GA/T 709-2007Information security technology--Fundamental model of security classification protection for information system (English PDF)

Foreword

This standard is proposed and managed by the Information System Security Standardization Technical Committee of the Ministry of Public Security.

This standard was drafted. Beijing Jiangnan Tianan Technology Co., Ltd., Beijing Siyuan Xinchuang Information Security Information Co., Ltd.

Introduction

The basic model of information system security level protection is to protect the security level of each protection level from the system perspective to the information system security level.

Type description.

This standard first gives the overall model of information system security, and then gives the information system security level protection level one to five.

Basic model for each level of reference.

For a complex large information system, different components generally have different security requirements. This standard is divided the basic model of information system security level protection given by the idea of security domain can reflect the need of information system security level protection. Safety A domain is the smallest unit in an information system that implements the same security protection policy. Security domain security requirements for business applications supported by information systems Based on the basic basis, it is divided and determined based on the protection needs of data information.

Information security technology Basic model of information system security level protection

1 Scope

This standard specifies the safety level protection for information systems in accordance with the requirements of five safety protection levels of GB 17859-1999.

The basic model of each level of security protection.

This standard is applicable to the implementation of security level protection for information systems in accordance with the requirements of five security protection levels of GB 17859-1999.

Design carried out.

2 Normative references

The terms in the following documents become the terms of this standard by reference to this standard. All dated references, followed by all Modifications (not including errata content) or revisions do not apply to this standard, however, parties to agreements based on this standard are encouraged to study is it possible to use the latest version of these files? For undated references, the latest edition applies to this standard.

GB 17859-1999 Computer Information System Security Protection Level Division Guidelines GA/T 708-2007 Information Security Technology Information System Security Level Protection System Framework

3 Terms and definitions

The terms and definitions established by GA/T 708-2007 apply to this standard.

4 Information System Security Overall Model

An information system is mainly a local area computing environment that implements computing tasks, a network system that implements data transmission, and users/users.

Group composition. Thus, a secure information system should consist of the following components.

--- Secure local computing environment;

---Boundary protection of the local computing environment;

--- Secure user environment (independent users/user groups and) its border protection;

---Safe network system;

--- Information System Security Management Center.

Figure 1 shows the overall model of information system security consisting of the above components.