论文部分内容阅读
中国国家信息安全测评认证中心是国家权威的信息技术安全测试、评估和认证机构,该中心所属的测试实验室可以按要求对信息安全产品(系统)进行多方面的测试,测试范围包括:功能、性能、安全性、协议一致性、物理特性、强度分析和脆弱性分析等。测试实验室所生成的测试报告,是评估和认证工作的主要信息来源;评估结果作为认证的技术依据,完成产品(系统)的认证工作。中心的测试、评估与认证工作的整个生命期都是在严格的质量管理和监督下进行的。产品的测试和评估可以由任何经过认可的分中心(实验室)进行。为保证各种不同测试实体所产生的结果的一致性,测试工作应严格按《信息技术安全性评估准则》及产品(系统)的相关准则进行。为得到客观、公正、合理的认证结果,认证工作只能由中国国家信息安全测评认证中心的认证部门完成。
China National Center for Information Security Evaluation and Certification Center is a state authority of information technology security testing, assessment and certification bodies, the center belongs to the test laboratory on the information security products (systems) for a wide range of tests, the scope of the test include: function, Performance, Security, Protocol Consistency, Physical Properties, Strength Analysis and Vulnerability Analysis. The test report generated by the testing laboratory is the main source of information for the evaluation and certification work. The evaluation result serves as the technical basis for the certification and completes the certification of the product (system). The entire life of the testing, evaluation and certification of the center is carried out under strict quality control and supervision. Product testing and evaluation can be performed by any approved sub-center (lab). In order to ensure the consistency of the results produced by different test entities, the testing shall be carried out in strict accordance with the Guidelines for the Evaluation of Information Technology Security and the Guidelines for Products (Systems). In order to obtain objective, fair and reasonable certification results, the certification work can only be completed by the certification department of China National Information Security Evaluation and Certification Center.