1、 1 ISO/IEC TR 15443-1:2005Information technology Security techniques A framework for IT security assurance Part 1: Overview and framework(IDT) 545812011/ISO/IEC/TR15443-1:2005 27 2002 . 184- , 1.02004 . 1 - ( ), ( ) - , 42 3623 1 2011 . 689-4 / 15443-1:2005 . . - . 1. (ISO/IEC TR 15443-1:2005 Inform
2、ation technology Securitytechniques A framework for IT security assurance Part 1: Overview and framework)5 - , - . () . - , , 2012 , - - II 5458120111 11.1 11.2 .11.3 11.4 11.5 12 13 54 .54.1 .54.2 64.3 64.4 .74.5 .74.6 . 74.7 84.8 .84.9 .94.10 .94.11 .95 .105.1 115.2 .115.3 .125.4 .125.5 135.6 .136
3、 146.1 .146.2 .146.3 .156.4 .166.5 176.6 .186.7 .19 20 545812011/ISO/IEC/TP 15443-1:2005III / 1/ 27 1994 - - () 27 (, 21 -, -, , -). 1996 , . / 15443 - . / 15443 - - ( ) , . / 15443 - , , - , -./ 15443 :) ;b) , ;c) , ;d) ( ) - ;) , ;f) ;g) , ./ 15443 :- 1. ; - . 2 3/ 5443. 1 , , - , (, 9000,SSE-CMM
4、/ 21827), / 15408-3) -;- 2. ; - 1. - . ;- 3. ; . (), ()() , . - - . , . / 15443 , - , , / 15443, - . / 15443 , (CASCO) - (, 2 /), / 15443 - .IV 545812011/ISO/IEC/TP 15443-1:2005 1 Information technology. Security techniques. A framework for IT security assurance. Part 1. Overview and framework 2012
5、07011 1.1 , .1.2 -, , - .1.3 / 15443 , - .1.4 , , . , , .1.5 , 4.3 .2 : -, , . / 15443 , - . , - 13 / 15408 9000. -, / 15443. , , - .1 545812011/ISO/IEC/TR 15443-1:20052.1 (accreditation): , , :a) - . AGCA;b) , , , 2 / c) , .2.2 (approach): (), .2.3 (assessment): - () -.2.4 (assurance): - , .) , ./
6、15408-12.5 (assurance approach): - .2.6 (assurance argument): , , , .2.7 (assurance assessment): - , ( ).2.8 (assurance authority): , (, , , , ), - , . , , .2.9 (assurance evidence): - ( ), - .2.10 (assurance level): , -, .1 .2 , .2.11 (assurance method): - .2.12 (assurance property): - , .2.13 (assurance result): - , - -.2.14 (assurance scheme): - , .) - , / 15408./ 15408-12 545812011/ISO/IEC/TP 15443-1:20052.15 (assurance stage): , . - , .2.16 (assurance evidence): , - , , () .2.17 (certification): - . . 2 /a) -
