GOST R ISO IEC 15408-1-2012 Information technology Security techniques Evaluation criteria for IT security Part 1 Introduction and general model《信息技术 安全技术 IT安全评估标准 第1部分 导入与通用模型》.pdf

1、2014 . 1 ISO / IEC 15408-1:2009 Information technology Security techniques Evaluation criteria for IT security Part 1: Introduction and general model(IDT) / 15408-1 2012 / 15408-12012II1 - ( ), - - ( ), - ( )2 362 3 - 15 2012 . 814-4 / 15408-1:2009 - . . . 1. (ISO / IEC 15408-1:2009 Information tech

2、nology Security techniques Evaluation criteria for IT security Part 1: Introduction and general model). - , 5 / 15408-12008 1.02012 ( 8). - ( 1 - ) , -. () . , - (gost.ru) , 2014 , - - / 15408-12012III1 12 13 .23.1 , / 15408 .23.2 , ADV 63.3 , AGD 93.4 , ALC 93.5 , AVA 133.6 , ACO .134 135 .145.1 14

3、5.2 .145.3 / 15408 .155.4 / 15408 165.5 .176 176.1 .176.2 186.3 .217 .217.1 .217.2 237.3 .248 248.1 .248.2 .248.3 258.4 .268.5 269 .279.1 .279.2 289.3 / .289.4 .289.5 / .29 () 30 () .41 C () .45 D () 47 () .48 49 / 15408-12012IV / 15408 - . / 15408 , . -, - . , , , , . - , . / 15408 ( , , - ) , / -

4、. / 15408 , - . - . , / 15408 , - ., , , , , , . , , , . , - , , . / 15408 , - . , , , - . / 15408 , . / 15408 , ( ), , . , / 15408 , . / 15408, - - . :a) / 15408 , , . , , - , , , .b) , , , / 15408 - .c) / 15408 , - . / 18045.d) / 15408 - , . , , / 15408 - .e) / 15408. , - ( ) -, , . - . , , / 1540

5、8-12012V , .f) / 15408. , - , / 15408, - . , (can), (informative), (shall) - (should), , / , 2. (should) , - . . . / 15408 (should). (should): (should) , - , - , , - ( / , 2). / 15408 , , -. / 15408-12012 1 201312011 , , , . / 15408; - , / 15408; (), , , - . , . , , / 15408-2 / 15408-3, . (), , , ;

6、- . () . - , / 18045, .2 . - , . ( ). / 15408-2 . . . 2. / 15408-3 . . - . 3. / 18045 . . . 1 Information technology. Security techniques. Evaluation criteria for IT security. Part 1. Introduction and general model / 15408-1201223 . , / 15408. , / 15408 - , .3.1 , / 154083.1.1 (adverse actions): , - .3.1.2 (assets): , .3.1.3 (assignment): -.3.1.4 (assurance): , .3.1.5 (attack potential): , , - , .3.1.6 (augmentation): .3.1.7 (authentication data): , - .3.1.8 (authorised user): , - .3.1.9 (class): , .3.1.10 (coherent): . , , .3.1.11 (complete): , - . ,