首页 馆藏资源 舆情信息 标准服务 科研活动 关于我们
现行 ISO/IEC 15408-1:2022
到馆阅读
收藏跟踪
购买正版
Information security, cybersecurity and privacy protection — Evaluation criteria for IT security — Part 1: Introduction and general model 信息安全、网络安全和隐私保护.IT安全评估标准.第1部分:简介和一般模型
发布日期: 2022-08-09
本文件确立了IT安全评估的一般概念和原则,并规定了标准各部分给出的一般评估模型,整体而言,该模型将用作评估IT产品安全属性的基础。 本文件概述了ISO/IEC 15408系列的所有部分。它描述了ISO/IEC?的各个部分15408系列;定义标准所有部分中使用的术语和缩写;确立评估目标(TOE)的核心概念; 描述了评估上下文,并描述了评估标准所针对的受众。介绍了评估IT产品所需的基本安全概念。 本文件介绍: —?保护配置文件(PP)、PP模块、PP配置、包、安全目标(ST)和一致性类型的关键概念; —?整个模型中安全组件的组织描述; —?ISO/IEC中给出的功能和保证组件的各种操作15408?2和ISO/IEC15408?3可通过使用允许的操作进行定制; —?ISO/IEC?中给出的评估方法的一般信息18045; —?ISO/IEC应用指南15408?为了制定ISO/IEC衍生的评估方法(EM)和评估活动(EA)18045; —?ISO/IEC中定义的预定义评估保证级别(EAL)的一般信息15408?5. —?有关评估计划范围的信息。
This document establishes the general concepts and principles of IT security evaluation and specifies the general model of evaluation given by various parts of the standard which in its entirety is meant to be used as the basis for evaluation of security properties of IT products. This document provides an overview of all parts of the ISO/IEC 15408 series. It describes the various parts of the ISO/IEC?15408 series; defines the terms and abbreviations to be used in all parts of the standard; establishes the core concept of a Target of Evaluation (TOE); describes the evaluation context and describes the audience to which the evaluation criteria is addressed. An introduction to the basic security concepts necessary for evaluation of IT products is given. This document introduces: —?the key concepts of Protection Profiles (PP), PP-Modules, PP-Configurations, packages, Security Targets (ST), and conformance types; —?a description of the organization of security components throughout the model; —?the various operations by which the functional and assurance components given in ISO/IEC?15408?2 and ISO/IEC?15408?3 can be tailored through the use of permitted operations; —?general information about the evaluation methods given in ISO/IEC?18045; —?guidance for the application of ISO/IEC?15408?4 in order to develop evaluation methods (EM) and evaluation activities (EA) derived from ISO/IEC?18045; —?general information about the pre-defined Evaluation Assurance Levels (EALs) defined in ISO/IEC?15408?5; —?information in regard to the scope of evaluation schemes.
分类信息
发布单位或类别: 国际组织-国际标准化组织
关联关系
研制信息
归口单位: ISO/IEC JTC 1/SC 27
相似标准/计划/法规
现行
BS ISO/IEC 27014-2020
Information security, cybersecurity and privacy protection. Governance of information security
信息安全、网络安全和隐私保护 信息安全治理
2020-12-17
现行
ISO/IEC 27014-2020
Information security, cybersecurity and privacy protection - Governance of information security
信息安全、网络安全和隐私保护——信息安全治理
2020-12-15
现行
ISO/IEC 27002-2022
Information security, cybersecurity and privacy protection - Information security controls
信息安全、网络安全和隐私保护-信息安全控制
2022-02-15
现行
ISO/IEC 27014-2020
Information security, cybersecurity and privacy protection — Governance of information security
信息安全、网络安全与隐私保护——信息安全治理
2020-12-15
现行
ISO/IEC 27002-2022
Information security, cybersecurity and privacy protection — Information security controls
信息安全、网络安全和隐私保护-信息安全控制
2022-02-15
现行
BS ISO/IEC 24745-2022
Information security, cybersecurity and privacy protection. Biometric information protection
信息安全、网络安全和隐私保护 生物特征信息保护
2022-03-09
现行
ISO/IEC 24745-2022
Information security, cybersecurity and privacy protection - Biometric information protection
信息安全、网络安全和隐私保护-生物特征信息保护
2022-02-08
现行
ISO/IEC 24745-2022
Information security, cybersecurity and privacy protection — Biometric information protection
信息安全、网络安全和隐私保护-生物特征信息保护
2022-02-08
现行
GOST ISO/IEC 27014-2021
Информационные технологии. Информационная безопасность, кибербезопасность и защита конфиденциальности. Руководство деятельностью по обеспечению информационной безопасности
信息技术 信息安全、网络安全和隐私保护 信息安全治理
现行
ISO/IEC 27001-2022
Information security, cybersecurity and privacy protection - Information security management systems - Requirements
信息安全、网络安全和隐私保护.信息安全管理系统.要求
2022-10-25
现行
ISO/IEC 27005-2022
Information security, cybersecurity and privacy protection - Guidance on managing information security risks
信息安全、网络安全和隐私保护.信息安全风险管理指南
2022-10-25
现行
ISO/IEC 27001-2022
Information security, cybersecurity and privacy protection — Information security management systems — Requirements
信息安全、网络安全和隐私保护.信息安全管理系统.要求
2022-10-25
现行
ISO/IEC 27005-2022
Information security, cybersecurity and privacy protection — Guidance on managing information security risks
信息安全、网络安全和隐私保护.信息安全风险管理指南
2022-10-25
现行
ISO/IEC 19790-2025
Information security, cybersecurity and privacy protection — Security requirements for cryptographic modules
信息安全、网络安全和隐私保护-密码模块的安全要求
2025-02-26
现行
BS EN ISO 27007-2022
Information security, cybersecurity and privacy protection. Guidelines for information security management systems auditing
信息安全、网络安全和隐私保护 信息安全管理系统审核指南
2022-06-10
现行
ISO/IEC 27007-2020
Information security, cybersecurity and privacy protection - Guidelines for information security management systems auditing
信息安全 网络安全和隐私保护.信息安全管理系统审计指南
2020-01-21
现行
ISO/IEC 27019-2024
Information security, cybersecurity and privacy protection - Information security controls for the energy utility industry
信息安全、网络安全和隐私保护-能源公用事业行业的信息安全控制
2024-10-18
现行
ISO/IEC 27019-2024
Information security, cybersecurity and privacy protection — Information security controls for the energy utility industry
信息安全、网络安全和隐私保护-能源公用事业行业的信息安全控制
2024-10-18
现行
ISO/IEC 27007-2020
Information security, cybersecurity and privacy protection — Guidelines for information security management systems auditing
信息安全、网络安全和隐私保护.信息安全管理系统审计指南
2020-01-21
现行
ISO/IEC 27556-2022
Information security, cybersecurity and privacy protection - User-centric privacy preferences management framework
信息安全、网络安全和隐私保护-以用户为中心的隐私偏好管理框架
2022-10-10