GA/T 912-2018Information security technology--Security technical requirements for data leakage prevention products (English PDF)

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

This standard replaces GA/T 912-2010 "Information Security Technology Host Data Leakage Protection Product Safety Technical Requirements", and the main technical changes in GA/T 912-2010 are as follows.

--- Revised the leveling requirements, the level is divided into two levels. the basic level and the enhanced level (see Chapter 9, Chapter 7 of the 2010 edition);

--- Unified integration of host-based data loss prevention products for the host and network-based data leakage protection products for the network According to leakage protection products (see Chapter 5);

--- Adopting the method of identifying data content for leak protection, removing the leak prevention methods such as ports and protocol disabling (see Chapter 7, Chapter 4 of the 2010 edition);

--- Added language support for data (see Chapter 7);

--- Added policy adjustment function, should be based on the data content of the protection to identify the identification method and rules (see Chapter 7);

--- Added security policy non-bypass function, data should not bypass the function of the product (see Chapter 7);

--- Added technical requirements to prevent secondary leakage of data (see Chapter 7).

This standard was proposed by the Network Security Bureau of the Ministry of Public Security.

This standard is under the jurisdiction of the Information Security Standardization Technical Committee of the Ministry of Public Security.

This standard was drafted. Ministry of Public Security Computer Information System Security Product Quality Supervision and Inspection Center, the Third Institute of the Ministry of Public Security, Hangzhou Ping Information Technology Co., Ltd., Sirui Jiade (Beijing) Information Technology Co., Ltd., Hefei Saiyu Tenglong Information Technology Co., Ltd., Beijing Tianrong Letter Network Security Technology Co., Ltd.

1 Scope

This standard specifies the safety function requirements, safety requirements and classification requirements for data leakage protection products.

This standard applies to the design, development and testing of data leakage protection products.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this article.

Pieces. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 18336.3-2015 Information technology security technology information technology security assessment criteria GB/T 25069-2010 Information Security Technology Terminology

3 Terms and definitions

The following terms and definitions as defined in GB/T 18336.3-2015 and GB/T 25069-2010 apply to this document.

Data leakage prevention Prevents data from flowing out of the security domain in an unauthorized manner.

Data leakage protection product dataleakagepreventionproduct Prevents data from flowing out of the security domain's products in an unauthorized manner.

4 Abbreviations

The following abbreviations apply to this document.

HTTP. HyperText Transfer Protocol (HyperTextTransferProtocol) SMTP. Simple Mail Transfer Protocol (SimpleMailTransferProtocol) FTP. File Transfer Protocol (FileTransferProtocol) IM. Instant Messaging (InstantMessaging) SMS. Short Message Service (ShortMessagingService) HTTPS. Hypertext Transfer Protocol (HyperTextTransferProtocoloverSecureSocketLayer)

5 Data Leakage Protection Product Description

The data leakage protection product identifies the data by using files and data that are transmitted, stored in the host, or transmitted in the network.

The operation and transmission process are monitored and controlled to implement the function of protecting the data out of the security domain in an unauthorized manner;

Products should also have basic identity, security management, auditing, and alerting capabilities. The deployment and implementation of such products can be divided into hosts.