查詢結果分析
來源資料
頁籤選單縮合
題名 | 資通產品安全性共同準則評估檢測技術發展現況=The Development of Common Criteria for Information Technology Security Evaluation |
---|---|
作者 | 吳專吉; 謝宛真; | 書刊名 | 新新季刊 |
卷期 | 41:4 2013.10[民102.10] |
頁次 | 頁53-62 |
專輯 | 不對稱作戰之通資電創新研發 |
分類號 | 312.76 |
關鍵詞 | 資訊技術; 共同準則; 共同準則方法論; 評估保證等級; Information technology; Common criteria; Common evaluation methodology; Evaluation assurance level; |
語文 | 中文(Chinese) |
中文摘要 | 資訊技術安全之認證與驗證機制於歐美各國均早已納入實驗室認證體系中,並以國際標準ISO/IEC 15408共同準則(Common Criteria, CC)及ISO/IEC 18045共同準則方法論(Common Evaluation Methodology, CEM)為規範,提供測試實驗室針對資通產品進行安全性與安全等級之評估與測試驗證。行政院國家資通安全會報為推動我國建立「資通設備安全檢驗」之實驗室認證體系,特責成電信技術中心(TTC)與中科院引進「國際資安產品驗證標準」,並由電信技術中心負責民間與政府機關之資通裝備安全檢驗,本院負責國防(安)與軍事單位之機敏資通裝備安全檢驗。藉由國際共同準則所訂定之標準與實驗室的檢測技術能量來驗證產品,可對資通產品之安全性進行把關,協助消費者依需求選用適合的資通安全等級產品,來確保資訊運作的安全。 |
英文摘要 | The validation and verification mechanism of Information Technology's security in the country such as Europe and America's laboratory validation system all already adopt, and use the international standard of ISO/IEC 15408 Common Criteria for Information Technology Security Evaluation and ISO/IEC 18045 Common Methodology for Information Technology Security Evaluation. These criterions are provided to the Testing Laboratory for evaluating and verifying the security level of Information Technology product. Highest level of the executive branch for impelling our country to establish the laboratory validation system of Information Technology product security inspection, instructs the Chung-Shan Institute of Science and Technology in charge of the military organization's Information Technology product security inspection, and Telecom Technology Center in charge of the civil and government organization's Information Technology product inspection using the international Information Technology product security verification standard. By the international Common Criteria standard and laboratory's inspection technique are used to perform the productverification and security, also can help the consumer to choose suit product and make sure the security. |
本系統之摘要資訊系依該期刊論文摘要之資訊為主。