G巳 ICS 35.040 L 80 中华人民共和国国家标准 GB/T 28448一2019 代替 GB/T 28448—2012 信息安全技术 网络安全等级保护测评要求 Information security technology一 Evaluation requirement for classified protection of cybersecurity 2019-05-10 发布 智： 严，, 刮涂层查真伪 2019-12-01 实施 国 家市场监督管 理总局 中国国家标准化管理委员会 发 布 GB/T 28448一2019 目 次 削口 ........................................................................................................................ ill 立兰 弓l言 ........................................................................................................................ N 1 范围 ..................................................................................................................... 1 2 规范性弓l用文件 ...................................................................................................... 1 3 术语和定义 ............................................................................................................ 1 4 缩略语 .................................................................................................................. 2 5 等级测评概述 ......................................................................................................... 2 5.1 5.2 6 等级测评方法 ................................................................................................... 2 单项测评和整体测评 .......................................................................................... 3 第一级测评要求 ...................................................... ................................................ 3 6.1 安全测评通用要求 ............................................................................................. 3 6.2 云计算安全测评扩展要求.................................................................................... 19 6.3 移动互联安全测评扩展要求...................................................... .....................…... 22 6.5 工业控制系统安全测评扩展要求...................................................…..................... 25 6.4 7 物联网安全测评扩展要求.................................................................................... 23 第二级测评要求................................................... ............ ....................................... 27 7.1 安全测评通用要求............................................................................................. 27 7.3 移动互联安全测评扩展要求.................................... ............................................. 72 7.5 工业控制系统安全测评扩展要求.............................. ...........................……......... … 77 7.2 7.4 8 云计算安全测评扩展要求.................................................................................... 64 物联网安全测评扩展要求.................................................................................... 75 第三级测评要求.................................................................. .................................... 81 8.1 安全测评通用要求................................................ ............................................. 81 8.3 移动互联安全测评扩展要求 ...…............................................. …..................... … 151 8.2 8.4 8.5 9 云计算安全测评扩展要求 .................................... ............................................. 138 物联网安全测评扩展要求 ................................................................................. 156 工业控制系统安全测评扩展要求 ........................................................................ 162 第四级测评要求 ................................................................................................... 167 9.1 安全测评通用要求 .......................................................................................... 167 9.2 9.3 9.4 9.5 10 11 云计算安全测评扩展要求 ..................... ............................................................ 228 移动互联安全测评扩展要求 .............................................................................. 242 物联网安全测评扩展要求 .................................... ........................ ..................... 247 工业控制系统安全测评扩展要求 .........…......................., ........................... …...... 253 第五级测评要求................................................................................................... 259 整体测评...................................................................................................... ...... 259 I GB/T 28448一2019 11.1 概述............................................................... ............................................. 259 11.2 安全控制点测评............................................................................................. 260 安全控制点间测评.................................................................................