GA/T 671-2006Information security technology - Technology requirement for terminal computer system of security classified protection (English PDF)

3.1 Terms and definitions

The terms and definitions established in the GB 17859-1999, GB/T 20271-2006 and GB/T 20272-2006 AND the following ones apply to this Standard.

equipment protection against theft and destruction of the terminal computer system is divided into.

a) Equipment identification requirements. The equipment of the terminal computer system shall have obvious and non-removable identifications, so as to prevent the replacement and to facilitate the searching;

b) Host physical security. The host of the terminal computer system shall have case encapsulation protection, so as to prevent the system damage caused by dropping and vibration;

c) Requirements for equipment protection against theft and self-destruction.

The equipment of the terminal computer system shall provide owners with controllable anti-theft alarm and system self-destruction functions.

4.1.3 High reliability of equipment

According to the application requirements of special environments, the equipment’s high reliability of the terminal computer system is divided into.

a) Waterproof requirement. The terminal computer system shall have high sealing property, so as to prevent water drops from entering;

b) Anti-dropping and anti-vibration requirements. The terminal computer system shall have reinforced protection, so as to prevent the system damage caused by dropping and vibration;

c) Requirements for the resistance to high and low temperature and pressure.

The terminal computer system shall be able to adapt the environments with high and low temperature and pressure;

d) Resistance to electromagnetic radiation and interference. The terminal computer system shall be able to resist the system security threats caused by electromagnetic interference and radiation.

4.2 Operational security

4.2.1 System security detection and analysis

According to the different requirements of different security levels, the security detection and analysis of the terminal computer system is divided into.

a) Security detection and analysis of the operating system. ASSESS the file permission, file host, network service settings, account settings, program authenticity, and general user-related security points and intrusion signs as an administrator from the aspect of terminal computer operating system, so as to detect and analyze the security of the operating system, to discover the existing potential security hazards, and to put forward the remedial measures.

b) Security detection and analysis of the hardware system. CONDUCT the security detection to the hardware system supporting the terminal computer system operation. SCAN the specific security vulnerability related to the system operation and data protection in the hardware system, so as to analyze...

......