GB/T 25070-2019Information security technology — Technical requirements of security design for classified protection of cybersecurity (English PDF)

3.1 Cybersecurity

By taking necessary measures to prevent network attacks, intrusions, interference, destruction and illegal use, as well as accidents, so that the network is in a stable and reliable state of operation; as well as the ability to ensure the integrity, confidentiality and availability of network data. [GB/T 22239-2019, definition 3.1]

3.2 Classified system

A system with a defined level of protection. The classified system is divided into first-level, second-level, third-level, fourth-level, fifth-level systems.

3.3 Security environment of classified system

An environment that secures the classified system by a security computing environment, a security area boundary, a secure communication network, and / or a security management center.

5.1 Design framework of security technology of general classified protection

The design of security technology for the classified protection of cybersecurity includes the design of the security protection environment of all levels of systems and the design of their security interconnection, as shown in Figure 1.

The security protection environment of the system at each level is composed of the corresponding level of security computing environment, the security area boundary, the security communication network and / or the security management center. The classified system's interconnection consists of security interconnection components and a security management center across the classified system.

Chapter 6 ~ Chapter 11 of this standard put forward the corresponding design technical requirements for each part of Figure 1 (except the design requirements for the fifth-level network security protection environment).

Appendix A gives the design of access control mechanism; Appendix B gives an example of the design of a third-level system security protection environment.

In addition, Appendix C gives technical requirements for big data design.

When designing the security protection environment of classified protection of the classified system, it may, combining the system's own business requirements, further refine the classified system into different subsystems, to determine the level of each subsystem, thereby designing the security protection environment of the subsystem.

5.2 Design framework of security technology of classified protection for cloud computing

Combining the layered framework of cloud computing functions and the characteristics of cloud computing security, construct the protection technical framework of the cloud computing security design, including the cloud user layer, access layer, service layer, resource layer, hardware facility layer, management layer (cross-layer functions). One of the centers refers to the security management center; the triple protection includes a security computing environment, a security area boundary, a security communication network, as shown in Figure 2.

6.1 Design targets

The design targets of the first-level system security protection environment is to realize the autonomous access control of the classified system in accordance with GB 17859-1999 security protection requirements for the first-level system, so that the system users have the ability to protect the object it belongs to.

6.2 Design strategy

The design strategy of the first-level system security protection environment is to follow the relevant requirements in 4.1 of GB 17859-1999, based on identity authentication, to provide users and / or user groups with independent access control of files and database tables, so as to achieve isolation between he user and the data, thereby making the user have the ability of autonomous security protection; provide area boundary protection by means of packet filtering; provide data and system integrity protection by means of data verification and prevention of malicious code.

The design of the first-level system security protection environment is realized through the design of the first-level security computing environment, the security area boundary, the security communication network. Computing nodes shall be based on trusted roots for trusted verification from startup to operating system startup.

7.1 Design targets

The design target of the second-level system security protection environment is. in accordance with GB 17859-1999 for the second-level system security protection requirements, on the basis of the first-level system security protection environment, add the system security audits, object reuse and other security functions; implement the autonomous access control which uses the user as the basic granularity, so that the system has a stronger ability of autonomous security protection, ensure that the basic computing resources and applications are trusted.

7.2 Design strategy

The design strategy for the second-level system security protection environment is to follow the relevant requirements in 4.2 of GB 17859-1999, based on identity authentication, provide individual users and / or user groups with independent access control to shared files, database tables, etc.; use the packet filtering method to provide area boundary protection; by means of data verification and malicious code prevention, at the same time, by adding functions such as system security auditing and object security reuse, make users held accountable for their actions; provide the user data confidentiality and integrity protection, to enhance the security protection capabilities of the system. When the second-level system security protection environment is designed with cryptographic technology, it shall support the cryptographic algorithm approved by the national cryptographic management authority; use the cryptographic products certified by the national cryptographic management authority; follow relevant national and industry standards for cryptography.

The design of the second-level system security protection environment is realized through the design of the second-level security computing environment, the security area boundary, the security communication network, the security management center. Computing nodes shall be based on trusted roots to achieve trusted verification from booting to operating system startup, then to application startup, form an audit record of the verification results.

8.1 Design targets

The design target of the third-level system security protection environment is. in accordance with GB 17859-1999 for the third-level system security protection requirements, based on the second-level system security protection environment, by implementing the mandatory access control based on the security policy model and tags as well as the audit mechanism of the enhanced system, to make the system has the ability of protecting the sensitive resources under the control of a unified security policy; to ensure the credibility of basic computing resources and applications, thereby ensuring the credibility of key execution links.

8.2 Design strategy

The design strategy for the third-level system security protection environment is. on the basis of the second-level system security protection environment, according to the relevant requirements in 4.3 of GB 17859-1999, construct an informal security policy model to perform security marking of the subject and object, show the combination of the leveled classification and non-leveled classification of the subject and object. Based on this, follow the mandatory access control rules to achieve the access control of the subject and object.

When the third-level system security protection environment is designed with cryptographic technology, it shall support the cryptographic algorithm as approved by the national cryptographic management authority, use the cryptographic products as certified by the national cryptographic management authority, follow the relevant national and industry standards for cryptography.

The design of the third-level system security protection environment is realized through the design of the third-level security computing environment, the security area boundary, the security communication network, the security management center. Computing nodes shall be based on trusted roots to implement boot-to-OS startup, then to the trusted verification of application startup; meanwhile perform trusted verification of their execution environment at the key execution link of the application; actively resist virus intrusion behavior; form the verification result int an audit record and send it to the management center. […]