Valid

GB/T 25069-2022Information security techniques—Terminology (English PDF)

信息安全技术 术语

Preview PDF

This is a limited preview

Buy now to download the full PDF (135 pages)

Need quotation for your management?

Get a formal quotation for GB/T 25069-2022 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

March 9, 2022

Implementation date

October 1, 2022

Scope

GB/T 25069-2022 is the English-translated version of 信息安全技术 术语.

GB/T 25069-2022 is the Chinese vocabulary of information security technology.

It defines the basic and general terms of the field and arranges them by subject: the terms of cryptography, of authentication and access control, of network and system security, of assessment and certification, of incident handling and of security management, each with its definition and, where it exists, its English equivalent.

It applies to the understanding of information security concepts, to the drafting of other information security standards and to communication inside China and abroad.

Standard writers, security professionals and translators use it. It replaces GB/T 25069-2010, was issued on 9 March 2022 and has applied since 1 October 2022.

Found what you need?

Document preview — GB/T 25069-2022

National Standard of the People's Republic of China

ICS
35.030
Classification
L 80
Replacing
GB/T 25069-2010

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

  • Preface
  • Introduction
  • 1 Scope
  • 2 Normative references
  • 3 Terms and Definitions
  • 4 Terminology classification
  • Reference
  • Index

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" drafted.

This document replaces GB/T 25069-2010 "Information Security Technical Terminology". Compared with GB/T 25069-2010, except for structural adjustment In addition to editorial changes, the main technical changes are as follows.

a) In "Terms and Definitions", new items were introduced, some items were updated, uncommon items were deleted, and the original classification was cancelled (see Chapter 3);

b) Added "Term Classification", divided into "Cryptographic Mechanism", "Authentication and Authorization", "Computational Security", "Communication Security" and "Application Security" Class", "Data Security Class", "Security Service Class", "Security Evaluation Class" and "Security Management Class" (see Chapter 4).

Introduction

Information security technical terminology is the basic language for technical communication in the field of information security. Unify normative terms and definitions to help standardize Accurately understand and express technical content to facilitate technical communication and research. To this end, this document is based on published national standards in the field of information security technology.

Terms and definitions in standards and international standards, which standardize basic or common information security technical terms and definitions.

1 Scope

This document defines the terms and definitions of basic or general concepts in the field of information security technology, and categorizes them.

This document is applicable to the understanding of the concept of information security technology, the formulation of other information security technology standards, and the national standards for information security technology. Communication inside and outside.

2 Normative references

There are no normative references in this document.

3 Terms and Definitions

3.1 Security

For a system, the properties of confidentiality, integrity, availability, verifiability, authenticity and reliability are obtained. [Source: ISO /IEC TR15443-1:2012, 3.21]

3.2 Security parameters

Various variables that determine the security strength of a mechanism. [Source: ISO /IEC 18370-2:2016, 3.8]

3.3 Security policy

A system used to govern the management, protection and distribution of assets (including sensitive information) affecting security and related elements within an organization and its systems Group rules, guidelines and practices.

3.4 Security outline

< Industrial control> In the security construction of industrial control systems, a series of security controls are selected to meet the needs and objectives of organizational security. control measures. [Source: GB/T 32919-2016, 3.6, with modifications]

3.5 Securemulti-tenancy

A type of multi-tenancy that employs security controls to explicitly protect against data corruption and provides validation of those controls for proper governance.

Note 1.Secure multi-tenancy occurs when the risk profile of an individual tenant does not exceed that of being in a dedicated single-tenant environment.

Note 2.In a very secure environment, even tenant identities are kept secret. [Source: ISO /IEC 27040:2015, 3.39]

3.6 Classified protection

According to the importance of business information and system services and the impact of damage, determine the implementation of a certain level of protection.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 135 pages — is available in the English PDF.

Referenced standards

Cited by

Similar standards

Editions of GB/T 25069

EditionTitleRevisionStatus
GB/T 25069-2022Information security techniques—Terminologycurrent editionCurrent
GB/T 25069-2010Information security techniques—Terminologyprevious editionSuperseded

This page sells the current edition, GB/T 25069-2022. Earlier editions are listed for reference only.

How to Download GB/T 25069-2022

  1. 1

    Add to cart

    Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.

  2. 2

    Checkout

    Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).

  3. 3

    Instant delivery (0–9 sec)

    Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.

  4. 4

    Invoice included

    A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.

Related Standards

English PDF
135 pages
Instant delivery (0–9 sec)
Invoice included
View Cart

Secure payment via Stripe

Payments accepted

VisaMastercardAmerican ExpressApple PayGoogle PayStripe

GB/T 25069-2022

$2,645.00