GB/T 20277-2015Information security technology -- Testing and evaluation approaches of network and terminal separation products (English PDF)

4.1 Security Function and Environmental Adaptation Testing Environment

4.1.1 Terminal separation products

Security function and environmental adaptation testing environment are shown in

Figure 1.

4.1.2 Network separation products

Security function and environmental adaptation testing environment are shown in

Figure 2.

4.2 Performance Testing Environment

Performance testing environment is shown in Figure 4.A special performance tester is adopted, whose interface directly connect business interface of network and terminal separation products via network cable.

5.1 Overall Description

5.1.1 Classification of testing and evaluation approaches

In this Standard, according to technical requirements of GB/T 20279-2015, requirements for testing and evaluation approaches of network and terminal separation products are classified into four categories.

5.1.2 Security level

5.2 Terminal Separation Products

5.2.1 Base-level testing

5.2.1.1 Access control

5.2.1.1.3 Attribute query

Testing and evaluation approaches and expected results of attribute query of terminal separation products are as follows.

5.2.1.1.4 Access authorization and rejection

Testing and evaluation approaches and expected results of access authorization and rejection of terminal separation products are as follows.

5.2.1.1.5 Switching signal consistency

Testing and evaluation approaches and expected results of switching signal consistency of terminal separation products are as follows.

5.2.1.1.6 Password protection

Testing and evaluation approaches and expected results of password protection of terminal separation products are as follows.

5.2.1.1.7 Physical isolation of memory and USB port

Testing and evaluation approaches and expected results of physical isolation of memory and USB port of terminal separation products are as follows.

5.2.2.1.6 Switching signal consistency

Testing and evaluation approaches and expected results of switching signal consistency of terminal separation products are as follows.

5.2.2.1.7 Illegal replacement of hard disk

Testing and evaluation approaches and expected results of illegal replacement of hard disk of terminal separation products are as follows.

5.3 Network Separation Products

5.3.1 Base-level testing

5.3.1.1 Access control

5.3.1.4 Identification and authentication

5.3.1.4.1 Definition of basic security attribute

Testing and evaluation approaches and expected results of definition of basic security attribute of network separation products are as follows.

5.3.1.4.2 Attribute initialization

Testing and evaluation approaches and expected results of attribute initialization of network separation products are as follows.

5.3.1.5 Audit

5.3.1.5.1 Audit data generation

Testing and evaluation approaches and expected results of audit data generation of network separation products are as follows.

5.3.1.8 Data integrity

Testing and evaluation approaches and expected results of data integrity of network separation products are as follows.

5.3.1.9 Cryptographic support

Testing and evaluation approaches and expected results of cryptographic support of network separation products are as follows.

5.4.2.7 Fault tolerance

Testing and evaluation approaches and expected results of fault tolerance of network unilateral transmission products are as follows.

5.4.2.8 Configuration data protection

Testing and evaluation approaches and expected results of configuration data protection of network unilateral transmission products are as follows.

6.1 Base-level Testing

6.1.1 Configuration management

6.1.1.1 Version number

Testing and evaluation approaches and expected results of version number are as follows.

6.1.1.2 Configuration item

Testing and evaluation approaches and expected results of configuration item are as follows.

6.1.2 Delivery and operation

6.1.2.1 Delivery program

Testing and evaluation approaches and expected results of delivery program are as follows.

6.1.3 Development

6.1.3.1 Non-formalized functional specification

Testing and evaluation approaches and expected results of non-formalized functional specification are as follows.

6.1.6 Vulnerability assessment

6.1.6.1 Product security function strength assessment

Testing and evaluation approaches and expected results of product security function strength assessment are as follows.

6.1.6.2 Developer vulnerability analysis

Testing and evaluation approaches and expected results of developer vulnerability analysis are as follows.

6.2 Enhanced-Level Testing

6.2.1 Configuration management

6.2.1.1 Partial configuration management automatization

Testing and evaluation approaches and expected results of partial configuration management automatization are as follows.

7.1 Next Generation Internet Support

7.1.1 Pure IPv6 network environment support

Testing and evaluation approaches and expected results of pure IPv6 network environment support are as follows.

7.1.2 Protocol consistency

7.1.2.1 IPv6 Core protocol consistency

Testing and evaluation approaches and expected results of IPv6 Core protocol consistency are as follows.

7.1.2.2 IPv6 NDP protocol consistency

Testing and evaluation approaches and expected results of IPv6 NDP protocol consistency are as follows.

7.2 IPv6 Transition Network Environment Support

7.2.1 Double protocol stack

Testing and evaluation approaches and expected results of double protocol stack are as follows.

7.2.2 Protocol conversion

Testing and evaluation approaches and expected results of protocol conversion are as follows.

7.2.3 Tunnel

7.2.3.1 60ver4

Testing and evaluation approaches and expected results of 60ver4 are as follows.

7.2.3.2 6to4

Testing and evaluation approaches and expected results of 6to4 are as follows.

7.2.3.3 ISATAP

Testing and evaluation approaches and expected results of ISATAP are as follows.

8.1 Exchange Rate

Testing and evaluation approaches and expected results of exchange rate of network separation products are as follows.

8.2 Hardware Switching Time

Testing and evaluation approaches and expected results of hardware switching time of network separation products are as follows.

......