GA/T 710-2007Information security technology--Fundamental configure of security classification protection for information system (English PDF)

Foreword

This standard is proposed and managed by the Information System Security Standardization Technical Committee of the Ministry of Public Security.

This standard was drafted. Beijing Jiangnan Tianan Technology Co., Ltd., Beijing Siyuan Xinchuang Information Security Information Co., Ltd.

Introduction

The basic configuration of the information system security level protection is the security protection level of the information system security level protection from the system perspective.

Description of the security mechanism configuration.

This standard gives the basic configuration of information system security for each security protection level, and calculates the environmental security and its points from the local area.

Hierarchical security mechanism configuration, local computing environment boundary protection and its hierarchical security mechanism configuration, user environment security and its boundary protection grading Level security mechanism configuration, network system security and its hierarchical security mechanism configuration, interoperability security mechanism configuration between security domains, password security the mechanism is hierarchically configured, and the security management configuration is described. The overall requirements of security and the configuration of hierarchical security mechanisms are described.

Information security technology Information system security level protection basic configuration

1 Scope

This standard specifies the safety level protection for information systems in accordance with the requirements of five safety protection levels of GB 17859-1999.

The basic configuration of each security level.

This standard applies to the security level protection of information systems in accordance with the requirements of five security protection levels of GB 17859-1999.

The design of each safety level for each safety level.

2 Normative references

The terms in the following documents become the terms of this standard by reference to this standard. All dated references, followed by all Modifications (not including errata content) or revisions do not apply to this standard, however, parties to agreements based on this standard are encouraged to study is it possible to use the latest version of these files? For undated references, the latest edition applies to this standard.

GB 17859-1999 Computer Information System Security Protection Level Division Guidelines GB/T 20269-2006 Information Security Technology Information System Security Management Requirements GB/T 20270-2006 Information security technology network basic security technical requirements GB/T 20271-2006 Information security technology information system general safety technical requirements GB/T 20272-2006 Information security technology operating system security technical requirements GB/T 20273-2006 Information security technology database management system security technical requirements GA/T 708-2007 Information Security Technology Information System Security Level Protection System Framework GA/T 709-2007 Information Security Technology Information System Security Level Protection Basic Model

3 Terms and definitions

The terms and definitions established by GA/T 708-2007 apply to this standard.

4 Information system security level protection basic configuration

4.1 Local Area Computing Environment Security and Its Hierarchical Security Mechanism Configuration