{"id":700,"date":"2023-08-25T13:36:03","date_gmt":"2023-08-25T11:36:03","guid":{"rendered":"http:\/\/10.0.1.197\/?page_id=700"},"modified":"2024-09-12T08:25:43","modified_gmt":"2024-09-12T06:25:43","slug":"it-evaluation-assessment","status":"publish","type":"page","link":"http:\/\/192.168.0.78\/services\/it-evaluation-assessment\/","title":{"rendered":"IT\u8bc4\u4f30"},"content":{"rendered":"\n
\n
\n
\n
\"\"<\/figure>\n<\/div>\n\n\n\n
\n
\n
\n

\u670d\u52a1\u9488\u5bf9\u4e8e …<\/p>\n\n\n\n

IT\u8bc4\u4f30<\/h1>\n\n\n\n

\u9488\u5bf9\u5546\u7528\u73b0\u8d27\uff08COTS\uff09\u786c\u4ef6\u548c\u8f6f\u4ef6\u4ea7\u54c1\u4ee5\u53ca\u7ec4\u7ec7\u5b89\u5168\u8fdb\u884c\u57fa\u4e8e\u6807\u51c6\u7684\u8bc4\u4f30\uff0c\u662f atsec\u7684\u6838\u5fc3\u4f18\u52bf\u3002<\/p>\n<\/div>\n\n\n\n

\n
\u8054\u7cfb\u6211\u4eec<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
\n
\n
\n
\n
\n

\u901a\u7528\u8bc4\u4f30\u51c6\u5219\uff08Common Criteria\uff09\u8bc4\u4f30<\/h3>\n\n\n\n

\u901a\u7528\u8bc4\u4f30\u51c6\u5219 (CC)\uff0c\u53c8\u79f0ISO\/IEC 15408\uff0c\u662f\u7528\u4e8e\u89c4\u5b9a\u548c\u8bc4\u4f30 IT \u4ea7\u54c1\u5b89\u5168\u6027\u7684\u56fd\u9645\u516c\u8ba4\u6807\u51c6\u3002\u4f5c\u4e3a\u4e3a\u6570\u4e0d\u591a\u7684\u83b7\u5f97\u7ecf\u8fc7\u6388\u6743\u4e14\u5177\u6709\u8d44\u8d28\u7684\u901a\u7528\u8bc4\u4f30\u51c6\u5219\u5b9e\u9a8c\u5ba4\u4e4b\u4e00\uff0catsec \u63d0\u4f9b\u5168\u65b9\u4f4d\u670d\u52a1\uff0c\u6ee1\u8db3\u60a8\u89c4\u5212\u548c\u8fdb\u884cCommon Criteria\u8bc4\u4f30\u7684\u9700\u6c42\u3002<\/a><\/p>\n<\/div>\n\n\n\n

\n
\n

\u9605\u8bfb\u66f4\u591a<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

\u5b89\u5168\u5185\u5bb9\u81ea\u52a8\u5316\u534f\u8bae (SCAP)<\/h3>\n\n\n\n

\u4fe1\u606f\u5b89\u5168\u81ea\u52a8\u5316\u8ba1\u5212\uff08ISAP\uff09\u662f\u7f8e\u56fd\u653f\u5e9c\u4e3a\u5b9e\u73b0\u6280\u672f\u5b89\u5168\u64cd\u4f5c\u7684\u81ea\u52a8\u5316\u548c\u6807\u51c6\u5316\u800c\u53d1\u8d77\u7684\u4e00\u9879\u8ba1\u5212\u3002atsec\u7f8e\u56fd\u901a\u8fc7\u5176\u8ba4\u53ef\u7684\u5bc6\u7801\u5b89\u5168\u6d4b\u8bd5\uff08CST\uff09\u5b9e\u9a8c\u5ba4\uff08NVLAP\u5b9e\u9a8c\u5ba4\u4ee3\u7801#200658-0\uff09\u63d0\u4f9bSCAP\u57f9\u8bad\u3001\u8bc4\u4f30\u548c\u6d4b\u8bd5\u670d\u52a1\u3002<\/p>\n<\/div>\n\n\n\n

\n
\n

\u9605\u8bfb\u66f4\u591a<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n
\n

\u5f00\u653e\u53ef\u4fe1\u6280\u672f\u63d0\u4f9b\u5546\u6807\u51c6<\/h3>\n\n\n\n

\u5f00\u653e\u53ef\u4fe1\u6280\u672f\u63d0\u4f9b\u5546\u6807\u51c6\uff08O-TTPS\uff09\u662f\u7531The Open Group\u7ba1\u7406\u7684\u4e00\u9879\u5408\u4f5c\u6027\u5021\u8bae\uff0c\u65e8\u5728\u9632\u6b62COTS\u4fe1\u606f\u548c\u901a\u4fe1\u6280\u672f\u5168\u7403\u4f9b\u5e94\u94fe\u4e2d\u7684\u6c61\u67d3\u548c\u5047\u5192\u3002atsec\u81eaO-TTPS\u6210\u7acb\u4e4b\u521d\u5c31\u53c2\u4e0e\u4e86\u5176\u5f00\u53d1\uff0c\u5e76\u63d0\u4f9b\u57f9\u8bad\u548c\u8bc4\u4f30\u670d\u52a1\u3002<\/p>\n<\/div>\n\n\n\n

\n
\n

\u9605\u8bfb\u66f4\u591a<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

\u533b\u7597\u8bbe\u5907 IEEE 2621<\/h3>\n\n\n\n

IEEE \u533b\u7597\u8bbe\u5907\u5b89\u5168\u8ba4\u8bc1\u4f53\u7cfb\u7531 IEEE 2621 \u5408\u683c\u8bc4\u5b9a\u59d4\u5458\u4f1a (CAC) \u5236\u5b9a\uff0c\u65e8\u5728\u4e3a\u591a\u79cd\u7c7b\u578b\u7684\u65e0\u7ebf\u7cd6\u5c3f\u75c5\u8bbe\u5907\u63d0\u4f9b\u8ba4\u8bc1\u3002atsec \u662f IEEE \u6388\u6743\u5b9e\u9a8c\u5ba4\uff0c\u53ef\u4ee5\u63d0\u4f9b\u57fa\u7840\u589e\u5f3a\uff08Basic-Enhanced\uff09\u548c\u4e2d\u7b49\u4fdd\u969c\uff08Moderate Assurance\uff09\u5305\u7684\u8bbe\u5907\u8bc4\u4f30\u3002<\/p>\n<\/div>\n\n\n\n

\n
\n

\u9605\u8bfb\u66f4\u591a<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n
\n
\n
\n

\u60a8\u7684\u8bc4\u4f30\u5408\u4f5c\u4f19\u4f34<\/h3>\n\n\n\n

atsec \u4fe1\u606f\u5b89\u5168\u5728\u5b89\u5168\u8bc4\u4f30\u65b9\u9762\u62e5\u6709 20 \u591a\u5e74\u7684\u7ecf\u9a8c\uff0c\u771f\u631a\u5730\u5e2e\u52a9\u60a8\u786e\u4fdd\u60a8\u7684 COTS \u786c\u4ef6\u3001\u8f6f\u4ef6\u548c\u7ec4\u7ec7\u5b89\u5168\u5df2\u51c6\u5907\u597d\u8fdb\u884c\u8ba4\u8bc1\u3002atsec \u63d0\u4f9b\u7684\u5173\u952e IT \u8bc4\u4f30\u548c\u8bc4\u4f30\u670d\u52a1\u5305\u62ec\u901a\u7528\u8bc4\u4f30\u51c6\u5219\uff08Common Criteria\uff0cISO\/IEC 15408\uff09\u8bc4\u4f30\u3001\u5b89\u5168\u5185\u5bb9\u81ea\u52a8\u5316\u534f\u8bae (SCAP) \u6d4b\u8bd5\u3001\u5f00\u653e\u53ef\u4fe1\u6280\u672f\u63d0\u4f9b\u5546\u6807\u51c6 (O-TTPS) \u8bc4\u4f30\u4ee5\u53ca\u533b\u7597\u8bbe\u5907\u7f51\u7edc\u5b89\u5168\u7684 IEEE 2621 \u8ba4\u8bc1\u3002<\/p>\n\n\n\n

<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n
\n
\n
\"\"<\/figure>\n\n\n\n
\n

\u8fd8\u6709\u5176\u4ed6\u95ee\u9898\u5417\uff1f<\/p>\n\n\n\n

\u627e\u4e0d\u5230\u60a8\u60f3\u8981\u7684\u4e1c\u897f\uff1f\u8ba9\u6211\u4eec\u8fdb\u4e00\u6b65\u4ea4\u6d41\u5427\uff01<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\u8054\u7cfb\u6211\u4eec \u2192<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n<\/div>\n\n\n\n
\n
\n

\u4fe1\u606f\u5b89\u5168\u63d0\u4f9b\u5546<\/p>\n\n\n\n

\u8bf7\u9605\u8bfb\u6211\u4eec\u6700\u65b0\u7684\u535a\u5ba2\u6587\u7ae0<\/h2>\n\n\n\n

\u4e86\u89e3\u4fe1\u606f\u5b89\u5168\u7684\u6700\u65b0\u52a8\u6001\u3002\u5728\u6211\u4eec\u7684\u535a\u5ba2\u4e0a\uff0c\u60a8\u53ef\u4ee5\u627e\u5230\u6709\u5173\u6280\u672f\u548c\u653f\u7b56\u6700\u65b0\u53d1\u5c55\u7684\u89c1\u89e3\u548c\u5206\u6790\u3002<\/p>\n<\/div>\n\n\n\n