GB/T 20008-2005 信息安全技术 操作系统安全评估准则

ICS35.020

L09召黔

中华人民共和国国家标准

GB/T20008-2005

信息安全技术

操作系统安全评估准则

Informationsecuritytechnology-

Operatingsystemssecurityevaluationcriteria

2005-11一11发布2006-05-01实施

中华人民共和国国家质量监督检验检疫总局发布

中国国家标准化管理委员会

GB/T20008-2005

目次

前言·········，···········，······································································，········…V

引言····················-·············、、····················································」·······……w

1范围···············，···，·····································、·························，···········……1

2规范性引用文件········，····························································.···············.·……1

3术语和定义·······，·······································」」·································……1

4安全环境························，····················，·····················，，·····························，····…‘1

4.1物理方面·········，·····················································，············‘··················……1

4.2人员方面··················-·····················‘·······，··，···········‘··············……1

4.3连通性方面··················································.····························.················……1

5评估内容·········································，······················································……1

5.1用户自主保护级·1

5.1.1自主访问控制································································.·········.·..·...……1

5.1.2身份鉴别，、····4··，，，，，··‘·，，·，·二··········，··························1··，··，，·2

5.1.3数据完整性····································、·····························-·，·················……2

5.1.4数据传输······，··········，···········-······················································，·····……2

5.1.5密码支持·························，·························‘·······················，，··········……2

5.1.6资源利用··························································································一·2

5.1.7安全功能保护······························，，··············，·，··········.·，······，·····..··…，，，，·…2

5.1.8安全管理··，························，··········，·········································，···········，·…3

5.1.9配置管理·····························-·······································-·····················……3

5.1.10安全功能开发过程···，，，··········，······，·，······，·············.·.·············.·…·…，，.，，·…3

5.1.11视吵试··································，············································，，······················，·…3

5.1.12指导性文档·····」·················，，·····················.····……，···……，·……，，.…3

5.1.13交付和运行············，········，，········，···········，，···········‘·…，··········，‘.，……，.·…3

5.2系统审计保护级························-···.··……，，……，……，……3

5.2.1自主访问控制···················，“·····“·…，····4··，….‘···“.二，……3

5.2.2身份鉴别····················‘·····，···，·········································，···················……4

5.2.3客体重用···，········································································，··········……4

5.2.4审计····‘·············，············、·‘···············，····················，······，·············“·4

5.2.5数据完整性···-·············································································、·········……5

5.2.6数据传输························，·······，····················································……5

5.2.7密码支持······-············、············································‘·····························……5

5.2.8资源利用··················································································-··········……5

5.2.9安全功能保护，········，········，·····，，，······，，.·········.····……，，..……，，.…6

5.2.10安全管理·······，·······························，···········································，·········……6

5.2.11生存周期支持········································.·..···········……，……6

5.2.12酉己置管理······，，··········，·············‘··································..···············..····……，，·…6

5.2.13安全功能开发过程··························‘······························.·...·········……，..…6

丁

GB/T20008-2005

5.2.14测试·········································································································……7

5.2.15指导性文档······································································.·····..···.···……7

5.2.16交付和运行···················································，···································……7

5.3安全标记保护级···············，························……，..·…，，，.……，，.……，……，，.……7

5.3.1自主访问控制···········································································，········..……，.，.…7

5.3.2强制访问控制····································································……，，·……，……7

5.3.3标记··························································································，·······，······……7

5.3.4身份鉴别······························，，···································································……8

5.3.5客体重用····················································，··········································……，，8

5.3.6审计·····················································································，···················……8

5.3.7数据完整性···········································································...……，，……9

5.3.8数据传输·····················································，·······································.·...……9

5.3.9密码支持·······························································································，···……10

5.3.1。资源利用····························································································……，10

5.3.11安全功能保护···············································，······················.·……10

5.3.12安全管理···························，···································································……11

5.3.13生存周期支持································……，……11

5.3.14配置管理·······················································，········，·······························……11

5.3.15安全功能开发过程················································································……12

5.3.16钡(试···，，···········································································，····················……12

5.3.17指导性文档·····················································，······································……12

5.3.18脆弱性··························，，·····································································……13

5.3.19交付和运行······················，·······························································……，.，13

5.4结构化保护级·······························，········，·····················································……13

5.4.1自主访问控制·····························································.····.·.···……，……13

5.4.2强制访问控制························································，，··································……13

5.4.3标记·······················································································，······，··········……13

5.4.4身份鉴别····································································································，…13

5.4.5客体重用·································································································……14

5.4.6审计·········································································································……14

5.4.7数据完整性······························································································.·……15

5.4.8数据传输········，················，···································································……15

5.4.9密码支持.·16

5.4.1。资源利用···················································，·······，···························……16

5.4.11安全功能保护·······················································································……16

5.4.12安全管理·········，二17

5.4.13生存周期支持··········································.·……17

5.4.14配置管理.·····························，········一·18

5.4.15安全功能开发过程············，，····························································，·······，……18

5.4.16测试··································································································……19

5.4.17指导性文档，119

5.4.18脆弱性·····、····························································.···.·················……19

5.4.19交付和运行······································，··········，···········································……20

n

GB/T20008-2005

，户

访问验证保护级··························……，……︸川

:.:1自主访问控制····················，·，·······……，，..……，……，…n厂日

9八

5_弓强制访问控制········，····················……，，·····.·……，.……口︺

八n

553标记·······························……，，..……乙︶

八0

乙

5.5身份鉴别

5_5客体重用

55。6审计·……二::

n门

5_弓7数据完整性一﹄

.5.8数据传输qn一

，g

密码支持乙d

n

n

5.5.1。资源利用··4··，，···························，，，，···········4············································……乙口

八卜

5.5.n安全功能保护··，··········、····，，··，，···········，······，，，，····。。。··········，，，，，，……乙0

0匀.

5.5.12安全管理·····，···························，，···，···············，·，······，，··，······················，，，，·，，二︸

O哎

5.5.13生存周期支持············，，················································，，··························一·JJ

n一

0

5.5.14配置管理·········································································，·····················……分

5.5.15安全功能开发过程-··············································……““，·‘Oh内

n产

5.5.16测试············，·，·························，·，，····························，·····················，······……口C

弓门

5.5.17指导性文档，，，··························，··，，···················································……户厂

八月

5.5.18脆弱性····································，，，，······，······················，，，，·······················……了

勺乃了

5.5.19交付和运行····，··············································，··············，·························，，…乙

nO

附录A(资料性附录)操作系统面临的威胁和对策··············，·················，····················……乙U

GB/T20008-2005

月U吕

GB17859-1999计《算机信息系统安全保护等级划分准则》是我国计算机信息系统安全等级管理

的重要标准，已于1999年9月13日发布。为促进安全等级管理工作的正常有序开展，特制定一系列相

关的标准。本标准是系列标准之一。

本标准文本中，黑体字表示较低等级中没有出现或增强的评估内容。

本标准的附录A中说明操作系统面临的主要威胁和对策。

本标准的附录A是资料性附录。

本标准由全国信息安全标准化技术委员会提出并归口。

本标准起草单位:北京大学软件工程国家工程中心，公安部公共信息网络安全监察局。

本标准主要起草人:王立福，赵学志，刘学洋，葛佳。

GB/T20008-2005

引言

操作系统是管理硬件资源、控制程序运行、改善人机界面和为应用软件提供支持的一种系统软件。

它是最靠近硬件的一层软件，将物理机器(裸机)扩展成可靠性高、使用方便、功能齐全的理想机器。操

作系统设计的好坏直接影响计算机系统的性能，操作系统还应考虑系统的各个方面，任何遗漏或考虑不

周都会影响计算机的工作。

用户使用计算机实际上是通过操作系统进行的，操作系统提供给用户的使用手段(或称界面)主要

有三种:终端命令、系统调用和作业控制语言。

GB/T20008-2005

信息安全技术

操作系统安全评估准则

范围

本标准从信息技术方面规定了按照GB17859-1999的五个安全保护等级对操作系统安全保护等

级划分所需要的评估内容。

本标准适用于计算机通用操作系统的安全保护等级的评估，对于通用操作系统安全功能的研制、开

发和测试亦可参照使用。

2规范性引用文件

下列文件中的条款通过本标准的引用而成为本标准的条款。凡是注日期的引用文件，其随后所有

的修改单(不包括勘误的内容)或修订版均不适用于本标准，然而，鼓励根据本标准达成协议