GB/T 33563-2024Cybersecurity technology - Security technology requirements for wireless local area network client (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1:1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting: This document replaces GB/T 33563-2017 "Information Security Technology Wireless LAN Client Security Technical Requirements (Assessment Level

2 Compared with GB/T 33563-2017, in addition to structural adjustments and editorial changes, the main technical changes are as follows:

a) The scope of TOE has been changed (see Chapter 5 and Chapter 6 of the:2017 edition);

b) Changed the threats faced by WLAN clients to include 7 threat categories, 2 organizational security policies, and 4 assumptions (see Section

6 Chapter 7 of the:2017 edition);

c) Changed "TOE security objectives" and "Environmental security objectives", including 9 TOE security objectives and 4 environmental security objectives (See Chapter 7, Chapter 8 of the:2017 edition);

d) Changed the wireless LAN client security function requirements, including 8 categories and 33 security function requirements (see 8:1,:2017 version Chapter 9, Chapter 10);

e) Changed the wireless LAN client security requirements (see 8:2, 9:2 of the:2017 version);

f) Added "Basic Principles", including the correspondence between security issues and security objectives, security objectives and security requirements, and between components: Dependencies (see Chapter 9): Please note that some of the contents of this document may involve patents: The issuing organization of this document does not assume the responsibility for identifying patents: This document was proposed and coordinated by the National Cybersecurity Standardization Technical Committee (SAC/TC260): This document was drafted by: China Information Security Evaluation Center, Institute of Information Engineering, Chinese Academy of Sciences, Beijing Jiaotong University, CRRC Industrial Research Institute Institute Co:, Ltd:, Xi'an Xidian Jietong Wireless Network Communication Co:, Ltd:, the First Research Institute of the Ministry of Public Security, China Electronics Technology Standardization Institute Institute of Information Technology, Beijing Topsec Network Security Technology Co:, Ltd:, Sangfor Technologies Co:, Ltd:, Zhengzhou Xindajiean Information Technology Co:, Ltd: Company, Changyang Technology (Beijing) Co:, Ltd:, Shenzhen Xinrui Network Technology Co:, Ltd:, Beijing Luyuntian Network Security Technology Research Institute Co:, Ltd:, Xi'an Jiaotong University Jabil Network Technology Co:, Ltd:, Zhongfu Information Co:, Ltd:, State Grid Blockchain Technology (Beijing) Co:, Ltd:, China Cybersecurity Review Technology and Certification Center, H3C Technologies Co:, Ltd:, and China Electric Power Research Institute Co:, Ltd: The main drafters of this document are: Chen Dongqing, Zhang Liang, Han Jideng, Guo Tao, Shao Shuai, Wu Runpu, Li Meicong, Liu Qi, Fan Yuming, Wang Wei, Liu Jiqiang, Wang Jian, Tang Haichuan, Wang Junyong, Zhang Bianling, Zhu Zhenrong, Zhang Dongju, Kou Zengjie, An Gaofeng, Bao Xuhua, Ye Runguo, Ma Hongli, Han Xiude, Zhao Hua, Lai Guoqiang, He Jianfeng, Zhu Dali, Fan Wei, Mi Baoxin, Long Gang, Gao Jinping, Sun Pengke, Hou Mengyun, Yang Ke, Shen Yongbo, Wan Xiaolan, Wang Haixiang: The previous versions of this document and the documents it replaces are as follows:

---First published in:2017 as GB/T 33563-2017;

---This is the first revision: Cybersecurity Technology Wireless LAN Client Security Technical Requirements

1 Scope

GB/T 33563-2024 sets the security technical requirements for wireless LAN clients - the supplicant side of Wi-Fi, in laptops, phones, industrial terminals and embedded modules. The client is the weaker half of the association: it roams into networks it has not seen before, it stores credentials for every network it has ever joined, and it will answer a probe from anything claiming to be an access point it knows. The standard is written in the Common Criteria idiom, describing the client, then the security problem as a set of named threats - unauthorised access, security function failure, residual information exploitation, logical interface attack, network eavesdropping, network attack and undetected actions - together with the organisational security policies including cryptographic management, and the assumptions on the environment. From these it derives the security objectives and the functional and assurance requirements the client must meet, and the rationale connecting them. It replaces GB/T 33563-2017 and took effect on 1 November 2024.

This document specifies the security function requirements and security assurance requirements for wireless LAN clients, and gives the security requirements faced by wireless LAN clients: Description of the security issue: This document is applicable to the testing, evaluation and procurement of wireless LAN client products, as well as guiding the research and development of such products:

2 Normative references

The contents of the following documents constitute the essential clauses of this document through normative references in this document: For referenced documents without a date, only the version corresponding to that date applies to this document; for referenced documents without a date, the latest version (including all amendments) applies to This document: GB 15629:

11 Information technology systems - Telecommunications and information exchange - Specific requirements for local area networks and metropolitan area networks - Part

3 Terms and definitions

The following terms and definitions as defined in GB 15629:11, GB/T 18336:1-2024, GB/T 25069-2022 and the following terms and definitions apply to this document: 3:

1 Access point: AP A network access device that provides access between wireless LAN clients and wired networks and forwards frames between wireless networks and wired networks: Port equipment: 3:2 authentication server A component used for identity authentication in a wireless LAN access system: 3:

3 An executive component that enables a remote user to establish wireless communication with an accessed network using a client machine:

11 Division: Wireless LAN Media Access Control and Physical Layer Specifications

GB/T 18336:1-2024 Cybersecurity technology Information technology security assessment criteria Part 1: Introduction and general model

GB/T 18336:2-2024 Cybersecurity technology Information technology security assessment criteria Part 2: Security function requirements

GB/T 18336:3-2024 Cybersecurity technology Information technology security assessment criteria Part 3: Security assurance requirements

GB/T 25069-2022 Information Security Technical Terminology

GB/T 32915-2016 Information security technology Binary sequence randomness detection method

GB/T 39786-2021 Information security technology Basic requirements for the application of cryptography in information systems