GB/T 29766-2021Information security technology—Technical requirements and testing and evaluating approaches of website data recovery products (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" Drafting.

This document replaces GB/T 29766-2013 "Technical Requirements and Test Evaluation Methods for Information Security Technology Website Data Recovery Products", Compared with GB/T 29766-2013, in addition to structural adjustments and editorial changes, the main technical changes are as follows.

---Modified the "Terms and Definitions" chapter (see Chapter 3, Chapter 3 of the 2013 edition);

---Added the "abbreviations" chapter (see Chapter 4);

---Added the "Product Description" chapter (see Chapter 5);

---Added the requirement of "Website data tamper-proof" (see 6.1.2);

---Modified the "implementation of alarm events" requirements (see 6.1.3.1, 5.1.1.2.1 in the 2013 edition);

---Added the "alarm information" requirement (see 6.1.3.3);

---Modified the requirements of "Auditable Events" and "Audit Data Content" (see 6.1.8.1, 6.1.8.2, 5.1.1.9.1 and 5.1.1 of the 2013 edition. 9.2);

---Added the requirements of "Audit Data Storage" and "Audit Statement" (see 6.1.8.3, 6.1.8.6);

---Modified "Backup Data Protection" (see 6.1.9, 5.1.1.10 of the 2013 edition);

---Added "self-safety requirements" (see 6.2, 7.3);

---The requirement of "defense against known attacks" has been deleted (see 5.1.1.12 in the 2013 version);

---Modified the "safety assurance requirements" (see 6.3, 7.4, 5.1.2, 5.2.2 of the 2013 edition).

1 Scope

This document specifies the safety function requirements, self-safety requirements, safety assurance requirements and test evaluation methods of website data recovery products.

This document is suitable for the development, production, testing and evaluation of website data recovery products.

2 Normative references

The content of the following documents constitutes an indispensable clause of this document through normative references in the text. Among them, dated quotations Only the version corresponding to the date is applicable to this document; for undated reference documents, the latest version (including all amendments) is applicable to this document.

GB/T 18336.1 Information Technology Security Technology Information Technology Security Assessment Criteria Part 1: Introduction and General Model

GB/T 25069 Information Security Technical Terms

3 Terms and definitions

The following terms and definitions defined in GB/T 18336.1 and GB/T 25069 apply to this document.