStripe

GA/T 1396-2017

$235.00