GB/T 44886.2-2025Cybersecurity technology - Cybersecurity product interconnectivity - Part 2: Asset information format (English PDF)

Foreword

This document complies with the provisions of GB/T 1.1-2020 "Standardization Work Guidelines Part

1.Structure and Drafting Rules of Standardization Documents". Drafting. This document is Part 2 of GB/T 44886 "Network Security Technology - Interoperability of Network Security Products". GB/T 44886 has been... The following sections were published.

2.Asset Information Format;

3.Alarm Message Format Please note that some content in this document may involve patents. The issuing organization of this document assumes no responsibility for identifying patents. This document was proposed and is under the jurisdiction of the National Cybersecurity Standardization Technical Committee (SAC/TC260). This document was drafted by: Beijing CESI Technology Development Co., Ltd., the National Information Center, and the National Computer Network Emergency Response Technical Team/Coordination Center. Coordination Center, China Electronics Technology Standardization Institute, Institute of Information Engineering, Chinese Academy of Sciences, Third Research Institute of the Ministry of Public Security, China Electronics Technology Group Corporation The 15th Research Institute of the Group Corporation, China Information Security Evaluation Center, China Mobile Communications Group Co., Ltd., and China United Network Communications Group Co., Ltd. Limited Liability Company, Peking University, Beijing Topsec Network Security Technology Co., Ltd., Beijing NSFOCUS Technology Co., Ltd., Sangfor Technologies Inc. Limited Liability Company, Beijing Jiangmin New Technology Co., Ltd., Beijing Shengxin Network Technology Co., Ltd., Hangzhou Anheng Information Technology Co., Ltd. 360 Digital Security Technology Group Co., Ltd., Antiy Labs Group Co., Ltd., China Southern Power Grid Co., Ltd., Guangxi Electric Power State Grid Corporation of China Limited, Guangdong Power Grid Corporation of China Limited, State Grid Jiangsu Electric Power Co., Ltd., China Petrochemical Corporation Shared Services Co., Ltd. China National Petroleum Corporation Changqing Oilfield Branch, China National Petroleum Corporation Northwest Sales Branch, China Petroleum Sichuan Petrochemical Co., Ltd., Information Technology Center of China National Offshore Oil Corporation, Kunlun Digital Technology Co., Ltd. China Huaneng Group Co., Ltd., Dongfang Electric (Chengdu) Innovation Technology Development Co., Ltd., China Nuclear Seventh Research and Design Institute Co., Ltd., Huaneng Information Technology Co., Ltd., Hangzhou Deep Technology Co., Ltd., AsiaInfo Technologies (Chengdu) Co., Ltd., Qi An Xin NetSec Information Technology Co., Ltd. (Beijing) Co., Ltd. The main drafters of this document are. Yao Xiangzhen, Li Lin, Chen Yunran, Zhao Xinqiang, Lei Xiaofeng, Zhu Xuefeng, Sun Yan, Xu Yuna, Xu Kechao, and Liu Bei. Xuan Liang, An Gaofeng, Yan Guixun, Zhang Weibao, Wang Wenlei, Yao Yepeng, Xiang Yingxiao, Chen Yan, Liu Jian, Yang Jingjing, Qiu Qin, Zhou Kai, Xie Anming, Lü Zhenzhen Wen Yu, He Maogen, Sun Ling, Yan Dong, Bian Jianchao, Chen Xing, Feng Fei, Sun Keren, Wang Bingzheng, Wang Dandan, Liu Ying, Zhang Xiaolu, Zhao Xinjian, Ma Hongtao Ma Jianjun, Li Shihong, Yu Huichao, Li Xin, Wang Yingmei, Wang Lianqing, Wang Xiaohong, Pan Zhongying, Wen Ziqiang, Guo Hao, Yuan Xiaoshu, Wang Jiaqiang, Ning Lijun Liao Shuangxiao and Ding Yuzheng.

GB/T 44886 "Network Security Technology - Interoperability of Network Security Products" is proposed to consist of the following parts.

1.Framework. The purpose is to clarify the application scenarios for interoperability of network security products and propose an approach to interoperability construction.

2.Asset Information Format. The purpose is to provide an asset description for interoperability of network security products.

3.Alarm Message Format. The purpose is to effectively integrate alarm information reported by network security products and improve alarm emergency response. Efficiency.

4.Threat Information Format. The aim is to standardize the threat information sharing format for cybersecurity products and across organizations.

5.Behavioral Information Format. The purpose is to facilitate the analysis and utilization of behavioral information from cybersecurity products.

6.Functional Interfaces. The aim is to efficiently integrate network security information and promote synergy among network security product functions. Interoperability of network security technologies and network security products Part

1 Scope

GB/T 44886.2-2025 is the Chinese national standard covering describing an asset in a way every tool agrees on - the identifiers, the network and software attributes, the ownership and the criticality, which is the record everything else in a security programme hangs off. Part 2 of the series, first edition, with Part 3 on alarm information format. It was issued on 2 December 2025 and has been in force since 1 July 2026, as a first edition. The document is under the responsibility of the Standardization Administration of China. This page is published from the official record of the 2025 edition; the clause text of a standard this recent is not yet in circulation, and the figures, limits and tables it contains are those of the document itself, delivered in full with the English translation.

This document outlines the composition and description format of asset information required for interoperability of network security products. This document applies to the design, development, application, and testing of network security products.

2 Normative references

The contents of the following documents, through normative references within the text, constitute essential provisions of this document. Dated citations are not included. For references to documents, only the version corresponding to that date applies to this document; for undated references, the latest version (including all amendments) applies. This document.

GB/T 20984-2022 Information Security Technology - Information Security Risk Assessment Methods

GB/T 25069 Information Security Technical Terminology

GB/T 44886.1-2024 Network Security Technology - Interoperability of Network Security Products - Part

3 Terms and Definitions

The terms and definitions defined in GB/T 25069 and GB/T 44886.1-2024, as well as the following terms and definitions, apply to this document.

3.1 Asset information Information describing assets required to achieve interoperability of network security products. Note

1.Assets include, but are not limited to, hardware equipment, operating systems, databases, middleware, application software, business systems, etc. Note

2.Asset information includes basic information, location information, network information, and extended information.

4.Abbreviations The following abbreviations apply to this document. ID. Identity IP. Internet Protocol MAC Address. Media Access Control Address

5 Composition of Asset Information According to section

5.3.1.1 of GB/T 44886.1-2024, asset information consists of general asset information and extended asset information, as shown in Figure 1.