信息安全保障1.ppt

Size: px

Start display at page:

Download "信息安全保障1.ppt"

底菀缪
9 years ago
Views:

3 ComSEC) (CompSEC) IT (ITSEC) IA)

4 Shannon Shannon DES DES Diffie Diffie Hellman Hellman New Directions in New Directions in Cryptography Cryptography

5 TCB TCB TCSEC TCSEC D C1 C1 C2 C2 B1 B1 B2 B2 B3 B3 A1 A1 TNI TNI TDI TDI rainbow rainbow

6 PKI PKIVPN CC ISO GB/T 18336

9 GB/T : ISO : a. b.

10 Application layer Representation layer Session layer Transport layer Network layer Link layer Physical layer enciperment Data integrity Access control Route control Digital signature Data Exchange Traffic Padding notarization authentication Access control Data integrity Data confidentiality Non-repudiation Trusted functionality Security Label Detection Security Audit Trail Security Restoration

Exchange Traffic Padding notarization authentication Access control Data integrity Data

11 OSI OSI

12 ISO

13 --CC GB idt ISO 15408

14 (CC) V 1.0, 1998 V ISO ITSEC FC PP.

15 CC IT / IT CC

18 TOE(Target of Evaluation) PP(Protection Profile) ST(Security Target) EAL(Evaluation Assurance Level)

19 TOE

20 PP : Smart Card PP, Firewall PP

21 PP PP 12 PP 2 TOE TOE TOE 42 5 IT 51 TOE 52 TOE 53 IT IT PP TOE CC CC

22 ST / IT : Firewall ST

23 1.1 ST 1.2 ST ST 1.3 CC 2 TOE TOE TOE 42 5 IT 51 TOE 52 TOE IT 53 IT 6 TOE 61 TOE PP 72 PP 73 PP TOE ST TOE ST TOE CC CC IT IT IT

24 - / - -

25 / FDP FDP FDP_ACC FDP_ACC FDP_ACC.1) PP/ST/

26 Family Family PP/ST/

27 CC / PP ST

30 Family Family

31 11

33 FAU

38 CM ACM CM CM ADO ADV TSF AGD ALC ATE AVA TOE ACM_AUT ACM_CAP ACM_SCP ADO_DEL ADO_IGS ADV_FSP ADV_HLD ADV_IMP ADV_INT ADV_LLD ADV_RCR ADV_SPM AGD_ADM AGD_USR ALC_DVS ALC_FLR ALC_LCD ALC_TAT ATE_COV ATE_DPT ATE_FUN ATE_IND AVA_CCA AVA_MSU AVA_SOF AVA_VLA

39 EAL1 EAL2 EAL3 EAL4 EAL5 EAL6 EAL7

40 EAL E AL EAL1 EAL2 EAL3 EAL4 EAL5 EAL6 EAL7

41 C1 C2 C3 Cn (CC PART 2) (CC PART 3) Family C1 C2 C3 Cn Family C1 C2 C3 Cn C1 C2 C3 Cn C1 C2 C3 Cn C1 C2 C3 Cn PPST n CC CC TOE / CC CC

43 via TSP via TSP INTERNET Via TSP 1 2 Via TSP

44 --

45 - SSE-CMM ISSE

46 Engineering Engineering Assurance Assurance Risk Risk

47 PA04 PA04 PA05 PA05 PA03 PA03 PA02 PA02

48 PA10 PA10 PA08 PA08 PA07 PA07 PA09 PA09 PA01 PA01 SSE-CMM CMM

49 PA11 PA11 PA06 PA06 PA PA SSE-CMM CMM

55 ( ) 5.

56 P,D),

58 -- PDR PPDR APPDRR

59 PDR Protection: (DACL) (MACL) (Security Label)

60 PDR Detection:

61 PDR Reaction:

62 PDR)

64 Fred Cohen BUG

66 GB idt ISO/IEC BS 7799, ISO/IEC SSE-CMM

67 / /

68 GB idt ISO/IEC 15408

72 - / / / / / /

73 -

74 GB/T idt ISO/IEC GB/T idt ISO/IEC PP PP PP PP PP PP PP PP ISO/IEC CEM ISO/IEC CEM ISPP ISPP /

75 GB GB idt idtiso/iec IATF IATF BS BS 7799, 7799, ISO/IEC ISO/IEC ISO/IEC ISO/IEC 15443, 15443, COBIT COBIT ISSE ISSE SSE-CMM SSE-CMM DITSCAP, DITSCAP,

76 - PBX (Internet) Internet VPN PKI

77 -

78 -

79 I II B B B M B M / III B M H IV B H H V M H H

80 T1 T2 T3 T4 T5 T6 T7

81 SAL1 SAL1 SAL1 SAL2 SAL2 SAL2 SAL1 SAL1 SAL1 SAL2 SAL3 SAL3 SAL1 SAL2 SAL2 SAL3 SAL3 SAL4 SAL2 SAL3 SAL4 SAL4 SAL4 SAL5

82 + EAL EAL + + XX ISPP ISPP XX ISST ISST

84 ISPP ISPP ISPP ISPP TOE TOE TOE TOE ISPP ISPP ISPP ISPP TOE ISPP ISPP ISPP ISPP TOE TOE TOE TOE ISPP ISPP ISPP ISPP TOE

85 ISST ISST ISST ISST TOE TOE ISPP ISPP ISST ISST TOE IT TOE TOE TOE TOE TOE ISST ISST ISST ISST TOE TOE ISPP ISPP ISST ISST TOE IT TOE TOE TOE TOE TOE TOE TOE TOE

88 ?,

89 --CIA

90 CIA--,,,,,,

91 MAC DAC BLP Chinese Wall RBAC Biba Clark-Wilson the Chinese Wall Policy is a mandatory access control policy for stock market analysts. This organizational policy is legally binding in the United Kingdom stock exchange.

94 Usual notation Knowledge logic BAN Process theory CSP,FDR, Casper Spi-calculus Petri nets Strands MSR Inductive methods Temporal logic Automata NRL Prot. Analizer CAPSL Murφ

96 UMLsec

97 ,,

99 , Confidence CC C&A Assurance

100 Complexity Composition&Decomposition Security property System&Security Modelling.

101 ,

102

信息安全保障参考文件

信息安全保障参考文件注册信息安全专业人员 (CISP) 知识体系大纲版本 :2.0 中国信息安全测评中心版权 2010 中国信息安全测评中心中国信息安全测评中心目录目录...1 前言...4 第 1 章注册信息安全专业人员 (CISP) 知识体系概述...5 1.1 CISP 资质认