GB/T 21050-2019Information security technology—Security requirements for network switch (English PDF)

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

This standard replaces GB/T 21050-2007 "Information Security Technology Network Switch Security Technical Requirements (Assessment Level 3)". versus Compared with GB/T 21050-2007, the main technical changes except editorial changes are as follows.

--- Modified the scope of use and added a convention on cryptographic algorithms (see Chapter 1, Chapter 1 of the 2007 edition);

--- Added reference to the terminology standard (see Chapter 2, Chapter 2 of the 2007 edition);

--- Added the term "trusted IT products" and deleted the term "network switch" (see Chapter 3, Chapter 3 of the 2007 edition);

---Modified the description of the network switch (see Chapter 4, Chapter 4 of the 2007 edition);

--- Modify the security environment as a security problem definition, and merge and modify assumptions, threats, and organizational security policies (see Chapter 5, 2007) Chapter 5 of the edition);

---Modified and deleted security purposes (see Chapter 6, Chapter 6 of the 2007 edition);

--- Added expansion components, added and deleted security requirements according to GB/T 18336-2015 (see Chapter 7);

--- Added a chapter on the basic principles (see Chapter 8).

1 Scope

This standard specifies that the network switch meets the security functional requirements and security requirements of EAL2 and EAL3, covering security issues. Definition, security purpose, security requirements, etc.

This standard applies to the testing, evaluation and procurement of network switches, and can also be used to guide the development and development of such products.

2 Normative references

The following documents are indispensable for the application of this document. For dated references, only dated versions apply to this document. For undated references, the latest edition (including all amendments) applies to this document.

GB/T 18336.1-2015 Information technology security technology - Information technology - Safety assessment criteria - Part 1: Introduction and general model

GB/T 18336.2-2015 Information technology security technology - Information technology - Safety assessment criteria - Part 2

GB/T 18336.3-2015 Information technology security technology - Information technology - Safety assessment criteria - Part 3: Security components

GB/T 25069-2010 Information Security Technology Terminology

3 Terms and definitions, abbreviations