Valid

GB/T 44886.3-2025Cybersecurity technology - Cybersecurity product interconnectivity - Part 3: Alarm information format (English PDF)

网络安全技术　网络安全产品互联互通　第3部分：告警信息格式

Preview PDF

This is a limited preview

Buy now to download the full PDF (19 pages)

Need quotation for your management?

Get a formal quotation for GB/T 44886.3-2025 in 30 minutes.

Issued by

SAMR; SAC

Level / Type

National · Recommended

Issue date

December 2, 2025

Implementation date

July 1, 2026

Scope

GB/T 44886.3-2025 is the English-translated version of 网络安全技术　网络安全产品互联互通　第3部分：告警信息格式.

GB/T 44886.3-2025 is the Chinese standard "Cybersecurity technology - Cybersecurity product interconnectivity - Part 3: Alarm information format". Its scope clause reads: This document provides the alarm classification and alarm information description format when network security products are interconnected.

This document applies to the design, development, application, and testing of network security product interoperability. Its clauses include terms and definitions; abbreviations.

Found what you need?

Document preview — GB/T 44886.3-2025

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Issued by: State Administration for Market Regulation; Standardization Administration of the PRC

Preface
Introduction
1.Scope
2 Normative References
3.Terms and Definitions
4.Abbreviations
5 Alarm Classification
5.1 Overview
5.2 Malicious Program Alert
5.3 Network Attack Alert
5.4 Data Security Alerts
5.5 Abnormal Behavior Alarm
5.6 Other alarms
6.Alarm message format
6.1 Overview
6.2 Field Types
6.3 General Alarm Information
6.4 Alarm-Specific Information
6.4.1 Malicious Program Alert
6.4.2 Network Attack Alerts
6.4.3 Data Security Alerts
6.4.4 Abnormal Behavior Alarm
6.4.5 Other alarms
Appendix A (Informative) Alarm Message Format
Appendix B (Informative) Classification Code 13 for Interoperability Alarm Information of Network Security Products

1 Scope

This document provides the alarm classification and alarm information description format when network security products are interconnected.

This document applies to the design, development, application, and testing of network security product interoperability.

2 Normative references

The contents of the following documents, through normative references within the text, constitute essential provisions of this document. Dated citations are not included.

For references to documents, only the version corresponding to that date applies to this document; for undated references, the latest version (including all amendments) applies.

This document.

GB/T 25069 Information Security Technical Terminology

3 Terms and Definitions

The terms and definitions defined in GB/T 25069 and the following terms and definitions apply to this document.

3.1

By unifying network security information descriptions and functional interface definitions, information perceived or generated by network security products can be effectively shared, enabling collaborative efforts.

Similar to the functions of network security products, it supports applications such as monitoring and early warning, information sharing, emergency response, and situational awareness, thereby enhancing network security protection capabilities.

A mechanism to improve the efficiency of handling cybersecurity incidents.

[Source. GB/T 44886.1-2024, 3.2]

3.2 Alarm information

Network security products automatically perform rule matching, merging, and analysis on the collected network security information according to predefined rules.

The generated warning message.

4 Abbreviations

IP. Internet Protocol

GB 46864 | GB/T 43696 | GB/T 43779 | GB/T 44886.5 | GB/T 44886.4 | GB/T 44886.2 | […]

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 19 pages — is available in the English PDF.

Referenced standards

Normative references

GB/T 25069Information security techniques—Terminology

How to Download GB/T 44886.3-2025

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.