Valid

GB/T 42884-2023Information security technology—Guidelines for life cycle security management of mobile Internet applications (App) (English PDF)

信息安全技术移动互联网应用程序（App）生命周期安全管理指南

Preview PDF

This is a limited preview

Buy now to download the full PDF (21 pages)

Need quotation for your management?

Get a formal quotation for GB/T 42884-2023 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

August 6, 2023

Implementation date

March 1, 2024

Scope

GB/T 42884-2023 is the English-translated version of 信息安全技术移动互联网应用程序（App）生命周期安全管理指南.

This document gives guidance on managing the security of a mobile internet application over its life cycle: the management process for each stage of the life cycle and the process for monitoring and managing risk.

The document applies to the life cycle security management of an app's development and operation by app providers, and may be used as a reference by the managers of app distribution platforms and by the makers of mobile smart terminals.

Found what you need?

Document preview — GB/T 42884-2023

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
1 Scope
2 Normative reference documents
3 Terms and Definitions
4 Abbreviations
5 Overview
5.1 Security issues in App
5.2 App life cycle security management
6 Life cycle stage management process
6.1 Requirements Analysis Phase
6.2 Development and design stage
6.3 Test verification phase
6.4 Shelf release stage
6.5 Installation and operation phase
6.6 Update Maintenance Phase
6.7 Termination of Operations Phase
6.8 Other security support processes
7 Risk Monitoring and Management Process
7.1 Risk data management
7.2 Security vulnerability management
Appendix A (informative) Classification and description of security issues in App
A.1 Classification and description of malicious programs
A.2 Classification and description of personal information risks
A.3 Classification and description of application behavior risks
A.4 Classification and description of security vulnerabilities
Appendix B (informative) The relationship between the security issues existing in the App and the response to security management activities
Appendix C (Informative) Security Development
C.1 Program safety
C.2 Security
Reference

Foreword

This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part 1: Structure and Drafting Rules of Standardization Documents" Drafting.

1 Scope

This document provides security management of the mobile Internet application (App) life cycle stage management process and risk monitoring management process. guide.

This document is applicable to life cycle security management of App development and operation by App providers, App distribution platform managers and mobile Intelligent terminal manufacturers and other reference use.

2 Normative reference documents

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, the dated quotations For undated referenced documents, only the version corresponding to that date applies to this document; for undated referenced documents, the latest version (including all amendments) applies to this document.

GB/T 25069-2022 Information security technical terms

GB/T 28458-2020 Information security technology network security vulnerability identification and description specifications

GB/T 38674-2020 Information Security Technology Application Software Security Programming Guide

GB/T 39720-2020 Information security technology mobile intelligent terminal security technical requirements and test evaluation methods

GB/T 41391-2022 Information Security Technology Basic Requirements for Mobile Internet Applications (Apps) to Collect Personal Information

3 Terms and definitions

GB/T 25069-2022, GB/T 38674-2020, GB/T 39720-2020 and GB/T 41391-2022 and The following terms and definitions apply to this document.

3.4 An organization or individual who designs, develops or operates an App.

3.1 Smart mobile terminal

A mobile terminal that has an open system that can provide application development interfaces and can install and run third-party application software. [Source: GB/T 39720-2020,3.1]

3.2 Mobile internet application; App

Application software that runs on mobile smart terminals to provide information services to users.

Note: Including downloaded, installed and run applications and small programs, referred to as App. [Source: GB/T 41391-2022, 3.1, with modifications]

3.3 App life cycle

The process of app evolution over time from demand analysis to termination of operation.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 21 pages — is available in the English PDF.

Referenced standards

Normative references

Similar standards

GB/T 20272-2026|GB/T 20274.2-2026|GB/T 22186-2026|GB/T 24294.1-2026|GB/T 28455-2026|GB/T 31499-2026

How to Download GB/T 42884-2023

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.