GB/T 41268-2022Security testing methods for critical network devices—Router (English PDF)
网络关键设备安全检测方法 路由器设备
This is a limited preview
Buy now to download the full PDF (44 pages)
Need quotation for your management?
Get a formal quotation for GB/T 41268-2022 in 30 minutes.
Issued by
SAMR; SAC
Level / Type
National · Recommended
Issue date
March 9, 2022
Implementation date
October 1, 2022
Scope
GB/T 41268-2022 is the English-translated version of 网络关键设备安全检测方法 路由器设备.
GB/T 41268-2022 gives the security testing methods for the routers listed in the catalogue of critical network devices.
It sets out how each security function requirement is tested - identification, redundancy, backup, recovery and anomaly detection, the management of vulnerabilities and backdoors, the security of the pre-installed software and of its updates, the security of the default state, the resistance to common attacks, user identification and authentication, access control, log audit, communication security and data security - and the methods by which the security assurance requirements are evaluated in the three phases of design and development, production and delivery, and operation and maintenance.
It applies to the routers in the catalogue and guides their development, testing and purchase. Issued on 9 March 2022, it has applied since 1 October 2022.
Found what you need?
Document preview — GB/T 41268-2022
National Standard of the People's Republic of China
- ICS
- 35.040
- Classification
- L 80
Issued by: State Administration for Market Regulation; Standardization Administration of the PRC
Contents
- Preface
- 1 Scope
- 2 Normative references
- 3 Terms and Definitions
- 4 Abbreviations
- 5 Test environment
- 6 Safety function requirement detection method
- 6.1 Device Identification Security
- 6.2 Redundancy, Backup Recovery and Anomaly Detection
- 6.3 Vulnerability and Defect Management Security
- 6.4 Pre-installed software startup and update security
- 6.5 Default state security
- 6.6 Ability to resist common attacks
- 6.7 User Identification and Authentication
- 6.8 Access Control Security
- 6.9 Log Auditing Security
- 6.10 Communication Security
- 6.11 Data Security
- 7 Methods of assessing security requirements
- 7.1 Design and Development
- 7.2 Production and Delivery
- 7.3 Operation and Maintenance
- Reference
Foreword
This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" drafted.
GB 40050-2021 "General Requirements for Network Critical Equipment Security" and GB/T 41269-2022 "Security Technical Requirements for Network Critical Equipment" Router equipment security standard system for key equipment.
1 Scope
This document provides information on the identification security, redundancy, backup recovery and anomaly detection, loopholes and deficiencies of router equipment included in the network key equipment.
Trap management, pre-installed software startup and update security, default state security, ability to resist common attacks, user identification and authentication security, access The detection method of the security function requirements of control security, log audit security, communication security, data security, etc., and the design of the above equipment and assessment methods for safety assurance requirements in the three phases of development, production and delivery, and operation and maintenance.
This document is applicable to router equipment listed in the network key equipment catalogue, and can also provide basis for network operators to purchase router equipment.
According to the data, it is also suitable for guiding the research and development and testing of router equipment.
2 Normative references
The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document.
GB/T 25069 Information Security Technical Terminology
GB 40050-2021 General requirements for network critical equipment security
3 Terms and Definitions
The terms and definitions defined in GB/T 25069 and the following apply to this document.
3.1 Router
A network device used to establish and control the flow of data between different networks.
Note: Routers select paths or routes based on routing protocol mechanisms and algorithms to establish and control data flow between networks. The network itself can be based on different the same network protocol.
4 Abbreviations
The following abbreviations apply to this document. ACL. Access Control List (AccessControlList)
......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 44 pages — is available in the English PDF.
Referenced standards
Similar standards
How to Download GB/T 41268-2022
- 1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
- 2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
- 3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
- 4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.
Related Standards
GB 40050-2021 — Critical network devices security common requirements
GB/T 25069-2022 — Information security techniques—Terminology
GB/T 7251.4-2026 — Low-voltage switchgear and controlgear assemblies - Part 4: Particular requirements for assemblies for construction sites (ACS)
Secure payment via Stripe
Payments accepted
GB/T 41268-2022
$530.00