Valid

GB/T 25068.3-2022Information technology - Security techniques - Network security - Part 3: Threats, design techniques and control for network access scenarios (English PDF)

信息技术安全技术网络安全第3部分：面向网络接入场景的威胁、设计技术和控制

Preview PDF

This is a limited preview

Buy now to download the full PDF (59 pages)

Need quotation for your management?

Get a formal quotation for GB/T 25068.3-2022 in 30 minutes.

Issued by

State Administration for Market Regulation, China National Standardization Administration

Level / Type

National · Recommended

Issue date

October 12, 2022

Implementation date

May 1, 2023

Scope

GB/T 25068.3-2022 is the English-translated version of 信息技术安全技术网络安全第3部分：面向网络接入场景的威胁、设计技术和控制.

GB/T 25068.3-2022 is the Chinese standard "Information technology - Security techniques - Network security - Part 3: Threats, design techniques and control for network access scenarios".

Its scope clause reads: This document describes the threats, design techniques, and control issues associated with network access scenarios, providing capabilities for each network access scenario.

Detailed guidance on the three elements of security threats, security design techniques, and controls that can reduce associated risks.

The characteristics of the network environment being reviewed determine the selection of specific information (including from The information selected in GB/T 25068.4, GB/T 25068.5 and ISO /IEC 27033-6), that is, the selection of specific information and specific network access Scenarios are related to the "technical" topic. Its clauses include terms and definitions.

Found what you need?

Document preview — GB/T 25068.3-2022

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80
Replacing: GB/T 25068.4-2010

Issued by: State Administration for Market Regulation, China National Standardization Administration

Preface
Introduction
1 Scope
2 Normative references
3 Terms and Definitions
4 Abbreviations
5 Document structure
6 Overview
7 Internet access services for employees
7.1 Background
7.2 Security threats
7.3 Security Design Technology and Control Measures
8 Business-to-business services
8.1 Background
8.2 Security threats
8.3 Security Design Technology and Control Measures
9 Business-to-customer services
9.1 Background
9.2 Security Threats
9.3 Security Design Techniques and Control Measures
10 Enhanced Collaboration Services
10.1 Background
10.2 Security Threats
10.3 Security Design Techniques and Control Measures
11 Network Segmentation
11.1 Background
11.2 Security Threats
11.3 Security Design Techniques and Control Measures
12 Networking Support for Home Offices and Small Business Offices
12.1 Background
12.2 Security Threats
12.3 Security Design Techniques and Control Measures
13 Mobile Communications
13.1 Background
13.2 Security Threats
13.3 Security Design Techniques and Controls
14 Providing Network Support for Mobile Users
14.1 Background
14.2 Security Threats
14.3 Security Design Techniques and Controls
15 Outsourcing Services
15.1 Background
15.2 Security Threats
15.3 Security design techniques and controls
Appendix A (Informative) Threat Catalog

1 Scope

This document describes the threats, design techniques, and control issues associated with network access scenarios, providing capabilities for each network access scenario.

Detailed guidance on the three elements of security threats, security design techniques, and controls that can reduce associated risks.

This document is applicable to review the structure and design of the technical safety system in accordance with GB/T 25068.2, and to select and record the preferred technology options for technical security architecture, design, and associated controls. The characteristics of the network environment being reviewed determine the selection of specific information (including from

The information selected in GB/T 25068.4, GB/T 25068.5 and ISO /IEC 27033-6), that is, the selection of specific information and specific network access

Scenarios are related to the "technical" topic.

2 Normative references

The contents of the following documents constitute the essential provisions of this document through normative references in the text. Among them, dated references

For documents, only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document.

GB/T 29246 Information Technology Security Technology Information Security Management System Overview and Vocabulary (GB/T 29246-2017,

ISO /IEC 27000.2016, IDT)

GB/T 25068.1 Information Technology Security Technology Network Security Part 1.Overview and Concepts (GB/T 25068.1-

2020, ISO /IEC 27033-1.2015, IDT)

3 Terms and Definitions

The following terms and definitions defined in GB/T 29246 and GB/T 25068.1 apply to this document.

3.1 Malware

A category of maliciously designed software that contains features that may, directly or indirectly, cause potential harm to the user or the user's computer system or function.

[Source. ISO /IEC 27032.2012,4.35]

3.2 opacity

Giving credit to information that may be obtained by monitoring network activity (such as obtaining the address of an endpoint in a VoIP call over the Internet)

Protect.

Note. Opacity also protects the related behavior of obtaining information.

GB/T 25068.1 | GB/T 25070 | GB/T 25061 | GB/T 25068.7 | GB/T 25068.6 | GB/T 25068.4 | […]

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 59 pages — is available in the English PDF.

Referenced standards

Normative references

IEC 27000.2016 · IEC 27033

Cited by

How to Download GB/T 25068.3-2022

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.