Valid

GB/T 35281-2017Information security technology - Security technique requirements for application servers in mobile Internet (English PDF)

信息安全技术 移动互联网应用服务器安全技术要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (15 pages)

Need quotation for your management?

Get a formal quotation for GB/T 35281-2017 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

December 29, 2017

Implementation date

July 1, 2018

Scope

GB/T 35281-2017 is the English-translated version of 信息安全技术 移动互联网应用服务器安全技术要求.

GB/T 35281-2017 is the Chinese standard "Information security technology - Security technique requirements for application servers in mobile Internet".

Its scope clause reads: This standard specifies the mobile Internet application server security technology requirements, including data security, business security, system security, equipment security Full, protocol security and operation and maintenance security.

This standard applies to support carrying various types of mobile Internet applications, computer systems can be used to guide the mobile Internet application services Development, deployment, management and maintenance and test evaluation, but also for related products, testing and services. Its clauses include terms and definitions, abbreviations.

Found what you need?

Document preview — GB/T 35281-2017

National Standard of the People's Republic of China

ICS
35.040
Classification
L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Contents

  • Preface
  • Introduction
  • 1 Scope
  • 2 Normative references
  • 3 Terms and Definitions, Abbreviations
  • 4 asset classification
  • 4.1 Equipment Assets
  • 4.2 System Assets
  • 4.3 Business assets
  • 4.4 User Data Assets
  • 5 Security Framework
  • 6 Data Security
  • 6.1 Data self-safety
  • 6.2 Data Protection Security
  • 7 Business Security
  • 7.1 Business Security
  • 7.2 General Business Security
  • 7.3 Specific Business Security
  • 8 system security
  • 8.1 Operating System Security
  • 8.2 middleware security
  • 8.3 Database Security
  • 10 protocol security
  • 10.1 standard protocol security
  • 10.2 Private Protocol Security
  • 11 operation and maintenance safety
  • 11.1 Security Configuration
  • 11.2 Safety Monitoring
  • 11.3 Security Audit
  • 11.4 Malicious Code Protection
  • 11.5 Backup and Recovery
  • Appendix A (Informative) Security Risk Analysis

1 Scope

This standard specifies the mobile Internet application server security technology requirements, including data security, business security, system security, equipment security

Full, protocol security and operation and maintenance security.

This standard applies to support carrying various types of mobile Internet applications, computer systems can be used to guide the mobile Internet application services

Development, deployment, management and maintenance and test evaluation, but also for related products, testing and services.

2 Normative references

The following documents for the application of this document is essential. For dated references, only the dated version applies to this article

Pieces. For undated references, the latest edition (including all amendments) applies to this document.

Information security technology Information systems - General requirements for safety technology GB/T 20271-2006

Information security technology Operating system security technology requirements

Information security technology Server security technology requirements

Information technology - Security terminology

Information security technology Cloud computing service security capability requirements

JR/T 0095-2012 China Financial Mobile Payment Application Security Specification

3 Terms and Definitions, Abbreviations

3.1 Terms and definitions

GB/T 25069-2010 defined and the following terms and definitions apply to this document.

3.1.1 Mobile internet

Users use mobile terminals (including mobile phones, netbooks, tablets, smartbooks, etc.) to obtain mobile communication network services through the mobile network

And Internet service open basic telecommunication network.

3.1.2 Mobile internet application server

A computer system for providing mobile Internet services to mobile terminals consists of a supporting system (eg hardware, operating system, middleware, database management

Management system, WEB services, etc.) and business applications.

3.1.3 Mobile smart terminal

Access to the mobile communications network, with an open operating system that provides an application development interface and the ability to install and run applications

Piece of mobile terminal.

3.2 Abbreviations

The following abbreviations apply to this document.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 15 pages — is available in the English PDF.

Referenced standards

Similar standards

How to Download GB/T 35281-2017

  1. 1

    Add to cart

    Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.

  2. 2

    Checkout

    Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).

  3. 3

    Instant delivery (0–9 sec)

    Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.

  4. 4

    Invoice included

    A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.

Related Standards

English PDF
15 pages
Instant delivery (0–9 sec)
Invoice included
View Cart

Secure payment via Stripe

Payments accepted

VisaMastercardAmerican ExpressApple PayGoogle PayStripe

GB/T 35281-2017

$205.00