B GIO DC V O TO TRNG HC VIN K THUT MT M KHOA AN TON THNG TIN

BI TP LN TI: CHUN M AES

Ging vin hng dn : KS Phm Quc Hong Sinh vin thc hin :

Nguyn nh Ph Nguyn Th Phng L Khc Sng H Ni 09/2011

Li M uVi s ph bin ngy cng tng ca cc thit b tnh ton tt c cc lnh vc d l ni lm vic cng nh nh i vi mi ngi trong s chng ta cho thy nhu cu bo mt thng tin ngy cng tr nn quan trng hn bao gi ht. Desktop, laptop, in thoi thng minh, cc PC pad, PDA, Blue-ray player v nhiu thit b khc na, tt c u cn n nhu cu ny c kh nng bo v cc thng tin nhy cm. Khng c s bo mt, mi th bn gi qua mng (hoc thm ch lu trn mt thit b lu tr ni b) cng u tim n s ri ro, bt c ai cng c th c n bt c khi no h mun. Nh mt h qu, bo mt thng tin tr thnh mt kha cnh thit yu ca cng ngh thng tin. Mt h thng CNTT s c nhng yu cu ring ca mnh m bo tnh bo mt, ton vn v sn c ca h thng. p ng cc yu cu ny s cn mt tiu chun chung nh gi xem h thng c an ton hay khng ? T sinh ra thut ng : Tiu chun nh gi an ton thng tin. Trong ti ny nhm em xin c trnh by ni dung ca ti s 10: Tiu chun nh gi an ton thng tin ca chu u Qua thy v cc bn c th hiu r hn v Tiu ch kim nh an ton cng ngh thng tin ca cc nc thuc khu vc Chu u. Em xin chn thnh cm n thy v cc bn gip chng em hon thnh ti ny. Vi kh nng c hn ca mt sinh vin nn ti ca nhm chng em cn nhiu thiu xt nn qua s trnh by di y rt mong thy v cc bn cho chng em nhng nhn xt v ng gp kin ti ca chng em c hon thin hn. Em xin chn thnh cm n.

I.

Gii thiu chung

- Trong bi cnh hin nay cng ngh thng tin ng mt vai tr v cng quan trng c bit l

trong cc doanh nghip, trng hc, cng ty v cc t chc x hi v vy m vn an ton thng tin c t ln hng u. Vy mt cu hi c t ra l an ton thng tin l g? V ti sao cn phi m bo an ton thng tin?- Mt h thng thng tin c gi l an ton khi n thc hin c ba tiu ch:

+ Tnh bo mt + Tnh ton vn + Tnh sn sng phc v- Bo mt c ngha l phng nga vic tit l thng tin mt cch tri php. D phng ton vn

tc l chng li vic sa i tri php thng tin v sn sng phng chng vic khu tr thng tin tri php. - p ng cc yu cu bo m an ton thng tin cn thc hin mt s bin php an ninh k thut. Trong ti liu ny ta s xt tnh bo m thc thi cc chc nng, bao gm cc lnh vc nh truy cp kim sot, kim ton, v li phc hi.- Ngi s dng h thng cn tin tng vo s an ton ca h thng m h ang s dng. H

cng cn mt thc o so snh kh nng bo mt ca sn phm m h dng. Mc d ngi dng c th da vo li ca nh sn xut hoc cc nh cung cp dch v ca h thng nhng h cn c mt ci chun chung c th nh gi cht lng v bo mt ca h thng m h ang dng. V s nh gi khch quan bi mt c quan c lp trong trng hp ny l ht sc cn thit. Do vy m t chc nh gi nhng tiu chun an ton cng ngh thng tin ra i. N

a ra nhng tiu chun chung nh gi v mc bo mt ca h thng hoc sn phm cng ngh thng tin v n c p dng cho nhiu h thng v nhiu sn phm cng ngh thng tin khc nhau ch khng phi ch duy nht mt sn phm v mt h thng c th no.- i vi h thng, nh gi kh nng bo mt ca n c th c xem nh l mt phn trong th

tc chnh thc chp nhn mt h thng CNTT c a vo s dng trong mi trng c bit. Cng nhn l thut ng thng c s dng m t th tc ny. N i hi mt s yu t cn c xem xt trc khi h thng c th c xem l ph hp. - Vic ra i ca thit b in ton a n s ng dng n khp mi ni. Tuy nhin, khi n c a vo s dng cc c quan trng yu th ngi ta t ra vn l mc tin tng ca cc thit b in ton mc no? Hoa K l mt trong nhng quc gia t ra vn cn phi nh gi an ton ca h thng my tnh u tin. T nm 1983, B Quc phng Hoa K (DoD) son tho Tiu ch kim nh cho h thng my tnh c tin cy (TCSEC - Trusted Computer System Evaluation Criteria) hay vn c gi vi cc tn thn thin hn l Sch Da cam. Tiu ch ny c xy dng nhm a ra cc yu cu bo m v phn cng, phn mm v cc m bo c bit khc ca h thng my tnh cng nh a ra phng php lun tng ng phn tch mc h tr ca chnh sch an ton trong cc h thng my tnh dng cho B Quc phng Hoa K. -Sau khi Sch Da cam c ban hnh th cc nc Chu u son tho Tiu ch kim nh An ton Cng ngh thng tin (ITSEC - Information Technology Security Evaluation Criteria). Tiu ch ny c bn nc Anh, Php, c v H Lan xy dng vo thng 6 nm 1991. Mc an ton ca mt h thng nh gia theo tiu ch ny c chia lm 3 mc: c s, trung bnh v cao. An ton c s nu phng tin bo v c kh nng chng li cc tn cng ngu nhin n l. An ton trung bnh nu cc phng tin bo v c kh nng chng li cc ti phm c ti nguyn v kh nng hn ch. An ton mc cao nu cc phng tin bo v c kh nng vt tri hn cc ti phm c trnh nghip v cao. -TCSEC ca Hoa K v ITSEC ca Chu u c nh hng thc s ti cc tiu chun v an ton v cc phng php nh gi an ton cho cc sn phm BM&ATTT sau ny. ITSEC c xy dng trn c s TCSEC nn n khng phi l ti liu c lp m c s lin quan mt thit vi Sch Da cam.

- Mc ch d nh ca ITSEC: n i hi phi m bo an ninh t pha h thng, xc nhn trch

nhim qun l v an ninh, tun th cc k thut v cc yu cu php l, quy nh c lin quan.

S tng quan v tiu chun ca chu u.

CC KHI NIM C BN

Cc tiu ch ca chu u xem xt cc nhim v c bn ca an ton thng tin : + Bo v thng tin chng cc truy nhp tri php nhm bo m tnh b mt + Bo m ton vn thng tin bng cch bo v chng li bp mo hoc hy hoi bt hp php + Tnh hiu qu phn nh s tng ng cho cc thit b bo v vi nhim v dt ra + Tnh chnh xc c trng cho qu trnh thit k v hot ng ca chng

II. PHM VI 1.1. Cc tiu ch ny c thit k nh trong phn chnh c bnh ng p dng i vi bin php k thut bo mt thc hin trong phn mm, phn cng v phn mm.Trng hp cc kha cnh c th ca nh gi l nhm mc ch duy nht p dng cho mt s phng php thc hin, iu ny c ch nh nh mt phn ca tiu chun c lin quan. 1.3 Cc tiu ch ny khng nhm mc ch trang tri cc kha cnh vt l ca bo mt phn cng nh vy nh vic cung cp cc thng lm xo trn khng hoc kim sot ca in ha thn.H thng v sn phm 1.4 i vi cc mc ch ca ti liu ny, s khc bit gia cc h thng v cc sn phm c th c gii thch nh sau. Mt h thng CNTT l mt c th ci t c th mc ch v mi trng hot ng c bit n. Mt sn phm CNTT l mt phn cng v hoc gi phn mm c th c mua ra khi k v kt hp vo mt lot cc h thng. Mt h thng CNTT c xy dng t mt s phn cng v phn mm IT. Mt s thnh phn (v d, ng dng phn mm) thng c xy dng c bit, cc thnh phn khc (v d, phn cng) thng l nhng sn phm tiu chun. i vi cc ng dng nht nh, n c th c c th mua mt sn phm duy nht phc v nh l mt h thng hon chnh, nhng thng t nht

mt s ty bin v tch hp p ng cc yu cu h thng c th s c cn thit. 1.5 T im nhn ca an ninh, s khc bit gia cc h thng v sn phm nm trong nhng g l nht nh v mi trng hot ng ca h. Mt h thng c thit k p ng cc yu cu ca mt nhm c th ca ngi s dng cui cng. N c mt thc t mi trng th gii m c th c xc nh v quan st thy trong tng chi tit, c bit cc c im v yu cu ca ngi dng cui cng s c bit n, v nhng mi e da i vi an ninh ca n l mi e da thc s c th c xc nh. Mt sn phm phi ph hp kt hp trong nhiu h thng, thit k sn phm ch c th thc hin chung gi nh v mi trng hot ng ca mt h thng m n c th tr thnh mt thnh phn. l vo ngi mua cc sn phm v xy dng h thng m bo rng cc gi nh ny l ph hp vi mi trng thc t ca h thng. 1,6 iu quan trng l v li ch ca tnh nht qun m cc tiu chun bo mt tng t c s dng cho c hai sn phm v h thng, sau n s c d dng hn v r hn nh gi h thng c cha cc sn phm c nh gi thnh cng. iu ny l l do ti sao cc tiu ch ny i ph vi vic nh gi an ninh ca c hai sn phm IT v IT h thng. Trong phn cn li ca ti liu ny, mc tiu di ca nh gi (TOE) c s dng ch mt sn phm hoc h thng c nh gi. 1.7 TOE c th c xy dng t mt s thnh phn. Mt s thnh phn s khng gp phn p ng mc tiu bo mt ca TOE cc. Cc thnh phn khc gp phn p ng mc tiu an ninh, cc thnh phn ny c gi l an ninh thc thi. Cui cng c th c mt s thnh phn khng an ninh thc thi nhng d sao cng phi hot ng mt cch chnh xc cho TOE thc thi an ninh;chng c gi l an ninh c lin quan. S kt hp ca bo mt thc thi thnh phn v cc thnh phn bo mt c lin quan ca mt TOE l thng c gi l mt c s Trusted Computing (TCB) (xem hnh 1 v 2). 1.8 Hu ht cc nh gi cng vic s tp trung vo cc thnh phn ca TOE c nu c thc thi an ninh v an ninh c lin quan, nhng tt c cc thnh phn khc trong TOE s cn phi c xem xt trong qu trnh nh gi v chng minh l khng an ninh thc thi cng khng bo mt c lin quan.Chc nng v m bo, lp hc v trnh 1.9 cho mt TOE p ng cc mc tiu an ninh ca n, n phi kt hp vi ph hp bo m vic thi hnh chc nng, bao gm, v d, cc lnh vc nh kim sot truy cp,kim ton v khi phc li.

1.10 Cc chc nng ny phi c nh ngha mt cch r rng v d hiu cho c hai nh ti tr nh gi v thm nh vin c lp. H c th c th c c nhn quy nh, hoc h c th c nh ngha bng cch tham chiu c nh ngha snchc nng lp. Cc tiu ch ny bao gm mi lp hc chc nng v d. Nhng V d cc lp hc c da trn cc lp c nh ngha trong Tiu chun Quc gia c [ZSIEC], trong c nm lp tng ng cht ch vi chc nng yu cu ca Trusted M Computer Tiu ch nh gi h thng TCSEC]. 1.11 Trong tt c cc trng hp, nh ti tr nh gi phi xc nh mc tiu an ninh cho nh gi. iu ny phi xc nh cc chc nng bo mt thc thi c cung cp bi TOE, v cng s cha cc thng tin khc c lin quan, nh an ninh mc tiu ca TOE v d kin cc mi e da cho nhng mc tiu. Thng tin chi tit c th cng c cc c ch an ninh c bit s c s dng thc hin bo m thc thi chc nng. 1.12 bo mt thc thi cc chc nng c la chn p ng cc mc tiu an ninh ca mt TOE hnh thc m l phng din mt trong cc mc tiu an ninh ca mt sn phm hoc h thng. Khng km quan trng l m bo rng cc mc tiu an ninh t c an ninh c la chn thc thi cc chc nng v c ch. 1.13 Bo m nhu cu c gii quyt mt s im khc nhau v, trong cc tiu chun hi ho, n c quyt nh phn bit tin tng vo chnh xc trong vic thc hin ca an ninh thc thi chc nng v cc c ch t tin tng vo hiu qu ca h. 1.14 nh gi hiu qu nh gi cho d an ninh thc thi chc nng,c ch c cung cp trong cc TOE s thc s p ng cc quy nh an ninh mc tiu. TOE c nh gi cho ph hp chc nng, rng buc chc nng (cho d cc chc nng c la chn lm vic cng nhau h tr),hu qu ca cc l hng bit v c pht hin (c trong xy dng cc TOE v cch n s c s dng trong hot ng sng), v d s dng. 1.15 Ngoi ra, nh gi hiu qu nh gi kh nng bo mt c ch ca cc TOE chu c cuc tn cng trc tip (sc mnh ca c ch). Ba mc sc mnh c nh ngha c bn, trung bnh v cao - m i din cho tng dn mc tin tng vo kh nng ca cc c ch bo mt ca cc TOE chu c cuc tn cng trc tip. 1.16 nh gi ca ng n nh gi cho d an ninh thc thi chc nng, c ch c thc hin mt cch chnh xc. By cp nh gi c nhn E0 E6 c xc nh, i din cho mc tng dn ca s t tin trong chnh xc. E0 i din cho s t tin khng y . E1 i din cho mt im vo di y m khng c s t tin hu ch c th c t chc, v E6 l mc cao

nht ca s t tin. Cc mc cn li i din cho mt ni suy gia. Chnh xc l gii quyt t quan im ca quan im ca xy dng TOE cc, bao gm cqu trnh pht trin v mi trng pht trin, v cng l quan im hot ng ca ngn chn. 1.17 Cc mc nh gi c xc nh trong bi cnh cc tiu ch ng n. Cc yu cu i vi hiu qu (bao gm c sc mnh ca c ch) khng thay i bng cp, m ng hn l xy dng da trn vic nh gi ng n v c thc hin bng cch s dng cc ti liu c cung cp bi nh ti tr cho vic nh gi , tt nhin, trong thc t ng n v hiu qu hot ng gim nh s c xen k. 1,.8 Nu TOE khng bt k kha cnh ca vic nh gi mt mc c th, bi v s thiu thng tin hoc v l do no khc, thiu ht ny phi c khc phc, hoc TOE thu hi t vic nh gi cp . Nu khng TOE s c ch nh mt kt qu ca E0. 1.19 su thnh cng nh gi mc E1 n E6 ko di trong mt phm vi rng tim nng s t tin. Khng phi tt c cc cp nht thit s l cn thit hoc thch hp cho tt c cc lnh vc th trng cn phi nh gi c lp v an ninh k thut cc bin php. Khng phi tt c cc kt hp cc chc nng v s t tin nht thit s c hp l hay hu ch. V d, t t tin trong cc chc nng cn thit h tr mt yu cu a an ninh qun s s khng c thch hp. Ngoi ra, n khng chc rng s t tin cao trong s ng n ca mt TOE s c kt hp vi mt yu cu cho mt sc mnh thp ca c ch. 1.20 Nhng tiu chun hi ho khng phi l mt ti liu hng dn thit k cho cc sn phm an ton hoc cc h thng. N l nh ti tr nh gi xc nh cc mc tiu bo mt ca TOE ca mnh v la chn cc chc nng an ninh p ng cho h. Tuy nhin i vi mi nh gi cp, mt phn m bo cc tiu ch c th c coi nh l mt bo mt "bt buc danh sch kim tra " c tha mn.Bo m Profiles 1.21 Cc tiu ch trong ti liu ny yu cu nh ti tr cho nh nc nh gi nh l mt phn mc tiu an ninh. Tt c an ninh thc thi chc nng c lit k trong bo mt mc tiu ny sau c nh gi cng mt mc t tin, theo yu cu ca cc quy nh nh gi mc . 1.22 i vi mt s ngn chn, c th l mt yu cu t c s t tin cao hn trong mt s chc nng an ninh v s t tin thp hn nhng ngi khc, v d, mt s bo mt chc nng c th quan trng hn nhng ngi khc. Trong nhng trng hp ny, nh ti tr c th xem xt vic sn xut nhiu hn mt mc tiu an ninh cho TOE. Cc chi tit ca cch ny l t c, v trong nhng iu kin, l vt ra ngoi phm vi ca nhng tiu ch.Qu trnh nh gi

1.23 Mc tiu ca qu trnh nh gi l cho php thm nh chun b mt bo co v t ni c hay khng TOE p ng mc tiu an ninh mc s t tin cho thy mc nh gi c nu. 1.24 qu trnh nh gi c th hin trong bi cnh trong hnh 3. N i hi phi ng ca tham gia ca cc nh ti tr nh gi. Mc nh gi cao hn, ln hn s cn phi c s tham gia ca cc nh ti tr. C hai ngi dng v cc nh cung cp c th hot ng nh cc nh ti tr nh gi. C kh nng rng mt nh gi h thng s c c ti tr bi d nh cui cng ngi s dng ca h thng hoc k thut i din, v nh gi sn phm s c ti tr bng sn phm nh sn xut hoc mt nh cung cp ca sn phm, nhng iu ny khng cn phi c nh vy. Bt c bn no c th cung cp thng tin k thut cn thit c th ti tr nh gi. 1.25 u tin l nh ti tr phi xc nh cc yu cu hot ng v e da TOE l truy cp. Trong trng hp ca mt h thng, c mt cn phi kim tra th gii thc mi trng hot ng cho h thng, xc nh cc mi e da c lin quan phi c gii quyt. i vi mt sn phm, c mt cn phi quyt nh nhng mi e da n an ninh sn phm nn a ch. l d on rng ngnh cng nghip t chc v cc c quan tiu chun ha quc t vi thi gian s xc nh tiu chun cc lp hc chc nng s dng nh l mc tiu sn phm bo mt. Sn phm pht trin nhng ngi c khng thch hp chuyn gia th trng nh trc hoc loi ngi dng trong tm tr c th thy rng cc lp hc chc nng c xc nh trc nh vy lm cho mc tiu an ninh tt thit k ca h sn phm cho ph hp. 1.26 mc tiu an ninh cho TOE sau c th c xc nh xem xt php l v cc quy nh khc. Cc hnh thc ng gp i vi an ninh (bo mt,tnh ton vn v sn c) TOE c thit k cung cp. Do an ninh mc tiu, an ninh cn thit thc thi cc chc nng sau c th c thit lp, c th trong mt lp i lp li cch, cng vi mc nh gi rng TOE s phi t c cung cp mc cn thit ca s t tin. 1.27 Kt qu ca cng vic ny - nh ngha ca cc chc nng bo mt thc thi,xc nh cc mi e da, cc mc tiu an ninh c xc nh, bt k bo mt c th c ch c s dng tr thnh mc tiu an ninh cho s pht trin. 1.28 i vi mi mc nh gi, cc tiu ch lit k s c chuyn giao. nh ti tr thm nh. Cc nh ti tr phi m bo rng cc mt hng ny c cung cp, chm sc rng bt k yu cu cho ni dung v trnh by c hi lng, vcc mc r rng cung cp, hoc h tr sn xut, cc bng chng c gi l

cho. 1.29 nh gi c th c thc hin mt cch hiu qu, v vi chi ph ti thiu, thm nh phi lm vic cht ch vi cc nh pht trin v ti tr ca cc TOE, l tng t khi bt u pht trin, xy dng mt s hiu bit tt v mc tiu an ninh, v c th xc nh c ngha nh gi quyt nh khi chng c thc hin. Tuy nhin, thm nh vin phi duy tr c lp v khng phi ngh lm th no thit k hoc thc hin cc TOE. iu ny l tng t nh vai tr ca mt ti chnh kim ton vin bn ngoi, nhng ngi tng t nh vy phi xy dng mt mi quan h lm vic tt vi mt b phn ti chnh, v trong nhiu trng hp, sau khi kim tra, s dng h s ni b v iu khin ca h. Tuy nhin, ng cng phi duy tr c lp v t cu hi. 1.30 an ninh kim tra v phn tch yu cu trong tiu chun xng ng c c bit cp n; trong mi trng hp, trch nhim th nghim v phn tch phn cn li vi nh ti tr. i vi tt c cc cp nh gi ngoi tr E1, thm nh ch yu s kim tra th nghim v phn tch kt qu c cung cp bi nh ti tr. Thm nh s thc hin kim tra v phn tch cng vic ch kim ton cc kt qu cung cp, b sung cc bng chng c cung cp, v iu tra l hng. Ti nh gi mc E1, n l ty chn v vic liu kt qu th nghim c cung cp. Nu khng, ngi nh gi ngoi phi thc hin chc nng kim tra chng li cc mc tiu an ninh.Qu trnh Chng nhn 1.31 cho cc tiu ch ny c gi tr thc tin, h s cn phi c h tr bi n thit thc cho vic cung cp v kim sot nh gi c lp, iu hnh bi mt cch thch hp iu kin v cng nhn c quan chng nhn quc gia. Cc c quan cp chng ch xc nhn s nh gi ca s an ton ca ngn chn, c xc nh nh gi c lp thc hin ng cch. H s thng qua cc th tc, nh yu cu ca cc tiu ch ny, bo m tnh xc thc ca cc TOE giao.H cng s chu trch nhim cho vic la chn v kim sot ca nh gi c ph duyt.Thng tin chi tit ca cc th tc c s dng bi cc c quan ny ang vt ra ngoi phm vi ca nhngtiu ch. 1.32 Cc tiu ch ny c thit k gim thiu tnh ch quan vn c trong nh gi kt qu. N s l trch nhim ca cc c quan chng nhn quc gia duy tr tnh thng nht kt qu nh gi chng nhn. Lm th no ny l t c vt ra ngoi phm vi ca cc tiu ch ny. 1.33 Trong trt t cho cc kt qu ca vic nh gi i vi cc tiu ch ny c chng nhn bi mt quc gia cp giy chng nhn c th, thm nh vin s phi sn xut mt bo co c

cha kt qu nh gi trong mt hnh thc chp nhn xem xt xc nhn c th. Cc nh dng chnh xc v ni dung ca bo co nh vy l vt qu phm vi ca nhng 1.35 Hu ht cc mc tiu an ninh v ngn chn s thay i theo thi gian. Vic duy tr mt nh gi chng nhn sau y thay i mt TOE (cho d an ninh c lin quan hoc khng) hoc thay i sau y vi mc tiu an ninh (chng hn nh mi e da mi hay cc mc tiu an ninh s c quy nh bi c quan chng nhn ph hp quc gia. nh gi li s l cn thit trong mt s trng hp v khng phi nhng ngi khc. Cc chi tit ca quy nh ny v th tc cng l mt vn vt ra ngoi phm vi ca cc tiu ch ny.Quan h vi cc TCSEC *Cc Trusted Tiu ch nh gi h thng my tnh [TCSEC], thng c gi l TCSEC hoc "Sch da cam", l mt c s c bit n rng ri v c chp nhn cho bo mtnh gi cc h thng iu hnh. Nguyn cng b vo nm 1983, n l do M s dng B Quc phng k hoch nh gi sn phm hot ng.Trung tm An ninh my tnh quc gia (NCSC). Cc tiu ch TCSEC l nhm mc ch ph hp vi chnh sch bo mt ca B Quc phng M. Chnh sch ny cch yu lin quan vi vic duy tr tnh bo mt ca quc gia phn loi thng tin. 1.36 TCSEC nh ngha b tiu chun nh gi c gi l cc lp (D, C1, C2, B1,B2, B3 v A1), c nhm li thnh bn s on (D, C, B v A). Mi lp hc tiu chun bao gm bn kha cnh nh gi: Chnh sch an ninh, trch nhim, m bo v Ti liu. Cc tiu ch cho bn lnh vc ny tr nn chi tit hn t lphc, v hnh thnh mt h thng phn cp, theo D l thp nht v A1 cao nht. Mi lp hc bao gm c chc nng v cc yu cu tin cy. 1.37 Cc tiu ch t ra trong vic la chn giy php ITSEC chc nng bo mt ty ,v xc nh by cp nh gi i din cho s t tin ngy cng tng trong kh nng mt TOE p ng mc tiu an ninh ca n. V vy, cc tiu ch ny c th c p dng cho bao gm mt rng hn phm vi ca h thng v cc sn phm c th xy ra hn TCSEC. Ni chung, i vi chc nng ging ht nhau mt mc tng ng vi s t tin, TOE c kin trc t do p ng cc tiu chun ITSEC hn p ng TCSEC, nhng l nhiu hn ch trong thc tin pht trin cho php ca n. 1.38 Mt s cc lp hc chc nng v d c xc nh tng ng cht ch cc yu cu chc nng ca cc lp hc TCSEC C1 n A1. H l nhng bao gm, nh F-C1 F-B3, gia cc lp chc nng v d c a ra trong Ph lc A. N khng phi l c th, tuy nhin, lin quan cc cp nh gi trc tip. c yu cu bo mt ca cc lp TCSEC, l cp ITSEC pht trin hi ho an ninh chu u khc nhau n tiu chun c cha mt s yu cu khng xut hin trong

cc TCSEC r rng. 1.39 Mc ch s tng ng gia cc tiu ch ny v cc lp TCSEC nhsau: Cc tiu ch ny E0 F-C1,E1 F-C2,E2 F-B1,E3 F-B2,E4 F-B3,E5 F-B3,E6

TCSEC loi D C1 C2 B1 B2 B3 A1

Cn lu rng c khng c lp chc nng F-A1 nh chc nng yu cu ca TCSEC lp

A1 l tng t nh i vi lp B3. Mt sn phm c thit k vi mc tiu ca nh gi thnh cng chng li c cc ITSEC v TCSEC, v c th hin p ng mt trong cc lp hc hoc kt hp trong bng trn, cn phi vt qua nh gi so vi cc tiu chun khc tng ng lp hoc kt hp. Tuy nhin, ti C1 TCSEC yu cu bng chng c cung cp pht trin h thng th nghim. V vy, mt [F-C1, E1] nh gi s ch c tng ng vi nh gi C1 nu nh ti tr c chn p ng cc ty chn E1 yu cu cung cp ti liu kim tra lm bng chng th nghim y chng li mc tiu an ninh trc khi nh gi. 1.41 Trong sut TCSEC, s kt hp ca bo mt thc thi v phn bo mt c lin quan ca mt TOE c gi l mt c s Trusted Computing (TCB). TCSEC ngn chn i din ca cc lp cao hn trong phn chia B v phn chia A ly c s t tin b sung t ngy cng kht khe kin trc v yu cu thit k t trn TCB ca tiu chun TCSEC. TCSEC cc lp hc B2 v cao hn yu cu kim sot truy cp c thc hin bi mt xc nhn tham chiu c ch, mt c ch m thc hin cc khi nim v mt mn hnh tham kho [V]. Mt c ch xc thc ti liu tham kho phi c lm gi bng chng, n phi lun lun c gi, v n phi c nh c i tng phn tch v kim tra,y trong c th c m bo i vi kh nng tng thch vi TCSEC, cc lp hc v d ITSEC chc nng F-B2 v F-B3 nhim v kim sot truy cp c thc hin thng qua vic s dng mt c ch. Ngoi ra, mc nh gi cao hn ITSEC ni kin trc v thit k hn ch v vic thc hin an ninh tt c cc thc thi chc nng. Kt hp vi cc yu cu hiu qu ITSEC an ninh chc nng ph hp v h tr ln

nhau, iu ny c ngha rng mt TOE c kh nng p ng cc mc nh gi cao hn ITSEC v cung cp chc nng ph hp vi cc lp chc nng tng ng TCSEC, nht thit phi c p ng TCSEC yu cu cho mt TCB v s dng cc khi nim theo di ti liu tham kho. III. CHC NNG 2.1 Mc tiu ca nh gi (TOE) l cung cp bo mt .S kt hp gia tnh bo mt, tnh ton vn v tnh sn sng phc v c.Mc tiu ny l cn thit xc nh mt chun chung trong nh gi an ton thng tin. 3.2 mc tiu l khng gii hn ch nhng ngi chu trch nhim v sn xut ca cc TOE v nh gi ca n, nhng cng bao gm nhng ngi chu trch nhim v qun l, mua, ci t, cu hnh, vn hnh v s dng TOE. 2.4 Cc ni dung yu cu ca mt mc tiu an ninh c th c tm tt nh sau: a) Hoc l mt h thng chnh sch an ninh hoc mt C s sn phm. b) Mt c im k thut ca an ninh yu cu thc thi chc nng. c) Mt nh ngha ca c ch bo mt cn thit (ty chn). d) Cc tuyn b nh gi ca sc mnh ti thiu ca c ch. e) Vic nh gi mc tiu cp .Mi trong s ny l m t chi tit hn di y. 2.5 yu cu i vi vic trnh by mc tiu an ninh ph thuc vo mc tiu nh gi mc . Mc nh gi cng xc nh cc ti liu TOE khc phi c cung cp nh gi, cng vi cc yu cu v ni dung ca n v trnh by, v yucu i vi bng chng c cung cp hin th TOE p ng cc mc tiu an ninh. 2.6 mc tiu an ninh c th c trnh by nh l mt ti liu duy nht, hoc l nhiu ti liu. Trng hp nhiu ti liu c s dng, mi quan h ca h vi nhau phi ghi r. 2.7 Nh ti tr nh gi l chu trch nhim v vic cung cp v tnh chnh xc ca bo m mc tiu nh gi.Chnh sch Bo mt h thng 2.8 Ni dung ca mt mc tiu an ninh ph thuc vo vic TOE l mt h thng hoc sn phm.Trong trng hp ca mt h thng, mi trng thc t m trong TOE s c s dng c bit, thc t cc mc tiu an ninh c th c xc nh v cc mi e da thc t v bin php i ph hin ti c th c xem xt. Nhng chi tit ny c a ra trong mt h thng

Chnh sch An ninh. 2.9 Chnh sch Bo mt h thng quy nh c th cc thit lp ca php lut, quy tc v thc hnh iu chnh cch thc thng tin nhy cm v cc ngun lc khc c qun l, bo v v phn phi trong mt h thng c th. N s xc nh cc mc tiu an ninh ca h thng v cc mi e da n h thng. Cc mc tiu ny bo m c gii quyt bi s kt hp ca cc chc nng an ninh h thng thc thi (thc hin trong TOE), v cng bi vt cht, nhn s, phng tin th tc lin quan n vic h thng. Chnh sch Bo mt h thng bao gm tt c cc kha cnh ca an ninh lin quan n h thng, bao gm c cc bo mt lin quan n vt l, th tc v nhn vin, cc bin php. 2,10 Mi t chc, s c cc tiu chun an ninh chung p dng cho tt c cc h thng trong t chc v xc nh cc mi quan h an ninh gia t chc v th gii bn ngoi. Nhng tiu chun ny c th c coi l mt Chnh sch An ninh doanh nghip: cc thit lp ca php lut, quy tc v thc hnh iu chnh nh th no ti sn, bao gm thng tin nhy cm, c qun l, bo v v phn phi trong t chc. Nhiu t chc s c mt r rng bng vn bn Chnh sch bo mt ca cng ty, m s ch nh cc quy tc v thc hnh v p dng php lut quc gia v lut php quc t m h ph hp. Trng hp ny l trng hp, n c tham kho t cc chnh sch bo mt h thng. Nu khng, tt c c lin quan kha cnh c quy nh trong mi Chnh sch Bo mt h thng ca t chc. 2.11 Trch nhim chnh ca chnh sch bo mt doanh nghip l cung cp bi cnh cho vic xc nh cc mc tiu an ninh h thng. Xc nh c lin quan ti sn doanh nghip, cc mi e da chung, v kt qu phn tch ri ro s h tr xc nh cc mc tiu an ninh h thng. Tho lun v cc qu trnh nguy c phn tch l ngoi phm vi cc tiu ch ny. 2,12 Trong bi cnh ca mt h thng c nhn, chnh sch bo mt h thng quy nh bin php an ninh c s dng p ng cc mc tiu an ninh h thng trong mt cch l ph hp vi chnh sch bo mt doanh nghip. Cc bin php an ninh yu cu ca Chnh sch H thng an ninh s c thc hin bi mt s kt hp ca an ninh thc thi chc nng thc hin bi TOE, v vt l, nhn vin, v c ngha l th tc. Chnh sch Bo mt h thng phi ghi r phn chia trch nhim gia cc chc nng bo mt thc thi v phng tin. 2.13 bin php an ninh CNTT ca Chnh sch Bo mt h thng c th c tch ra t phn cn li ca Chnh sch Bo mt h thng, v c xc nh trong mt ti liu ring bit: A Chnh

sch bo mt k thut. y l tp hp ca php lut, quy tc v thng l iu tit ch bin cc thng tin nhy cm v s dng cc ngun ti nguyn phn cng v phn mm ca mt h thng CNTT. 2,14 Trong nhiu trng hp, n c th c thun tin bao gm cc c im k thut ca an ninh thc thi cc chc nng nh l mt phn ca h thng hoc chnh sch bo mt k thut. 2.15 Chnh sch h thng hoc k thut an ninh c th c s dng nh l c s la chn ph hp IT sn phm bo mt tng hp trong h thng, chng hn sn phm la chn l bn ngoi phm vi ca cc tiu ch ny.Sn phm C s 2,16 Trong trng hp ca mt sn phm, mi trng chnh xc trong TOE s c s dng l khng bit n pht trin ca n, v n c th c a vo nhiu hn mt h thng c th v mi trng h thng. Thay vo , mt tuyn b l do c cung cp cho cc thng tin cn thit cho mt ngi mua tim nng quyt nh cho d s gip p ng cc mc tiu an ninh h thng ca mnh, v xc nh nhng g khc phi c thc hin cho nhng mc tiu an ninh h thng c p ng y . CHC NNG 2,17 Cc l do sn phm c trch nhim xc nh phng php d nh s dng cho sn phm, d nh mi trng cho s dng ca sn phm v cc mi e da gi nh trong mi trng.N bao gm mt bn tm tt cc tnh nng bo mt ca sn phm, v xc nh tt c cc gi nh v mi trng v cch thc m sn phm s c c s dng. iu ny bao gm nhn s, vt l, th tc v cc bin php bo mt CNTT cn thit h tr sn phm, v ph thuc ca n trn h thng phn cng, phn mm, v hoc phn mm khng c cung cp nh l mt phn ca sn phm.c im k thut Chc nng bo mt Thc thi 2.18 Mc tiu bo m bao gm mt c im k thut ca an ninh thc thi chc nng c cung cp bi TOE. Cc chc nng ny c th c ghi r rng, hoc bng cch tham chiu n mt hoc nhiu lp chc nng c xc nh trc, hoc bng cch tham chiu n mt chp nhn tiu chun nh ngha chc nng bo mt. Cc lp hc c xc nh trc xem xt phn sau ca chng ny. 2,19 Mt hoc nhiu tiu chun ti liu a ch an ninh c th hnh thnh mt phn ca mt mc tiu an ninh, bng cch tham chiu hoc bng cch bao gm trong mc tiu. Trng hp tiu chun

cho php la chn, nhng ngi c la chn phi c xc nh r rng. Trng hp mt tiu chun khng khng cung cp tt c cc thng tin cn thit, cc thng tin b sung cn thit s c cung cp mt cch r rng trong mc tiu an ninh. 2,20 Trong trng hp ca mt h thng, an ninh thc thi chc nng c tng quan vi mc tiu an ninh, do n c th c nhn thy c chc nng p ng cc mc tiu. (Chc nng c th p ng, hoc gip p ng, nhiu hn mt mc tiu). Mi chc nng trong cc c im k thut ca cc chc nng bo mt thc thi trch nhim mc ti thiu gip p ng t nht mt mc tiu. Cc c im k thut bo mt thc thi chc nng cng c cho thy ti sao cc chc nng y chng li xc nh hoc c ghi mi e da n cc mc tiu an ninh. 2,21 Trong trng hp ca mt sn phm, an ninh thc thi chc nng c tng quan vi d kin phng php s dng ca sn phm v cc gi nh v mi trng thnh sn phm s c ci t c a ra trong cc l do sn phm. iu ny tng quan bao gm bt k ph thuc vo chc nng thc thi bo mt khc v khng bin php an ninh gi c cung cp bi mi trng. 2,22 T im nhn ca vic nh gi, cc c im k thut bo mt thc thi chc nng l phn quan trng nht ca cc mc tiu an ninh. Chc nng c trch nhim lun lun c xc nh trong mt phong cch khng chnh thc, bng cch s dng ngn ng t nhin. Ngoi ra,cao hn mc nh gi, h cng phi c xc nh bng cch s dng mt semiformal hoc chnh thc phong cch trnh by. Thng tin chi tit ca cc phong cch trnh by nh sau ny 2.23 Mt mc tiu an ninh ty chn c th quy nh hoc yu cu vic s dng bo mt c bit c ch. Tt c cc c ch bo mt bao gm trong mt mc tiu an ninh c tng quan vi chc nng bo mt thc thi ca n, n c th c nhn thy c ch thc hin mi chc nng (mt c ch c th thc hin mt s chc nng, v mt chc nng c th c thc hin thng qua s kt hp ca mt s c ch). 2,24 Trng hp c ch bo mt theo quy nh ca mc tiu an ninh, n l nhim v ca nh pht trin thc hin cc c ch cn thit. Nu khng, n l nhim v ca nh pht trin ca cc TOE pht trin v sn xut cc c ch , khi kt hp, thc hin chc nng thc thi an ninh cn thit.nh gi tuyn b ch quyn ca Sc mnh ti thiu ca cc c ch 2,25 Tt c cc mc tiu an ninh quy nh c th mt nh gi tuyn b ca sc mnh ti thiu ca

c ch bo mt ca TOE chng li cuc tn cng trc tip. y l mt trong nhng xp hng c bn, trung bnh cao theo quy nh ti Chng 3 ca cc tiu ch ny.Mc tiu nh gi c s 2,26 Mi mc tiu an ninh quy nh c th mc nh gi mc tiu nh gi s TOE. iu ny c mt trong cc xp hng E1, E2, E3, E4, E5, E6 theo quy nh ti 2,27 Cc tiu ch ny nhm mc ch cho php s dng cc vn bn chnh sch an ninh hin c pht trin cc tiu chun hoc tiu chun khc nh l mt phn hoc tt c cc mc tiu an ninh cho mt h thng. V vy, ni dung chnh xc ca cc ti liu bao gm an ninh mc tiu l khng quy nh. Thng tin ti thiu cn thit nh gi i vi cc tiu ch ny c nu trn. K t khi mc tiu bo mt c th bao gm nhiu hn na hn mt ti liu, phong cch hin ti ca ti liu chnh sch c th c cung cp ch (Mc d cc ti liu b sung c th c yu cu hon thnh cc thng tin cn thit cho mc tiu an ninh). 2,28 Hai v d c a ra di y nh bao loi c bit ca chnh sch bo mt ti liu c th p ng cc yu cu cho mt mc tiu an ninh. 2,29 Trong Vng quc Anh l bt buc sn xut mt chnh sch H thng an ninh (SSP) cho tt c cc h thng s x l thng tin quc gia c phn loi. Nu c quan u quyn quyt nh rng bo mt nh gi l cn thit, mt H thng thng tin in t Chnh sch An ninh (SEISP) cng phi c sn xut. i vi mt s mc nh gi mc tiu,M hnh mt chnh sch an ninh (SPM) cng phi c sn xut. SSP c cha mt nh ngha ca phm vi ca h thng, cc mc tiu an ninh ca h thng,bin php an ninh c thi hnh v phn b trch nhim thi hnh (tc l n tng ng cht ch vi Chnh sch Bo mt h thng nh m t trong cc tiu chun). N cng cha mt ngun gc ca cc mc nh gi cn thit da trn mc tiu c im chnh ca h thng v mi trng ca n. Nu cn thit, SEISP mt l pht trin t SSP. N l mt tuyn b chi tit hn v phn cng v kha cnh bo mt phn mm ca SSP, nhng vn cn trong mt phong cch khng chnh thc: n tng ng mt chnh sch an ninh k thut c m t trong cc tiu ch ny. SPM l mt song song c im k thut ca an ninh thc thi cc chc nng ca SEISP mt trong mt chnh thc hoc semiformal phong cch. N c sn xut nh mt c im k thut song song l cn thit cho cp nh gi mc tiu. 2,30 Mt ti liu b l mt danh sch cc tuyn b v thc thi chc nng bo mt c cung cp bi mt sn phm, c thc hin bi nh pht trin ca sn phm, v th hin semiformal phong cch bng cch s dng ngn ng b quy nh ti Ph lc B ca ti liu ny.N bao gm cc gi nh v hn ch v cch thc sn phm phi c s dng cho nhng cng b ny c gi

tr. N cng bao gm mt xc nh cc mc tiu an ninh,c im k thut chnh thc ca cc khiu kin, mt mi tng quan an ninh tuyn b thc thi chc nng vi cc mc tiu an ninh, v nh gi mc mong mun, hon thnh mt mc tiu sn phm bo mt theo yu cu ca cc tiu ch ny. 2,31 N s c d dng hn hiu mt mc tiu an ninh nu cc c im k thut bo mt ca n chc nng thc thi c trnh by theo mt th t hp l. iu ny s h tr so snh cc mc tiu an ninh v n gin ha cng tc nh gi. C tn ti cc nhm t nhin ca cc chc nng bo mt thc thi cung cp cho t hng nh vy, v mt ngh b tm nhm chung cho nhm nh vy l bao gm nh l mt phn ca cc tiu ch ny. 2.32 nhm c ngh l: Xc nh v xc thc Kim sot truy cp Trch nhim Kim ton i tng ti s dng chnh xc tin cy ca dch v Trao i d liu. 2,33 l khuyn co rng cc nhm ny tiu chun c s dng bt c khi no c th. Ca h s dng s n gin ha so snh vi cc mc tiu an ninh khc v lm cho n d dng hn xc nh c hoc khng phi l mt mc tiu an ninh c bit bao gm, hoc ngn cn,chc nng ca mt loi c bit. Xc nh v xc thc 2,34 Trong cc ngn chn nhiu s c yu cu xc nh v kim sot ngi dng c php truy cp vo cc ngun lc c kim sot bi TOE. iu ny khng ch lin quan n tuyn b thit lp bn sc ca ngi dng, nhng cng xc nhn rng ngi s dng thc s l ngi s dng tuyn b. iu ny c thc hin bi ngi s dng cung cp cc TOE vi mt s thng tin c bit n bi TOE c lin kt vi ngi s dng trong cu hi. 2,35 nhm ny s bao gm bt k chc nng d nh thnh lp v xc minh mt tuyn b nhn dng. 2,36 nhm ny bao gm bt k chc nng cho php nhn dng ngi dng mi c thm vo, v danh tnh ngi dng c c g b hoc v hiu. Tng t nh vy, n bao gm bt

k chc nng to ra, thay i, hoc cho php ngi dng c thm quyn kim tra, The xc thc thng tin cn thit xc minh danh tnh ca ngi s dng c bit. N cng bao gm cc chc nng m bo tnh ton vn, hoc ngn chn tri php s dng, thng tin xc thc. N bao gm bt k chc nng hn ch c hi cho nhng c gng lp i lp li thit lp mt bn sc sai.Kim sot truy cp 2,37 Trong cc ngn chn nhiu s c yu cu m bo rng ngi dng v cc qu trnh din xut thay mt ca h l ngn cn tip cn thng tin hoc cc ngun ti nguyn m h khng c u quyn truy cp hoc khng c nhu cu truy cp. Tng t nh vy, s c yu cu lin quan n vic to ra hoc sa i tri php (bao gm c xa) thng tin. 2,38 nhm ny s bao gm bt k chc nng no c dng kim sot dng chy ca thng tin gia, v s dng cc ngun lc, ngi s dng, quy trnh v cc i tng. iu ny bao gm chnh quyn (tc l vic cp, thu hi) ca quyn truy cp v xc minh. 2,39 nhm ny s bao gm bt k chc nng thit lp v duy tr bt k danh sch hoc cc quy nh v cc quyn thc hin cc loi khc nhau truy cp. N s bao gm bt k chc nng c lin quan vi truy cp tm thi hn ch cho cc i tng c ng thi truy cp ca ngi s dng mt s hoc cc quy trnh v cn thit duy tr s thng nht v chnh xc cc i tng ny. N s bao gm bt k chc nng m bo rng khi to ra, mc nh danh sch truy cp hoc cc quy tc truy cp p dng cho cc i tng. N bao gm bt k chc nng kim sot cng tc tuyn truyn v quyn truy cp cho cc i tng. N cng c bao gm bt k chc nng kim sot suy lun thng tin ca tp hp d liu t truy cp nu khng hp php. 2,40 Trong cc ngn chn nhiu s c yu cu m bo rng thng tin c lin quan l ghi nhn v nhng hnh ng c thc hin bi ngi s dng hoc cc qu trnh hnh ng thay mt h rng cc hu qu ca nhng hnh ng sau ny c th c lin kt vi ngi s dng trong cu hi,v ngi s dng chu trch nhim cho hnh ng ca mnh. 2,41 nhm ny s bao gm bt k chc nng no c nh ghi li vic thc hin quyn c lin quan n an ninh. 2,42 nhm ny bao gm cc chc nng lin quan n vic thu thp, bo v v phn tch cc thng tin nh vy. Chc nng nht nh c th p ng yu cu cho c hai trch nhim kim tra v quay v do c lin quan n c hai nhm. Nh vy chc nng c th c tnh theo mt trong hai nhm, nhng s c cross-tham chiu khc

nhm.Kim ton 2,43 Trong cc ngn chn nhiu s c yu cu m bo rng thng tin y iu tra ghi nhn v nhng s kin thng xuyn v c bit m sau ny c th xc nh nu vi phm an ninh thc s xy ra, v nu c nhng thng tin hoc cc ngun lc khc c tha hip. 2,44 nhm ny s bao gm bt k chc nng no c nh pht hin v iu tra cc s kin m c th i din cho mt mi e da i vi an ninh. 2,45 nhm ny bao gm cc chc nng lin quan n vic thu thp, bo v v phn tch cc thng tin nh vy. Phn tch nh vy cng c th bao gm phn tch xu hng s dng c gng pht hin cc hnh vi vi phm tim nng ca cc mc tiu an ninh trc khi vi phm mt xy ra. Chc nng nht nh c th p ng yu cu cho c trch nhim v auditability v v vy c lin quan n c hai nhm. Chc nng ny c th c bao gm theo mt trong hai nhm, nhng phi c tham kho qua cc nhm khc.i tng ti s dng 2,46Trong ngn chn nhiu s c yu cu m bo rng cc ngun lc nh chnh khu vc b nh v dung lng lu tr a c th c ti s dng trong khi vn gi an ninh. 2,47 nhm ny bao gm bt k chc nng dng kim sot vic ti s dng ca cc i tng d liu. 2,48 nhm ny s bao gm cc chc nng khi to hoc r rng cha c phn b hoc phn b li i tng d liu. N bao gm bt k chc nng khi to hoc r rng cc phng tin truyn thng c th ti s dng nh va y nh bng t, hoc xa thit b u ra nh mn hnh hin th khi khng s dng. chnh xc 2,49 Trong cc ngn chn nhiu s c yu cu m bo mi quan h c th gia phn khc nhau ca d liu c duy tr mt cch chnh xc, v d liu c truyn gia quy trnh khng thay i. 2,50 nhm ny s bao gm bt k chc nng no c nh m bo rng d liu khng c sa i mt cch tri php. 2.51 nhm ny bao gm cc chc nng xc nh, thit lp v duy tr tnh chnh xc ca cc mi quan h gia cc d liu lin quan. N cng bao gm cc chc nng m bo rng khi d liu c truyn gia cc qu trnh, ngi s dng v cc i tng, c th pht hin hoc ngn chn s mt mt, b sung hoc thay i, v rng n khng phi l c th thay i ngun tuyn b hoc thc t v im n ca vic chuyn giao d liu. tin cy ca dch v

2,52 Trong cc ngn chn nhiu s c yu cu m bo rng thi gian nhim v quan trng thc hin khi h l cn thit, v khng sm hn hoc mun, v rng khng-thi gian nhim v quan trng khng c th c thc hin thi im quan trng. Tng t nh vy, trong ngn chn nhiu s c yu cu m bo rng truy cp vo ti nguyn c th c khi n l cn thit, v cc ngun lc c yu cu hoc c gi li khng cn thit. 2,53 nhm ny s bao gm bt k chc nng m bo rng ngun lc truy cp v c th s dng theo yu cu ca mt t chc c thm quyn (tc l mt ngi s dng hoc mt qu trnh hnh ng thay mt cho mnh) v ngn chn hoc hn ch s can thip vi thi gian quan trng hot ng. 2,54 nhm ny s bao gm pht hin li v chc nng khi phc li nhm mc ch hn ch tc ng ca li trn cc hot ng ca cc TOE v do gim thiu s gin on hoc mt dch v. N cng bao gm bt k chc nng lp k hoch m bo rng TOE phn ng vi cc s kin bn ngoi v sn xut cc kt qu u ra trong thi hn quy nh.Trao i d liu 2,55 Trong cc ngn chn nhiu s c yu cu i vi s an ton ca d liu trong qu trnh truyn trn cc knh truyn thng. iu ny thng c gi l thng tin lin lc, an ninh, khc bit vi my tnh (IT) an ninh. 2,56 nhm ny s bao gm bt k chc nng no c nh m bo s an ton ca d liu trong qu trnh truyn trn cc knh truyn thng. l khuyn co rng nhng chc nng c chia theo cc phn nhm sau y c ly t OSI An ninh Kin trc: Xc thc Kim sot truy cp D liu bo mt Ton vn d liu Khng-thoi thc 2,57 Chc nng s c nhm li theo cc phn nhm ny trong mt cch ph hp vi mnh s dng v nh ngha trong OSI Kin trc [OSI. 2,58 Mt s chc nng c th p ng yu cu cho c hai my tnh v truyn thng an ninh v v vy c lin quan n cc nhm khc. Trong trng hp ny c c mt cho tham chiu n cc tiu khc c lin quan.c xc nh trc lp hc 2,59 Nhiu h thng s c cc mc tiu an ninh tng t, n thng c th xc nh cc b ph

bin thc thi cc chc nng bo mt p ng mc tiu . Tng t nh vy, nhiu sn phm bo mt s c nhm p ng nhu cu th trng cng v do c chc nng tng t. Cc lp hc ny c xc nh trc ca chung chc nng c th c s dng lm c s cho h thng an ninh c nhn v sn phm mc tiu, hoc c th c s dng nh hng dn, gip ngi s dng trong vic la chn an ninh thch hp chc nng p ng cc mc tiu an ninh c bit ca h, v gip cc nh sn xut chn cc chc nng bao gm trong sn phm. c c li ch ti a t nh vy ph bin, l mong mun rng cc tiu chun cho cc lp chc nng c xc nh trc tn ti. Cc tiu ch ny c do c thit k cho php tham chiu trong an ninh cc mc tiu n cc lp hc c xc nh trc cc chc nng bo mt thc thi. Bt k an ninh mc tiu c th tham kho mt hoc nhiu lp c xc nh trc xc nh mt phn hoc tt c cc dng ti a an ninh thc thi chc nng. 2,60 Cc t chc tiu chun ha hoc i din cho cc lnh vc th trng c th c pht trin mt s nh ngha tiu chun. l d on rng s sn c cc tiu ch ny s khuyn khch s pht trin ca cc lp hc c xc nh trc, di cc hnh thc ph hp s dng vi cc tiu ch ny. Tuy nhin, k t IT, an ninh s tip tc pht trin nhanh chng, n s l cn thit xc nh cc lp hc c xc nh trc trong tng lai nh cc nhm mi ca cc chc nng tr nn ph bin lm cho cc lp hc nh vy ng gi. 2,61 Cng nh cc c im k thut ca cc chc nng bo mt ca n, mi lp hc c xc nh trc s nh nc mc tiu ca lp, cho s dng ca n d kin, v l do cho s la chn ca cc chc nng c th bao gm. Cc lp hc c xc nh trc cng c th cha khc thng tin cn thit a vo trong mt mc tiu an ninh, chng hn nh cc chi tit ca bt k c ch u quyn cho mt lp. Vi iu kin, chi tit ca ni dung ca cc lp hc ny c cng b, cc chi tit khng cn phi c lp i lp li trong mi mc tiu an ninh ti liu tham kho chng. 2.62 Vic s dng cc lp hc c xc nh trc l khng bt buc. S c trng hp mt nh ti tr thm nh s khng s dng chng, v trng hp ni m chng khng th c s dng, v d v khng c lp hc c xc nh trc m t cc tnh nng bo mt mong mun. L mt thay th cho vic s dng cc lp hc c xc nh trc, an ninh thc thi chc nng c th lun lun c quy nh ring. Mt tuyn b ca cc chc nng c nhn c th c s dng kt hp vi mt hoc nhiu lp hc c xc nh trc mt phn, nhng khng hon ton, m

t mt mc tiu an ninh. Tuy nhin, mt lp c xc nh trc ch c quy nh c th nh mt phn ca mt mc tiu an ninh nu tt c cc kha cnh ca mt phn hnh thc lp hc ca mc tiu. 2,63 Mi v d c xc nh trc cc lp hc c a ra trong Ph lc A. Nhng c bt ngun t cc lp chc nng c a ra trong [ZSIEC]. Tt c c trnh by theo phong cch khng chnh thc, v trong phin bn hin ti ca ITSEC cc ch ang dng d tho. l: a) V d cc lp hc chc nng F-C1, F-C2, F-B1, B2-F v F-B3 phn cp cc lp hc b mt ra lnh tng ng cht ch vi cc yu cu chc nng ca cc lp TCSEC C1 n A1 [TCSEC. b) V d lp chc nng F-IN l cho ngn chn vi tnh ton vn cao yu cu i vi cc d liu v cc chng trnh. Yu cu nh vy c th l cn thit ngn chn c s d liu, v d. c) V d lp chc nng F-AV t yu cu cao i vi s sn c mt TOE hon chnh hoc cc chc nng c bit ca mt TOE. Yu cu nh vy ng k cho cc ngn chn kim sot qu trnh sn xut, v d. d) V d lp chc nng F-DI t yu cu cao i vi cc bo v ton vn d liu trong qu trnh truyn d liu. 2.64 V d chc nng Class F-DC l dnh cho cc ngn chn c nhu cu cao v tnh bo mt ca d liu trong qu trnh truyn d liu. Mt v d ng c vin cho cc lp hc ny l mt thit b m ha. V d lp chc nng ca F-DX dnh cho mng li cao nhu cu v bo mt v tnh ton vn ca thng tin c truyn t. V d, iu ny c th l trng hp khi nhy cm thng tin c thng qua khng an ton (v d: public) mng.Khng c hn ch v cc chc nng c th m c th c tuyn b hoc yu cu nh l mt mc tiu an ninh. An ninh thc thi chc nng ca bt k mc tiu an ninh c th c m t y trong nh dng c im k thut c sn. S tn ti ca cc lp c xc nh trc s khng do hn ch cc nh sn xut sn phm tm kim thc y nh nc ca ngh thut, nhng s gim bt cng vic lin quan n quy nh c th trong cc sn phm hoc cc h thng tng t nh khun mu c m t, v s cung cp mt c s so snh cc chc nng c cung cp. Sn phm an ninh cc mc tiu c th, ngay c khi tuyn b s ph hp vi mt lp hc c xc nh trc, quy nh c th hn ch b sung v chi tit ca mi

trng xung quanh cn thit gip ngi s dng tim nng xc nh xem sn phm ny s ph hp cho mi trng thc t trong th gii thc 2,65 Cc tiu ch ny khng quy nh vic s dng ca ring c quyn hoc tiu chun ha phng php hay phong cch cho cc c im k thut ca chc nng bo mt. Cng khng phi l bt k phng php hoc phong cch loi tr, min l cc yu cu trnh by v bng chng v nh gi mc mc tiu c p ng. i vi cc mc ch ca phn loi c th phng php tip cn c im k thut, ba loi phong cch c xc nh trong cc tiu ch: chnh thc, semiformal, v chnh thc. Mi loi phong cch l tip tc c m t di y. 2.66 Khng phi tt c mi ngi s cn phi s dng mt mc tiu an ninh s c lm quen vi chi tit k thut c vit bng mt phong cch semiformal hoc chnh thc. V vy, an ninh tt c cc mc tiu phi c cc c im k thut ca cc chc nng bo mt thc thi bng cch s dng l khng chnh thc phong cch. Mc d chi tit k thut chnh thc khng yu cu o to c bit hiu, h c xu hng khng r rng v khng chnh xc. Semiformal v chnh thc chi tit k thut lm gim kh nng ca s m h v khng chnh xc. Nh vy ti nh gi mc cao hn, cc c im k thut chnh thc ca an ninh thc thi chc nng c h tr bi mt c im k thut song song semiformal hoc chnh thc.

K thut c im k thut, phong cch c s dng trong mt mc tiu an ninh xc

nh mc tiu an ninh, v xc nh bt k quy nh hoc tuyn b an ninh c ch, nm ngoi phm vi ca cc tiu ch ny. 268 Nu mt mc tiu an ninh cn thit c mt c im k thut ca an ninh thc thi chc nng trong mt loi c bit ca phong cch, c im k thut c th c ton b hoc mt phn thay th bng mt tham chiu n mt hoc nhiu lp c xc nh trc bng vn bn trong phong cch nh vy. 2,69 Bt c khi no mt c im k thut theo phong cch no l cn thit, n c th c trnh by nh l mt n ti liu, hoc nhiu ti liu. Trng hp nhiu ti liu c s dng, mi quan h c ghi r. Thc k thut 2,70 Mt c im k thut chnh thc c vit bng ngn ng t nhin, ch khng phi l mt k hiu yu cu c bit hn ch c, quy c. Ngn ng t nhin l mt thut ng cho thng tin lin lc trong bt k li thng ni (v d: H Lan, Anh, Php, c). Thng s k thut c vit bng ngn ng t nhin khng thuc vo bt k hn ch c bit, nhng cn phi ph hp vi cc quy c thng thng cho rng ngn ng (v d: ng php v c php).

2,71 Mt c im k thut ngn ng t nhin c vit vi mc ch gim thiu s m h, (ti thiu) m bo rng tt c cc thut ng c s dng nht qun, v m bo rng bt k iu khon vi mt ngha chuyn ngnh (mt ngha khng c nh ngha trong mt c s dng rng ri t in) c nh ngha trong mt hoc nhiu bng ch gii thut, l bao gm hoc tham chiu. N khng m h c th c loi b hon ton. nh gi s tm cch xc nh v gii quyt bt k s m h cn li. Semiformal Thng s k thut 2.72 Phong cch semiformal ca c t yu cu s dng ca mt s k hiu hn ch (hoc k hiu), theo quy nh vi mt tp hp cc cng c m c bao gm trong hoc tham chiu bi cc c im k thut. Cc quy c c quy nh chnh thc. Nh vy k hiu s cho php cc c im k thut ca c nh hng ca mt chc nng v tt c cc iu kin c bit hoc li lin quan n chc nng . 2.73 Phong cch semiformal hoc c th c ha trong bi trnh by, hoc da trn gii hn s dng ngn ng t nhin (cho v d, cu trc cu b hn ch v t kha vi ngha c bit). V d ca cc phong cch semiformal bao gm dng chy d liu biu , s chuyn i trng thi, s thc th-mi quan h, cu trc d liu s , quy trnh hoc cc s cu trc chng trnh v ngh CCITT k hiu c im k thut SDL. 2,74 cu trc thit k v pht trin cc phng php thng thng kt hp t nht mt trong nhng semiformal k hiu cho cc yu cu bt gi, cng vi hng dn quy (V d, cc bin php ca cc phng php phc tp v qun l) lm th no s dng k hiu. V d v cc phng php thit k cu trc bao gm cc k hiu nh l:Yourdon Phng php cu trc [YSM], phn tch cu trc v thit k k thut[SADT], cu trc h thng Phn tch v Thit k Phng php [Trc], v cc Jackson cu trc Thit k [JSD] v Jackson cu trc lp trnh [JSP ] phng php. 2.75 Mt v d c th ca mt k hiu semiformal c s dng thnh cng trongnh ngha ca cc mc tiu an ninh l ngn ng b. Ngn ng b mt tp hp con ca ting Anh, t vng v hnh thc c php ca cu tuyn b b hn ch. N c thit k (nh tn cho thy) cung cp mt cch c cu trc trong tuyn b c th c thc hin v cc tnh nng bo mt ca sn phm. Cc Tuyn b Ngn ng cung cp cho vic s dng ngn ng t nhin din t nhng b phn ca nh ngha ca mt mc tiu an ninh, h tr nh ngha ca tuyn b an ninh thc thi chc nng. Mt nh ngha y ca ngn ng b, ph hp vi cc tiu ch ny, c th c tm thy trong Ph lc B. Chnh thc Thng s k thut

2.76 Phong cch chnh thc ca cc c im k thut c vit bng mt k hiu chnh thc da trn tt thit lp khi nim ton hc. Cc khi nim c s dng xc nh c php v ng ngha ca cc k hiu, v cc quy tc bng chng h tr cho l lun hp l. Chnh thc chi tit k thut phi c kh nng c hin th c ch diu t mt tp hp cc quy nh tin , v phi c kh nng hin th gi tr ca ti sn quan trng nh cung cp mt sn lng hp l cho tt c cc yu t u vo c th. Trong trng hp phn cp cp ca c im k thut tn ti, n phi c th chng minh rng mi cp duy tr The ti sn c thit lp cho mc trc y. 2,77 Cc quy tc c php v ng ngha h tr mt k hiu chnh thc c s dng trong bo mt mc tiu c trch nhim xc nh lm th no nhn bit cc cu trc r rng v xc nh ngha. Trng hp quy tc bng chng c s dng h tr l lun hp l, c c bng chng cho thy n l khng th ly c mu thun. Tt c cc quy tc h tr k hiu quy nh hoc tham chiu. Tt c cc cu trc c s dng trong mt chnh thc c im k thut c m t bi cc quy tc h tr. Chnh thc k hiu s cho php cc c im k thut ca c nh hng ca mt chc nng v tt c cc iu kin c bit hoc li lin quan n chc nng . 2,78 V d k hiu chnh thc l VDM, c m t trong [SSVDM, Z, c m t trong [ZRM], Ngn ng c im k thut nng cao, c m t trong [RSL], Ina Jo, m t [IJRM, c im k thut Gypsy Ngn ng, c m t trong [gypsy], v cc tiu chun ISO giao thc c im k thut ngn ng [LOTOS. Vic s dng cu trc t v (hoc khc) logic v l thuyt thit lp nh l mt k hiu chnh thc l chp nhn c, vi iu kin cng c (h tr quy tc) l ti liu hoc tham chiu (nh nu trn).Tnh nht qun ca thng s k thut song song trong cc phong cch khc nhau 2,79 chi tit k thut song song phi c trnh by theo cch nh vy rng mi quan h gia cc c im k thut r rng, v ni mi c im k thut a ch cng mt im, im c gii quyt lun. Thng s k thut song song c th c trnh by cc vn bn ring bit, hoc c th c xen k trong mt ti liu duy nht. 2,80 Trng hp khng r rng tn ti trong mt c im k thut chnh thc, chnh thc tng ng hoc semiformal c im k thut c trch nhim gii quyt s m h. Tuy nhin, n s l mt li cho thng s k thut song song khng ph hp. Bt k li nh vy phi c gii quyt bng ti liu tham kho bit thm thng tin bn ngoi cc mc tiu an ninh v mt hoc c hai thng s k thut sa i.M hnh chnh thc ca chnh sch bo mt

2,81 Ti nh gi mc E4 v trn, mt TOE phi thc hin mt m hnh c bn ca chnh sch an ninh, tc l phi c mt bo co tm tt ca cc nguyn tc quan trng an ninh TOE s thc thi. iu ny c th hin mt phong cch chnh thc, nh mt m hnh chnh thc ca chnh sch an ninh. Tt c hoc mt phn ca mt m hnh c cng b ph hp c th c tham chiu, nu khng mt m hnh c cung cp nh l mt phn ca mc tiu bo m. Bt k phong cch c t hnh thc xc nh trn c th c s dng xc nh mt m hnh. 2,82 Cc m hnh chnh thc khng bao gm tt c cc vn bo mt thc thi cc chc nng quy nh trong mc tiu an ninh. Tuy nhin, mt gii thch chnh thc ca m hnh trong v mc tiu an ninh s c cung cp, v phi cho thy rng cc mc tiu an ninh thc hin chnh sch bo mt c bn v khng cha cc chc nng m xung t vi chnh sch c bn. 2,83 V d v cc m hnh chnh thc ca chnh sch bo mt l: a) Cc m hnh ca Bell-La Padula BLP] - m hnh kim sot truy cp yu cu in hnh ca mt chnh sch an ninh quc gia v bo mt. b) Cc Clark v Wilson m hnh [CWM] - m hnh ha cc yu cu tnh ton vn h thng x l giao dch thng mi. c) Cc m hnh Brewer-Nash [BNM] - m hnh yu cu kim sot truy cp cho khch hng b mt, in hnh ca mt t chc dch v ti chnh. d) M hnh Eizenberg [EZBM] - m hnh quyn kim sot truy cp m thay i theo thi gian. e) M hnh Landwehr [LWM] - m hnh ha cc yu cu trao i d liu l tin nhn mng. III BO M - hiu qu 3,1 Chng ny t ra tiu chun nh gi gii quyt cc kha cnh hiu qu ca bo m cho mt mc tiu nh gi (TOE). ng c s cho nh gi l mc tiu an ninh, theo quy nh ti Chng 2, ng thi nh gi hiu qu, ph hp vi cc tiu ch t ra trong chng ny, v ng n, ph hp vi cc tiu ch t ra trong Chng 4 sau y. M t ca phng php tip cn cc 3.2nh gi hiu qu lin quan n vic xem xt cc kha cnh sau y caTOE: a) kh nng bo mt ca TOE thc thi chc nng v c ch rng buc cng mt cch l h tr ln nhau v cung cp tch hp hiu qu ton b; c) kh nng ca cc c ch bo mt ca TOE chu c tn cng trc tip;

d) - cho d l hng bo mt c bit n trong vic xy dng cc TOE c th trong thc t tha hip s an ton ca cc TOE; e) TOE khng th c cu hnh hoc s dng mt cch l khng an ton nhng m mt qun tr vin hoc ngi dng cui ca TOE cc hp l tin c an ton; 3, s ph hp ca cc chc nng bo mt ca TOE thi hnh chng li cc mi e da i vi an ninh ca TOE c xc nh trong mc tiu an ninh; xem l hng bo mt trong cc hot ng ca cc TOE c th thc hnh tha hip s an ton ca ccTOE.Vic nh gi tng kha cnh ca hiu qu xc nh trn thc hin bng cch s dng ti liu c cung cp bi nh ti tr v ti liu v nh gi kt qu t vic nh gi ng n ca cc TOE. iu ny c ngha mc d nh gi hiu qu c th tin hnh song song vi nh gi ng n, n khng th c hon thnh cho n sau khi kt qu cui cng ca nh gi chnh xc l c sn. 3,4 C th, nh gi hiu qu c da trn mt phn tch d b tn thng ca TOE. Phn tch ny c mc tiu ca vic tm kim cho tt c cc cch thc m n c th cho mt ngi s dng cc TOE tt, b qua, tham nhng, ph v, trc tip tn cng, hay ni cch khc l nh bi cc chc nng bo mt v c ch thc thi ca TOE. Mc ti thiu, phn tch tnh d tn thng ca ngi bo lnh phi xem xt tt c cc thng tin quy nh trong hnh 4 cp nh gi trong cu hi (tc l mt tm kim cc l hng c thc hin bng cch s dng mt phn ca tng s cc thng tin c cung cp nh ti tr cho rng mc nh gi). Nh nh gi mc tng, tiu chun ng n ca Chng 4 yu cu thng tin quy nh trong hnh 4 c cung cp mc ngy cng tng ca s cht ch, nh c ch ra bi vic s dng cc trng thi ng t,m t v gii thch. 3,5 Tt c cc c ch bo mt quan trng (tc l nhng c ch m tht bi s to ra mt im yu bo mt) c nh gi kh nng ca mnh chu c tn cng trc tip. Cc ti thiu sc mnh ca mi c ch quan trng s c nh gi cao hoc c bn, trung bnh hoc cao. 3,6 i vi sc mnh ti thiu ca mt c ch quan trng c nh gi c bn c r rng l n cung cp s bo v chng li lt tnh c ngu nhin, mc d n c th c kh nng b nh bi bi nhng k tn cng c kin thc. 3.7 i vi sc mnh ti thiu ca mt c ch quan trng nh gi trung bnh n s c r rng l n cung cp bo v chng li nhng k tn cng vi nhng c hi hn ch hoc ngun lc.

3,8 i vi sc mnh ti thiu ca mt c ch quan trng c nh gi cao th c r rng l n ch c th b nh bi bi k tn cng c mt mc cao ca chuyn mn, c hi v ngun lc, tn cng thnh cng c nh gi c vt qu bnh thng thc tin. 3,9 TOE ch s khng nh gi trn c s hiu qu nu mt khai thc d b tn thng, c tm thy trong qu trnh nh gi hiu qu, khng c loi b trc khi kt thc nh gi. iu ny bao gm cc phng php thnh cng trc tip tn cng c tm thy trong qu trnh nh gi sc mnh ti thiu ca c ch lm mt hiu lc nh tuyn b. Nu bt k l hng nh vy tn ti TOE s c trao tng mt mc nh gi tng th ca E0, ch ra rng n s khng ph hp vi s dng nh xut. 3,10 Hiu qu ca mt TOE l lun lun nh gi trong bi cnh an ninh c mc tiu. V d, mt sn phm bo mt bn cho thnh lp cng ty trong h thng c th cha cc knh b mt c c bit n. Tuy nhin, nu cc mc tiu an ninh h thng khng c truy cp vo cc yu cu kim sot v bo mt, sau s hin din ca b mt knh trong sn phm l khng thch hp v khng nh hng kh nng ca cc TOE p ng mc tiu an ninh ca n, v s khng gy ra cc TOE khng nh gi. Nu c yu cu truy cp h thng kim sot v bo mt, sau h thng an ninh mc tiu c th ch nh bng thng knh ti a c th chp nhn c b mt. Nu b mt cc knh c xc nh vt qu bng thng ny, hoc nu khng c bng thng thc s quy nh, sau thm nh vin phi xc nh nu b mt c xc nh knh s gy ra cc TOE khng nh gi trn cc cn c ca khng ph hp chc nng. H thng v sn phm 3.11 C nhng yu cu v cc ty chn khc nhau v ni dung ca mt mc tiu an ninh mt TOE, ty thuc vo liu TOE ang c nh gi l mt h thng hoc sn phm.Nhng khc bit ny c thit lp di Xy dng - Giai on 1 -Hiu qu Tiu chun - Xy dng 3,12 Cc nh ti tr c trch nhim cung cp cc ti liu sau y vi yu cu nh gi ng n: Ph hp Phn tch Rng buc phn tch Sc mnh ca c ch phn tch Danh sch cc l hng c bit n trong xy dng. Aspect 1 - ph hp ca tnh nng 3,13 3,13 Nh l mt phn ca ti liu cn thit cho vic nh gi ng n, nh ti tr s cung cp mt mc tiu an ninh. L mt phn ca vic nh gi ng n, l mc tiu c kim tra bo him v nht qun. i vi kha cnh ny ca hiu qu mc tiu an ninh c s dng xc

nh liu bo m thc thi cc chc nng v cc c ch ca TOE cc thc t s chng li mi e da n s an ton ca cc TOE c xc nh trong mc tiu an ninh. 3,14 Cc phn tch ph hp s lin kt cc chc nng bo mt v c ch thc thi cc mi e da c lit k trong cc mc tiu an ninh, m chng c thit k truy cp.Yu cu i vi chng c 3.15 Phn tch ph hp s hin th nh th no cc mi e da chng li an ninh thc thi cc chc nng v c ch. N s cho thy rng khng c mi e da khng y phn i bi mt hoc nhiu chc nng bo mt quy nh vic thi hnh.Phn tch c thc hin bng cch s dng, mc ti thiu, tt c cc thng tin c a ra trong hnh 4 mc nh gi trong cu hi. 3.15 Thm nh Actions 3.16 Kim tra phn tch ph hp c cung cp p ng tt c yu cu v ni dung v trnh by v bng chng. Kim tra xem cc phn tch xem xt tt c cc thng tin c a ra trong hnh 4 mc nh gi trong cu hi.Aspect 2 - Rng buc ca chc nng 3,17 3,17 Kha cnh ca hiu qu iu tra kh nng bo mt thc thi cc chc nng v c ch ca cc TOE lm vic cng nhau trong mt cch m l c hai bn h tr v cung cp mt tng th tch hp v hiu qu.Yu cu v ni dung v trnh by 3,18 Phn tch rng buc trch nhim cung cp mt phn tch ca tt c cc mi tng quan tim nng gia cc chc nng bo mt v c ch thc thi.Yu cu i vi chng c 3,19 Phn tch lin kt c cho thy rng n khng phi l c th gy ra bt k an ninh thc thi cc chc nng hoc c ch xung t vi hoc mu thun vi cc mc ch khc an ninh thc thi chc nng hoc cc c ch. Phn tch phi c thc hin s dng mc ti thiu, tt c cc thng tin c a ra trong hnh 4 cho mc nh gi Thm nh Actions 3,20 Kim tra vic phn tch lin kt c cung cp p ng tt c yu cu v ni dung v trnh by v bng chng. Kim tra xem cc phn tch xem xt tt c cc thng tin c a ra trong hnh 4 mc nh gi trong cu hi. Aspect 3 - Sc mnh ca c ch 3,21 3,21 Ngay c nu mt c ch bo mt thc thi khng c th c b qua, v hiu ho, b hng, hoc ph v, n vn c th c th nh bi n bng mt cuc tn cng trc tip da trn thiu st trong cc thut ton c bn, nguyn tc ca n hoc ti sn. i vi kha cnh ny hiu qu kh nng ca cc c ch ny chu c cuc tn cng trc tip nh gi. Kha cnh ca hiu qu

ny c phn bit vi cc kha cnh khc ch n cn phi xem xt mc ngun lc cn thit cho mt k tn cng thc hin mt cuc tn cng thnh cng. Yu cu v ni dung v trnh by 3,22 Sc mnh ca c ch phn tch c lit k tt c cc c ch bo mt thc thi c xc nh l quan trng trong TOE. N bao gm hoc tham chiu phn tch cc thut ton c bn, nguyn tc v tnh cht ca nhng c ch.Yu cu i vi chng c 3.23 Sc mnh ca c ch phn tch c cho thy rng tt c cc c ch quan trng p ng tuyn b ti thiu sc mnh ca c ch nh gi, theo quy nh ti cc khon 3,6 3.8: trong trng hp cc c ch m ha ny s mang hnh thc ca mt tuyn b xc nhn t c quan quc gia thch hp. Phn tch khc c trch nhim c thc hin bng cch s dng, mc ti thiu, tt c cc thng tin c a ra trong hnh 4 cho nh gi mc trong cu hi. Thm nh Actions 3,24 Kim tra xem tt c cc c ch rt quan trng c xc nh nh vy. Kim tra xem sc mnh ca c ch phn tch cung cp p ng cc yu cu v ni dung v trnh by bng chng. Kim tra xem cc phn tch xem xt tt c cc thng tin c a ra trong hnh 4 mc nh gi trong cu hi. Kim tra xem thng s k thut / nh ngha ca tt c cc c ch quan trng h tr ti thiu tuyn b ITSEC sc mnh nh gi. Thc hin thm nhp th nghim cn thit xc nhn hoc bc b sc mnh ti thiu tuyn b cc c ch. 3,25 Trc v trong khi cc kha cnh khc nh gi ca cc TOE, khc nhau l hng trong vic xy dng cc TOE (chng hn nh cch ca tt, b qua, h hng, ph v chc nng bo mt thc thi v c ch) s c xc nh bi c hai nh ti tr v thm nh. i vi iu ny kha cnh ca hiu qu cc l hng bit c nh gi xc nh cho d h trong thc t c th tha hip s bo mt ca TOE theo quy nh ca mc tiu an ninh. 3,26Danh sch cc l hng bit c cung cp bi nh ti tr phi xc nh tt c l hng trong vic xy dng ca TOE c bit n vi anh ta. U ban s xc nh mi c bit n d b tn thng, cung cp mt phn tch v tc ng tim nng ca n, v xc nh xut bin php hoc cung cp i ph vi tc ng ca n. 3,27 Phn tch v tc ng tim nng ca mi l hng c bit n c ch ra rng d b tn thng trong cu hi c th khng c khai thc trong mi trng d nh cho TOE, bi v mt

trong hai: - L hng ny c y , an ninh, vt tri c ch, hoc - N c th c hin th rng l hng ny l khng thch hp vi mc tiu an ninh, s khng tn ti trong thc t, hoc c th phn i y bng ti liu k thut, nhn s, bin php an ninh th tc hoc vt l bn ngoi TOE. Nhng bin php an ninh bn ngoi c trch nhim c xc nh trong (hoc c trch nhim c thm vo) cc ti liu hng dn thch hp. 3,28 Kim tra xem danh sch cc l hng c bit n trong xy dng p ng tt c yu cu ni dung v trnh by bng chng a ra trn. Kim tra xem cc phn tch v tc ng tim nng ca mi l hng xem xt tt c cc thng tin c a ra trong hnh 4 cp nh gi trong cu hi. Thc hin c lp d b tn thng phn tch, c tnh n c nim yt v bt k khc c bit n l hng xy dng c tm thy trong qu trnh nh gi. Kim tra xem tt c cc kt hp cc l hng c bit n c gii quyt. Kim tra xem cc phn tch ca tim nng tc ng ca l hng khng cha khng c giy t hoc khng hp l gi nh v mi trng d nh. Kim tra xem tt c cc gi nh v yu cu i vi cc bin php an ninh bn ngoi c c ti liu mt cch thch hp.Thc hin th nghim thm nhp xc nhn hay bc b cho d c bit n l hng thc s khai thc trong thc t. 3,29 Cc nh ti tr c trch nhim cung cp cc ti liu sau y vi yu cu nh gi ng n: D s dng phn tch Danh sch cc l hng c bit n trong s dng hot ng. 3,30 Kha cnh ny ca hiu qu iu tra cho d TOE c th c cu hnh hoc c s dng trong mt cch no l khng an ton nhng mt qun tr vin hoc ngi dng cui ca TOE hp l s tin l an ton. 3,31 D dng phn tch s dng s xc nh cc ch hot ng ca cc TOE, bao gm khng hot ng hoc li hot ng sau y, hu qu ca h v tc ng i vi vic duy tr hot ng an ton. 3,32 D dng phn tch s dng c cho thy c li ca con ngi hoc cc hot ng deactivates hoc v hiu ha chc nng bo mt thc thi hoc cc c ch s c d dng pht hin. N s cho thy rng nu n c th cu hnh hoc gy ra cc TOE c c s dng trong mt cch l khng an ton (tc l chc nng bo mt thc thi v cc c ch ca TOE cc khng p ng cc mc tiu an ninh), khi mt ngi dng cui hoc qun tr vin ca cc TOE

hp l s tin rng n c an ton, sau iu ny thc t cng s c pht hin. 3,33 Kim tra d dng phn tch s dng cung cp p ng tt c yu cu v ni dung v trnh by v bng chng. Kim tra xem cc phn tch xem xt tt c cc thng tin c a ra trong hnh 4 mc nh gi trong cu hi. Kim tra phn tch gi nh khng hp l hoc khng c giy t v d nh mi trng. Kim tra xem tt c cc gi nh v yu cu i vi an ninh bn ngoi cc bin php (chng hn nh bn ngoi th tc, iu khin vt l v nhn vin) c ph hp ti liu. Lp li bt k th tc cu hnh v ci t ti kim tra xem TOE c th c cu hnh v s dng an ton, bng cch s dng ch c ngi s dng v qun l ti liu c hng dn. Thc hin kim tra khc khi cn thit xc nhn hay bc b d dng phn tch s dng. 3.34 Trc v trong khi cc kha cnh khc nh gi ca cc TOE, khc nhau l hng trong hot ng ca cc TOE s c xc nh bi c hai nh ti tr v thm nh. i vi kha cnh ca hiu qu ny nhng l hng bit nh gi xc nh liu h c trong thc t c th tha hip an ninh ca TOE nh quy nh ca mc tiu an ninh. 3,35 Danh sch cc l hng bit c cung cp bi nh ti tr phi xc nh tt c l hng trong hot ng ca TOE c bit n vi anh. N s xc nh tng c bit n d b tn thng, cung cp mt phn tch v tc ng tim nng ca n, v xc nh cc bin php xut hoc cung cp i ph vi tc ng ca n. 3,36 Phn tch v tc ng tim nng ca mi l hng c bit n c ch ra rng d b tn thng trong cu hi c th khng c khai thc trong mi trng d nh cho TOE, bi v mt trong hai: - L hng c y bo him khc, khng tha hip, bn ngoi bin php an ninh, hoc - N c th c hin th rng l hng ny khng lin quan n mc tiu an ninh, s khng c khai thc trong thc t.Phn tch c thc hin bng cch s dng, mc ti thiu, tt c cc thng tin c a ra trong mc nh gi trong cu hi. Bt k bn ngoi yu cu bo mt Cc bin php c xc nh trong (hoc c thm vo) thch hp ti liu. 3,37 Kim tra danh sch cc l hng c bit n trong hot ng p ng tt c yu cu i vi ni dung v trnh by bng chng a ra trn. Kim tra xem cc phn tch ca tc ng tim nng ca mi l hng xem xt tt c cc thng tin cung cp trong hnh 4 mc nh gi trong cu hi. Thc hin c lp d b tn thng phn tch, c tnh n c nim yt v bt k khc c bit n l hng hot ng c tm thy trong qu trnh nh gi. Kim tra xem tt

c cc kt hp caCc l hng bit c gii quyt. Kim tra xem cc phn tch v tim nng tc ng ca cc l hng khng cha cc gi nh khng c giy t hoc khng hp l v mi trng d nh. Kim tra xem tt c cc gi nh v yu cu i vi bin php an ninh bn ngoi c c ti liu mt cch thch hp.Thc hin th nghim thm nhp xc nhn hay bc b cho d l hng bitthc s khai thc trong thc t. IV BO M - chnh xc Gii thiu 4,1Chng ny a ra tiu chun nh gi gii quyt cc kha cnh ng n ca bo m cho mt mc tiu nh gi (TOE). ng c s cho nh gi l mt mc tiu an ninh quy nh ti ph hp vi Chng 2. Mc tiu bo m c cc yu t cn thit quy nh ti Chng 2 cho mt h thng hoc sn phm thch hp. iu ny bao gm cc mc nh gi mc tiu v nh gi tuyn b cho sc mnh ti thiu ca c ch. Cc kha cnh hiu qu m bo c bao ph bi cc tiu ch chi tit ti Chng 3. 4,2 By nh gi mc c quy nh i vi nim tin vo tnh chnh xc TOE. E0 ch nh cp thp nht v E6 cao nht. 4,3 by cp nh gi c th c m t nh sau:Cp E0 4,4 Mc ny i din cho m bo khng y . Cp E1 4,5 cp ny c phi l mc tiu an ninh v m t chnh thc ca thit k kin trc ca cc TOE. Chc nng kim tra phi ch ra rng TOE p ng mc tiu an ninh ca n.Cp E2 4,6 Ngoi cc yu cu cp E1, c c mt m t khng chnh thc thit k chi tit. Bng chng ca s th nghim chc nng c nh gi. C c kim sot cu hnh h thng v phn phi mt th tc c ph duyt.Cp E3 4,7 Ngoi ra cc yu cu v mc E2, m ngun v / hoc phn cng bn v tng ng vi c ch bo mt c nh gi. Bng chng th nghim cc c ch c nh gi.Cp E4 4,8 Ngoi ra cc yu cu cho E3 mc , c c mt chnh thc c bn m hnh chnh sch an ninh h tr mc tiu an ninh. An ninh thc thi chc nng, thit k kin trc v thit k chi tit quy nh c th trong mt semiformal phong cch. Cp E5 4,9 Ngoi ra cc yu cu cho cp E4, c c mt s tng ng gn gia cc thit k chi tit v m ngun v / hoc phn cng bn v.Cp E6 4,10 Ngoi ra cc yu cu cp E5, chc nng bo mt thc thi v thit k kin trc c quy

nh trong mt phong cch chnh thc, ph hp vi quy nh c bn chnh thc m hnh chnh sch an ninh. Tm tt cc Yu cu 4,11Phn cn li ca chng ny c cha cc tiu ch chi tit s c hi lng mi mc nh gi chnh xc, thuc cc nhm chi tit, lp i lp li cho mi mc E1 n E6. S khc bit ln gia cc cp theo t thm yu cu trong vic iu tra ca cc qu trnh pht trin. h tr s hiu bit v nhng khc bit ny, cc s sau y cho thy mi quan h gia cc hng mc chnh c cung cp bi nh ti tr v mc nh gi m ti h ln u tin yu cu ca thm nh vin. 4,12 Cc tiu ch nh gi nh gi chnh xc phn bit gia tiu chun lin quan n cch TOE c pht trin (xy dng) v tiu chun lin quan n vic cch thc m n s c s dng (hot ng). i vi mi mc nh gi, nhng nh gi tiu chun tip tc chia nh theo cc giai on khc nhau v cc kha cnh. 4,13 i vi mi ti liu, kha cnh hoc giai on m phi c cung cp kim tra xc nh, tip theo bng cc yu cu cho ni dung v trnh by ca mnh hoc cho th tc v tiu chun th phi xc nh, tip theo l bng chng cn thit hin th rng cc tiu ch trong cu hi c p ng v cui cng l hnh ng c thc hin thm nh nu. 4,14 lm r, k t khi c yu cu khc nhau ng k nh gi mi mc, tiu chun cho mi cp c thit lp ring bit. Tiu ch mi hoc thay i mi cp c in m. C mt nhu cu chung cho s cht ch hn v su trong cc bng chng c cung cp mc nh gi cao hn. iu ny c phn nh trong s dng tin b ca nh nc ng t, m t v gii thch cc cp khc nhau trong nhiu tiu chun cho ni dung v trnh by khng nu khng thay i. 4,15 Ngoi tr ti E1, gnh nng cho vic cung cp cc bng chng l cc nh ti tr. y l sau kim tra hoc kim ton bi cc thm nh. Mt yu cu b sung sn xut bng chng l ch t trn thm nh khi hnh ng c lp l cn thit cung cp s t tin cn thit. V d, c nhng yu cu cung cp bng chng ca th nghim nng ng t trn c hai nh ti tr v thm nh. Cc chnh yu cu l dnh cho cc nh ti tr cung cp bng chng, trong k hoch kim tra c th v kim tra t qu, sn xut nh l mt phn ca qu trnh pht trin bnh thng cho h thng hoc n phm . Yu cu t trn thm nh cho thy rng ng im tra cc kt qu c cung cp bi nh ti tr m cn thc hin cc bi kim tra ring ca mnh kim tra tnh y , ton din v chnh xc ca nh ti tr cung cp th nghim, v cng gii

quyt bt k im khng thng nht r rng, li c tm thy trong kt qu ca nhng bi kim tra.Kim tra 4,16 c xem nh l mt kha cnh ca m bo cht lng. Trong sut nhng tiu ch l gi nh rng mt chng trnh m bo cht lng c gii thiu v ang hot ng trong sut ton b vng i ca cc TOE. Chng trnh m bo cht lng ny c bao gm vic to ra, duy tr v hy dit ca tt c cc chng trnh, ti liu v phn cng lin quan n chn. Cc tiu ch nu trong ti liu ny c th hng dn m bo cht lng gim nh xem chng trnh l cho mc nh gi m TOE l nhm mc tiu. 4,17 Cc on sau y m t cch b tr v ni dung ca tiu chun s c c s dng cho mi cp nh gi t E1 n E6. H l ph hp vi tng cp hc v s khng c lp li cho mi ngi trong s h. on trong mi c nhn mc nh gi c nh s nh sau: . nh vy, v d, on th 3 ca cp E2 s E2.3. Null on vn c chn vo ni cn thit mi cp cng mt s on trong mi cp cp n cng mt ch .Xy dng - Qu trnh pht trin 4,18 Mt ngun tin chnh ca nim tin vo tnh chnh xc ca cc kha cnh bo mt ca TOE mt s hiu bit cc cch thc m n c pht trin. i vi mc ch ca cc tiu ch ny, bn giai on c xc nh trong qu trnh pht trin. Cc yu t gp phn vo s pht trin ca s t tin c xc nh trong tiu chun cho mi giai on ny ln lt. Bt k nh th no TOE thc s l sn xut bng chng c trnh by ph hp vi nhng giai on ny. Giai on 1 - Yu cu 4,19 Giai on u tin ca qu trnh pht trin bao gm sn xut an ninh mc tiu cho h thng hoc sn phm. Mc tiu an ninh l c s nh gi. N s bao gm mc nh gi mc tiu v nh gi tuyn b cho ti thiu sc mnh ca c ch.Giai on 2 - Thit k kin trc 4,20 Giai on ny ca qu trnh pht trin bao gm cc nh ngha mc tng th v thit k ca cc TOE. Ny c hnh thc m t mt c im k thut cp cao,xc nh cc cu trc c bn ca cc TOE, giao din bn ngoi ca n v tch bit ca n vo phn cng v cc thnh phn phn mm ln. Cc c im k thut s phn bit gia nhng g TOE (m t cp cao nht) v lm th no n s lm iu (The thit k cp cao nht). N l c bit quan trng l thit k kin trc cung cp ho mt tch r rng v hiu qu gia thi hnh bo mt v cc thnh phn. Tch c th t c th cht, hoc bng cch h tr bo v c ch cung cp phn cng hoc phn mm, hoc bng cch khc. Mt thit k tt giy php nh gi n lc tp trung vo cc

lnh vc hn ch ca cc TOE rng ng gp vo an ninh, v cho php thc hin cc mc tiu an ninh theo sau mt cch d dng, nh thit k c tinh ch thnh chi tit hn v ln hn. 4,21Giai on ny ca qu trnh pht trin bao gm cc s tinh t ca kin trc thit k ca cc TOE n mt mc chi tit c th c s dng lm c s cho lp trnh v hoc xy dng phn cng, tc l tt c cc giai on thit k v c im k thut bn di c im k thut cp cao ban u. Cc thnh phn c xc nh mc thp nht c im k thut c gi l thnh phn c bn, l t cc thnh phn c bn chi tit k thut m phn mm thc t v / hoc phn cng s c sn xut. Lc ny mc , thnh phn bo mt thc thi s c xc nh. Cng ti mc ny, mt s khng c bo m thc thi cc thnh phn c th c xc nh c s tht bi hoc s dng sai c th tha hip an ninh. Cc thnh phn ny c lin quan an ninh, nh ca h hot ng chnh xc l da vo cc TOE thc thi an ninh. Trung cp mc c im k thut c th tn ti, ty thuc vo phng php pht trin vic lm v phc tp ca cc TOE. iu quan trng l rng, cng nh cc chi tit k thut ca cc TOE tr thnh chi tit hn v t tru tng, chuyn i c thc hin trong mt cch m mt cch chnh xc duy tr mc ch ca m t cp cao nht.Giai on 4 - Thc hin 4,22 Giai on ny ca qu trnh pht trin bao gm vic thc hin cc chi tit thit k ca TOE cc phn cng v / hoc phn mm. Mi thnh phn c bn l ln u tin lp trnh hoc c xy dng t cc chi tit k thut thnh phn c bn. Nhng c nhn thnh phn c bn sau c kim tra v th nghim chng li cc chi tit k thut ca h. Thnh phn c nhn c bn sau c tch hp vi nhau mt cch c kim sot cho n khi hon thnh TOE tn ti. TOE hon thnh sau c kim tra v th nghim nh mt tng th chng li cc mc tiu an ninh. N c cng nhn rng vic th nghim c bn thnh phn hoc n v ln hn so vi c im k thut ca n ch c th hin th li hoc sai lch t cc c im k thut, khng bao gi vng mt ca cc li. V vy, n s l cn thit cc cp nh gi cao hn b sung th nghim bng cch phn tch.Xy dng - Mi trng pht trin 4,23 Mi trng pht trin bao gm cc bin php, th tc v tiu chun c s dng bi nh pht trin trong khi pht trin, sn xut v duy tr TOE. 4,24 Kim sot cu hnh bao gm cc iu khin p t bi nh pht trin trn ca mnh qu trnh pht trin, sn xut v bo tr, v d, m bo rng mi i din ca thit k hoc thc hin ca n c sn xut v thay i trong mt cch c kim sot, v c th c hin th tng ng mt cch chnh xc trc i din m trn n c da. nh gi ca kim sot cu hnh

bao gm s hiu bit cc th tc qun l cht lng ca nh pht trin. Tip theo cung cp cc phin bn u tin ca mt TOE, n gn nh l khng th trnh khi sa cha sai st, hoc sa i p ng cc mc tiu thay i, s c ngha l phin bn tip tc cc TOE s cn c xy dng v ban hnh. Do , cn thit m cu hnh kim sot ca TOE v ti liu ca n c duy tr theo ban u pht hnh v giao hng. Cu hnh kim sot l quan trng nh l mt cch cho pht trin m bo rng TOE khng c sa i theo cch nh vy lm mt hiu lc kt qu nh gi. Aspect 2 - Ngn ng lp trnh v bin dch 4,25 Kha cnh ny p dng i vi cc thnh phn c bn c thc hin trong phn mm v phn mm ch. N bao gm cc yu cu lin quan n cc ngn ng lp trnh, bin son cc cng c v h tr th vin thi gian chy c s dng pht trin TOE. Aspect 3 - pht trin an ninh 4,26 Pht trin an ninh bao gm, nhn vin vt l, th tc, k thut v cc bin php c s dng trong mi trng pht trin. N bao gm bo mt vt l v tr pht trin (s), v kim sot v vic la chn v r sot pht trin nhn vin. Mc tiu ca n l bo v pht trin khi b tn cng c ch v duy tr tnh bo mt ca thng tin thch hp. Hot ng - Ti liu hot ng 4,27 4,28 Ngi s dng ti liu l thng tin v TOE cung cp bi nh pht trin cho s dng bi ngi dng cui cng. Ti liu ny s gip ngi dng cui hiu c kh nng bo mt ca cc TOE, v ng gp ca ngi dng cui duy tr an ninh trong qu trnh s dng. Aspect 2 - Qun l Ti liu 4,29 4,27 Ti liu hot ng cung cp cc phng tin chnh m cc nh pht trin ca mt Ngn chn v khch hng giao tip ca mnh. Bo him d hiu ca n, v chnh xc l do yu t quan trng trong hot ng an ton ca cc TOE. N c th c coi l ri vo hai lp: thng tin cho ngi dng cui cng ngi s dng (

ti liu) v thng tin cho cc qun tr vin (Chnh quyn ti liu). Aspect 1 - ti liu 4,28 4,25 4,29 Qun l ti liu l thng tin v TOE cung cp bi cc pht trin s dng bi ngi qun tr. Thng tin ny c th bao gm thng tin 28 Thng Su 1991 Phin bn 1.2 Trang 53 BO M - chnh xc ITSEC khng c lin quan hoc ph hp vi ngi s dng cui cng. Ti liu ny s gip qun tr vin thit lp v vn hnh TOE trong mt cch an ton. Hot ng - Mi trng hot ng 4,30 Mi trng hot ng bao gm cc bin php, th tc v tiu chun quan tm n an ton giao hng, lp t v hot ng s dng mt TOE. Trong trng hp ca mt h thng c s dng, n c th nh gi thc t hot ng th tc. Cc trng hp khc, n ch c th nh gi xut cc th tc. Aspect 1 - Giao hng tn ni v cu hnh 4,31 4,31 Phn ny bao gm cc th tc c s dng duy tr an ninh trong qu trnh chuyn nhng

TOE hoc cc b phn thnh phn ca n cho ngi dng, c hai v cung cp ban u v nh mt phn ca sau thay i. N bao gm bt k th tc c bit hoc cc hot ng cn thit cu hnh cc TOE trong qu trnh ci t, hoc chng minh tnh xc thc ca giao TOE. Th tc v cc bin php nh vy l c s m bo rng bo v an ninh c cung cp bi TOE l khng b nh hng trong lc di chuyn hoc bng cch can thip vi cc tnh nng bo mt trong qu trnh ci t v cu hnh. ngi s dng trang web. Aspect 2 - Start-up v hot ng 4,32 Trang 54 4,30 4,32 iu ny bao gm cc th tc c s dng bi ngi qun tr vn hnh TOE mt cch an ton trn c s hng ngy. N bao gm khng ch ngy ngy hot ng (Vn chng hn nh bt u t h thng ln) nhng cng thng xuyn cc hot ng khc nh sao lu v bo dng cn thit, v cc hot ng c bit nh khi khi ng v phc hi sau mt tht bi. Hu nh tt c cc ngn chn yu cu bo tr, hoc l p ng thay i mc tiu, hoc gii quyt tht bi. V vy, cc th tc ny c trch nhim cung cp cho c thm quyn sa i, thay th hoc b sung cc TOE. Phin bn 1.2 28 Thng Su 1991 ITSEC

E1.1 Cc nh ti tr c trch nhim cung cp cc TOE, v ti liu sau y: - Mc tiu an ninh cho TOE

- M t chnh thc ca cc kin trc ca cc TOE - Kim tra ti liu hng dn (ty chn) - Th vin chng trnh th nghim v cc cng c c s dng th nghim cc TOE (ty chn) E1.2 Mc tiu bo m an ninh thc thi chc nng nh nc c cung cp bi TOE. Trong trng hp ca mt h thng, ngoi cc mc tiu an ninh bao gm mt h thng Chnh sch An ninh (SSP) xc nh cc mc tiu an ninh v cc mi e da. h thng. Trong trng hp ca mt sn phm, ngoi mc tiu bo m bao gm mt l do, xc nh cc phng php s dng cho sn phm, mi trng d nh v cc mi e da gi nh trong mi trng . Cc chc nng thc thi bo mt trong mc tiu bo m c xc nh bng cch s dng mt phong cch khng chnh thc nh phn loi E1.3 trong trng hp ca mt h thng cc mc tiu bo m nh nc cc chc nng c xut nh th no hc hin tt cc mc tiu an ninh v y chng li cc mi e da c xc nh. Trong trng hp ca mt sn phm mc tiu an ninh c trch nhim nh th no chc nng cho rng phng php s dng thch hp v y chng li cc mi e da gi nh. E1.4 Kim tra cc thng tin c cung cp p ng tt c yu cu v ni dung v trnh by v bng chng. Kim tra xem c c khng c mu thun trong bo mt mc tiu. M t ca kin trc c nh nc cu trc chung ca cc TOE. N phi nu r cc giao din bn ngoi ca cc TOE. Th nh nc bt k phn cng v phn vng yu cu bi TOE vi mt tuyn b ca cc chc nng ca h tr c ch bo v thc hin trong phn cng hoc phn mm.Yu cu i vi chng c E1.7 Kim tra cc thng tin c cung cp p ng tt c yu cu v ni dung v trnh by v bng chng.Giai on 3 - Thit k chi tit E1.8 Yu cu v ni dung v trnh by E1. Khng c yu cu.Yu cu i vi chng c E1.9Khng c yu cu.Thm nh Actions E1.10 Khng c hnh ng. E1.11 ti liu th nghim c th c cung cp phi c k hoch, mc ch, th tc v kt qu ca cc xt nghim. Mt th vin cc chng trnh th nghim c th c cung cp

c trch nhim bao gm cc chng trnh th nghim v cc cng c cho php kim tra c ti liu th nghim c lp i lp li. Yu cu i vi chng c E1.12 ti liu th nghim c th c cung cp phi nu r s tng ng gia kim tra v an ninh thc thi chc nng quy nh trong cc mc tiu an ninh.Thm nh Actions E1.13 Kim tra TOE p ng cc mc tiu an ninh bng cch thc hin bi kim tra bao gm tt c an ninh thc thi chc nng c xc nh trong mc tiu an ninh. Thc hin thm cc xt nghim tm kim cc li. Thm nh khng cn bn sao kim tra c thc hin bi hoc cho cc nh ti tr y bng chng th nghim c cung cp, nhng phi kim tra bng cch ly mu cc kt qu xt nghim nh vy.Xy dng - Mi trng pht trin E1.14 Cc nh ti tr c trch nhim cung cp cc ti liu sau y: Cu hnh danh sch xc nh cc phin bn ca cc TOE nh gi danh sch cu hnh th nh nc nh th no TOE c xc nh duy nht. E1.17 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng. Aspect 2 - Ngn ng lp trnh v bin dch E1.18.Yu cu v ni dung v trnh by E1.18 E1.18 Khng c yu cu.Yu cu i vi chng c E1.19 Khng c yu cu.Thm nh Actions E1.20 Khng c hnh ng.Aspect 3 - Nh pht trin an E1.21.Yu cu v ni dung v trnh by E1.21 Khng c yu cu.Yu cu i vi chng c E1.22 Khng c yu cu.Thm nh Actions E1.23 Khng c hnh ng.Hot ng - Ti liu hot ng E1.24 Cc nh ti tr c trch nhim cung cp cc ti liu sau y: Ngi s dng ti liu Qun l ti liu Cc ti liu hng dn ngi s dng c nh nc bo m thc thi cc chc nng c lin quan n ngi dng cui. N cng c trch nhim hng dn bao gm hot ng an ton ca h. Ngi s dng ti liu V d: Hng dn s dng ti liu tham kho, hng dn s dng, c cu trc, ni b ph hp, v ph hp vi tt c cc ti liu khc c cung cp cho cp ny.Yu cu i vi chng c E1.26 ti liu hng dn ngi s dng c trch nhim nh nc lm th no mt ngi dng cui s dng TOE trong mt an ton.Thm nh Actions

E1.27 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng.Aspect 2 - Qun l Ti liu E1.28.Yu cu v ni dung v trnh by E1.28.Cc ti liu qun l thu nh nc cc chc nng bo mt thc thi lin quan n mt qun tr vin. N s phn bit hai loi chc nng: nhng ngi cho php mt qun tr vin kim sot cc thng s bo mt, v nhng ngi m ch cho php anh ta c c thng tin. Nu mt qun tr vin l cn thit, th nh nc tt c tham s bo mt di s kim sot ca mnh. Th nh nc tng loi an ninh-c lin quan s kin, lin quan n chc nng hnh chnh. N phi nu chi tit, y s dng, th tc lin quan n vic qun l an ninh.N c trch nhim hng dn v vic s dng ph hp v hiu qu ca cc tnh nng bo mt ca TOE v nhng tnh nng tng tc. N c trch nhim hng dn v cch nh nc h thng / sn phm s c ci t v lm th no, nu thch hp, n s c cu hnh.Cc ti liu qun l, v d: Tham kho Hng dn s dng, qun tr Hng dn, s c cu trc, ni b ph hp, v ph hp vi tt c cc ti liu cung cp cho cp ny.Yu cu i vi chng c E1.29 Cc ti liu qun l thu nh nc nh th no TOE c qun l trong mt an ton theo cch. E1.30 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng. Hot ng - Mi trng hot ng E1.31 Cc nh ti tr c trch nhim cung cp cc ti liu sau y: - Giao hng v Ti liu cu hnh - Start-up v hot ng ti liu E1.32 Nu cu hnh khc nhau l c th, tc ng ca cc cu hnh v an ninh c quy nh. Th tc giao hng v th h h thng c quy nh. E1.33 thng tin cung cp phi nu r cc th tc duy tr an ninh E1.34 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng. E1.35 Cc th tc an ton bt u v hot ng c quy nh.Yu cu i vi chng c E1.36 thng tin cung cp phi nu r cc th tc duy tr an ninh. thm nh Actions E1.37 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng.CP E2.Xy dng - Qu trnh pht trin

E2.1 Cc nh ti tr c trch nhim cung cp cc TOE, v ti liu sau y: - Mc tiu an ninh cho TOE - M t chnh thc ca cc kin trc ca cc TOE - M t chnh thc ca thit k chi tit - Kim tra ti liu - Th vin ca chng trnh th nghim v cc cng c c s dng th nghim cc TOE E2.2 Mc tiu bo m an ninh thc thi chc nng nh nc c cung cp bi TOE. Trong trng hp ca mt h thng, ngoi cc mc tiu an ninh bao gm mt h thng Chnh sch An ninh (SSP) xc nh cc mc tiu an ninh v cc mi e da h thng. Trong trng hp ca mt sn phm, ngoi mc tiu bo m bao gm mt l do, xc nh cc phng php s dng cho sn phm, mi trng d nh v cc mi e da gi nh trong mi trng . Cc chc nng thc thi bo mt trong mc tiu bo m c xc nh bng cch s dng mt phong cch khng chnh thc nh phn loi.Yu cu i vi chng c E2.3 Trong trng hp ca mt h thng cc mc tiu bo m nh nc cc chc nng c xut nh th no thc hin tt cc mc tiu an ninh v y chng li cc mi e da c xc nh. Trong trng hp ca mt sn phm mc tiu an ninh c trch nhim nh th no chc nng cho rng phng php s dng thch hp v y chng li cc mi e da gi nh. E2.4 Kim tra cc thng tin c cung cp p ng tt c yu cu v ni dung v trnh by v bng chng. Kim tra xem c c khng c mu thun trong bo mt mc tiu.Giai on 2 Thit k kin trc E2.5Yu cu v ni dung v trnh by E2.5.M t ca kin trc c nh nc cu trc chung ca cc TOE. Nphi nu r cc giao din bn ngoi ca cc TOE. Th nh nc bt k phn cng v phn vng yu cu bi TOE vi mt tuyn b ca cc chc nng ca h tr c ch bo v thc hin trong phn cng hoc phn mm. Th nh nc tch cc TOE thnh cc thnh phn bo mt thc thi v cc.Yu cu i vi chng c E2.6 M t ca kin trc c nh nc bo m thc thi chc nng cc mc tiu an ninh s c cung cp. N s nh th no tch thnh an ninh thc thi v cc thnh phn khc c thc hin. Thm nh Actions E2.7 Kim tra cc thng tin c cung cp p ng tt c yu cu v ni dung v trnh by v bng chng. Kim tra rng s tch bit v an ninh thc thi v cc thnh phn khc l hp l. Giai on 3 - Thit k chi tit E2.8.Yu cu v ni dung v trnh by E2.8.Thit k chi tit c nh

nc thc hin ca tt c cc thc thi an ninh v bo mt c lin quan chc nng. N s xc nh tt c cc c ch bo mt. Th bn an ninh thc thi cc chc nng c ch v cc thnh phn. Tt c cc giao din bo mt thc thi v cc thnh phn bo mt c lin quan th c ghi r h mc ch v cc thng s. Thng s k thut / nh ngha cc c ch c cung cp.Nhng c im ny c trch nhim ph hp phn tch cc mi tng quan gia cc c ch lm vic. Thng s k thut khng cn phi c cung cp cho cc thnh phn m khng thc thi cng khng an ninh bo mt c lin quan. Trng hp nhiu cp ca c im k thut c cung cp, c phi l r rng v mi quan h th bc gia cc cp.Yu cu i vi chng c E2.9Thit k chi tit s nu r cc c ch bo m cung cp an ninh thc thi cc chc nng quy nh trong mc tiu an ninh. N phi nu l do ti sao cc thnh phn m khng c thng tin thit k c cung cp khng th c, hoc thc thi hoc an ninh an ninh c lin quan. E2.10 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng. Giai on 4 - Thc hin E2.11.Yu cu v ni dung v trnh by E2.11.Cc ti liu th nghim phi c cc k hoch, mc ch, th tc v kt qu ca kim tra. Cc th vin ca chng trnh th nghim phi c cc chng trnh th nghim v cc cng c cho php tt c cc bi kim tra c ti liu th nghim c lp i lp li.Yu cu i vi chng c E2.12 Cc ti liu th nghim phi nu r s tng ng gia cc xt nghim v an ninh thc thi chc nng quy nh trong mc tiu an ninh.Thm nh Actions E2.13 Kim tra rng cc thng tin p ng cc yu cu v ni dung v trnh by v bng chng. S dng th vin ca chng trnh th nghim kim tra bng cch ly mu kt qu cc xt nghim. Kim tra rng cc th nghim bao gm tt c cc bo m vic thi hnh chc nng xc nh trong mc tiu an ninh. Thc hin cc xt nghim b sung tm kim cc li.Xy dng Mi trng pht trin E2.14 Cc nh ti tr c trch nhim cung cp cc ti liu sau y: - - Thng tin v h thng iu khin cu hnh -Cu hnh danh sch xc nh cc phin bn ca cc TOE nh gi -Thng tin v s an ton ca mi trng pht trin Aspect 1 - Cu hnh iu khin E2.15.Yu cu v ni dung v trnh by E2.15 qu trnh pht trin s c h tr bi mt h thng iu khin cu hnh.Danh sch cu hnh c cung cp s lit k tt c cc thnh phn c bn trong TOE c xy dng. TOE, thnh phn c bn ca n v tt c cc ti liu cung cp bao gm

c hng dn s dng s c mt nh danh duy nht. Vic s dng c o ny nhn dng l bt buc trong ti liu tham kho. H thng kim sot cu hnh phi m bo TOE c nh gi ph hp vi ti liu c cung cp v ch c thay i c y quyn l c th.Yu cu i vi chng c E2.16 thng tin v h thng iu khin cu hnh c nh nc lm th no n c s dng trong thc hnh v p dng trong qu trnh sn xut theo quy nh ca pht trin qun l cht lng th tc.Thm nh Actions E2.17 Kim tra rng cc th tc ti liu ang c p dng. Kim tra xem thng tin cung cp p ng cc yu cu v ni dung v trnh by bng chng.Aspect 2 - Ngn ng lp trnh v bin dch E2.18 Yu cu v ni dung v trnh by E2.18.Khng c yu cu.Yu cu i vi chng c E2.19 Khng c yu cu. Thm nh Actions E2.20 Khng c hnh ng. E2.21 vn bn v s an ton ca mi trng pht trin c trch nhim nh nc nhm mc ch bo v cho s ton vn ca cc TOE v bo mt ca lin quan n ti liu. Vt l, th tc, nhn s v an ninh khc cc bin php c s dng bi nh pht trin c quy nh. E2.22 thng tin v s an ton ca mi trng pht trin c nh th no tnh ton vn ca cc TOE v bo mt ca cc ti liu lin quan duy tr. E2.23 Kim tra rng cc th tc ti liu ang c p dng. Kim tra xem thng tin cung cp p ng cc yu cu v ni dung v trnh by bng chng. Tm kim cc sai st trong th tc. E2.24 Cc nh ti tr c trch nhim cung cp cc ti liu sau y: - Ngi s dng ti liu - Cc Qun l ti liu E2.25 Cc ti liu hng dn ngi s dng c nh nc bo m thc thi cc chc nng c lin quan n ngi dng cui. N cng c trch nhim hng dn bao gm hot ng an ton ca h. Ngi s dng ti liu V d: Hng dn s dng ti liu tham kho, hng dn s dng, c cu trc, ni b ph hp, v ph hp vi tt c cc ti liu khc c cung cp cho cp ny.Yu cu i vi chng c E2.26 ti liu hng dn ngi s dng c trch nhim nh nc lm th no mt ngi dng cui s dng TOE trong mt an ton cch. E2.27 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v

trnh by v bng chng. E2.28 Cc ti liu qun l thu nh nc cc chc nng bo mt thc thi lin quan n mt qun tr vin. N s phn bit hai loi chc nng: nhng ngi cho php mt qun tr vin kim sot cc thng s bo mt, v nhng ngi m ch cho php anh ta c c thng tin. Nu mt qun tr vin l cn thit, th nh nc tt ctham s bo mt di s kim sot ca mnh. Th nh nc tng loi-an ninh s kin c lin quan, lin quan n cc chc nng hnh chnh. N phi nu chi tit, s dng, th tc lin quan n vic qun l an ninh. Th hng dn v vic s dng ph hp v hiu qu ca cc tnh nng bo mt ca TOE v lm th no cc tnh nng tng tc. N c nh nc hng dn v cch h thng san phm s c ci t v lm th no, nu thch hp, n s c cu hnh. Cc qun l ti liu, v d: Tham kho Hng dn s dng, Hng dn qun tr, c cu trc, ni b ph hp, v ph hp vi tt c cc ti liu khc cung cp cho cp ny.Yu cu i vi chng c E2.29 Cc ti liu qun l thu nh nc nh th no TOE c qun l trong mt an ton theo cch. E2.30 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng. E2.31.Cc nh ti tr c trch nhim cung cp cc ti liu sau y: - Giao hng v Ti liu cu hnh - Start-up v hot ng ti liu Nu cu hnh khc nhau l c th, tc ng ca cc cu hnh v an ninh c quy nh. Th tc giao hng v th h h thng c quy nh.Th tc ph duyt ca c quan chng nhn quc gia mc nh gi c tip theo, m bo tnh xc thc ca cc TOE giao. Trong khi to ra cc TOE, bt k ty chn th h v / hoc thay i phi c kim ton nh vy mt cch m n l sau c th ti to li chnh xc nh th no v khi cc TOE c to ra.Yu cu i vi chng c E2.33 thng tin cung cp phi nu r cc th tc duy tr an ninh. E2.34 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng.Kim tra vic p dng chnh xc giao hng th tc. Tm kim cc sai st trong th tc th h h thng..Cc th tc an ton bt u v hot ng c quy nh. Nu bt k an ninh chc nng thc thi c th b ngng hot ng hoc sa i trong qu trnh khi ng, bnh thng hot ng hoc bo tr, iu ny c quy nh. Nu TOE bao gm phn cng trong c cha cc thnh phn bo mt phn cng thc thi, sau qun tr vin, kt thc bt u cc xt

nghim chn on s dng, hoc t s tn ti c th c thc hin trn cc TOE trong mi trng hot ng. E2.36 thng tin cung cp phi nu r cc th tc duy tr an ninh. Cc nh ti tr c trch nhim cung cp kt qu v d t tt c cc th tc xt nghim chn on cho bo mt thc thi cc thnh phn phn cng. Cc nh ti tr c trch nhim cung cp cc v d v bt k sn lng ng mn kim ton c to ra trong qu trnh khi ng v hot ng.Thm nh Actions E2.37 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng. Kim tra cc bng chng v d cn thit khi ng v hot ng. Tm kim cc sai st trong th tc. E3.1Cc nh ti tr c trch nhim cung cp cc TOE, v ti liu sau y: - Mc tiu an ninh cho TOE - M t chnh thc ca cc kin trc ca cc TOE - M t chnh thc ca thit k chi tit - Kim tra ti liu - Th vin ca chng trnh th nghim v cc cng c c s dng th nghim cc TOE - M ngun hoc bn v phn cng cho tt c cc thc thi an ninh v bo mt c lin quan cc thnh phn - M t chnh thc tng ng gia cc m ngun hoc phn cng bn v v thit k chi tit Giai on 1 - Yu cu E3.2 Yu cu v ni dung v trnh by E3.2 E3.2Cc mc tiu bo m m t cc chc nng bo mt thc thi c cung cp TOE. Trong trng hp ca mt h thng, ngoi mc tiu bo m bao gm mt H thng Chnh sch An ninh (SSP) xc nh cc mc tiu an ninh v cc mi e da n h thng. Trong trng hp ca mt sn phm, ngoi mc tiu bo m bao gm mt l do, xc nh cc phng php s dng cho sn phm, mi trng d nh v cc mi e da gi nh trong mi trng . Cc chc nng thc thi bo mt trong mc tiu bo m c xc nh bng cch s dng mt phong cch khng chnh thc nh phn loi.Yu cu i vi chng c E3.3 Trong trng hp ca mt h thng cc mc tiu bo m m t lm th no c ngh chc nng p ng cc mc tiu an ninh v y chng li xc nh mi e da. Trong

trng hp ca mt sn phm mc tiu bo m m t nh th no chc nng thch hp cho rng phng php s dng v y chng li gi nh cc mi e da.Thm nh Actions E3.4 Kim tra cc thng tin c cung cp p ng tt c yu cu v ni dung v trnh by v bng chng. Kim tra xem c c khng c mu thun trong bo mt mc tiu.M t ca kin trc c m t cu trc chung ca cc TOE.N s m t cc giao din bn ngoi ca cc TOE. N phi m t bt k phn cng v phn vng yu cu ca cc TOE vi mt tuyn b ca cc chc nng ca h tr c ch bo v c thc hin trong phn cng hoc phn mm. N phi m t tch cc TOE vo bo mt v cc thnh phn.Yu cu i vi chng c E3.6 M t ca kin trc c m t nh th no bo mt thc thi chc nng ca cc mc tiu an ninh s c cung cp. N s m t lm th no tch thnh cc thnh phn bo mt thc thi v cc l t c. E3.7Kim tra cc thng tin c cung cp p ng tt c yu cu v ni dung vtrnh by v bng chng. Kim tra rng s tch bit v an ninh thc thi v cc thnh phn khc l hp l.Cc thit k chi tit quy nh c th tt c cc thnh phn c bn. N s m t cc thc hin ca tt c cc bo m vic thi hnh v cc chc nng bo mt c lin quan. N s xc nh tt c cc c ch bo mt. Th bn chc nng bo mt thc thi c ch v cc thnh phn. Tt c cc giao din bo mt thc thi v an ninh c lin quan cc thnh phn c ghi r mc ch v cc thng s ca h.Thng s k thut / nh ngha cc c ch c quy nh. Nhng c im ny c thch hp cho vic phn tch cc mi tng quan gia cc c ch s dng. Thng s k thut cn c cung cp cho cc thnh phn khng phi l bo v an ninh thc thi cng khng bo mt c lin quan. Trng hp nhiu hn mt mc c im k thut c cung cp, c c mt mi quan h r rng v phn cp gia cc cp. E3.9Thit k chi tit c m t nh th no c ch bo mt cung cp cc an ninh thc thi chc nng quy nh trong mc tiu an ninh. N s m t l do ti sao Cc thnh phn m khng c thng tin thit k c cung cp khng c th l bo mt thi hnh hoc bo mt c lin quan.Thm nh Actions E3.10 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng. E3.11 m t ca th m t s tng ng gia bn v m ngun hoc phn cng v cc thnh phn c bn ca thit k chi tit.Cc ti liu kim tra phi c k hoch, mc ch, th tc v kt

qu ca kim tra. Cc th vin ca chng trnh th nghim phi c cc chng trnh th nghim v cc cng c cho php tt c cc bi kim tra c ti liu th nghim c lp i lp li. E3.12 Cc ti liu th nghim s m t s tng ng gia cc xt nghim v an ninh thc thi chc nng quy nh trong mc tiu an ninh. N s m t cc tng ng gia cc xt nghim v an ninh thc thi v bo mt c lin quanchc nng quy nh trong thit k chi tit. N s m t s tng ng gia cc xt nghim v c ch bo mt nh i din trong m ngun phn cng bn v. Bng chng v thi li sau khi pht hin v sa cha li lin quan n an ninh bt buc chng minh rng cc li c loi b v khng c li mi c gii thiu.Thm nh Actions E3.13 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng. S dng th vin ca chng trnh th nghim kim tra bng cch ly mu kt qu cc xt nghim. Kim tra rng cc th nghim bao gm tt c cc bo m vic thi hnh chc nng xc nh trong mc tiu an ninh. Kim tra xem cc bi kim tra bao gm tt c an ninh thc thi v bo mt chc nng c lin quan xc nh trong thit k chi tit v tt c cc c ch bo mt nhn dng m ngun hoc bn v phn cng. Kim tra sau tt c cc k thi li sa cha sai st. Thc hin cc xt nghim b sung tm kim cc li.Xy dng - Mi trng pht trin E3.14 Cc nh ti tr c trch nhim cung cp cc ti liu sau y: - Cu hnh danh sch xc nh cc phin bn ca TOE cc nh gi - Thng tin v h thng iu khin cu hnh - Thng tin v cc th tc chp nhn - Thng tin v s an ton ca mi trng pht trin - M t ca tt c cc ngn ng thc hin c s dng E3.15 qu trnh pht trin s c h tr bi mt h thng iu khin cu hnh v mt th tc chp nhn. Danh sch cu hnh c cung cp s lit k tt c c bn cc thnh phn trong c xy dng TOE. TOE, thnh phn c bn ca n v tt c cc ti liu cung cp bao gm cc hng dn s dng v m ngun hoc phn cng bn v phi c mt nh danh duy nht. Vic s dng cc nh danh duy nht ny l bt buc trong ti liu tham kho. Cu hnh h thng iu khin s m bo rng TOE c nh gi ph hp cc ti liu c cung cp v ch c thay i c y quyn l c th.

E3.16 thng tin v h thng iu khin cu hnh c m t n c s dng nh th no thc hnh v p dng trong qu trnh sn xut theo quy nh ca pht trin qun l cht lng th tc. E3.17 Kim tra rng cc th tc ti liu ang c p dng. Kim tra xem thng tin cung cp p ng cc yu cu v ni dung v trnh by bng chng. E3.18 Bt k ngn ng lp trnh c s dng thc hin c xc nh, v d nh nh trong mt tiu chun ISO. Bt k thc hin la chn ph thuc ca chng trnh ngn ng c ti liu. E3.19 nh ngha ca ngn ng lp trnh c xc nh r rng cc ngha ca tt c cc bo co c s dng trong m ngun. E3.20 Kim tra xem cc thng tin c cung cp p ng cc yu cu v ni dung v trnh by v bng chng. E3.21 vn bn v s an ton ca mi trng pht trin c m t nhm mc ch bo v cho s ton vn ca cc TOE v bo mt ca lin quan n ti liu. Vt l, th tc, nhn s v cc bin php an ninh khc c s dng bi nh pht trin phi c m t. E3.22 thng tin v s an ton ca mi trng pht trin c m t lm th no tnh ton vn ca cc TOE v bo mt ca cc ti liu lin quan duy tr. E3.23 Kim tra rng cc th tc ti liu ang c p dng. Kim tra xem thng tin cung cp p ng cc yu cu v ni dung v trnh by bng chng. Tm kim cc sai st trong th tc. Hot ng - Ti liu hot ng E3.24 Cc nh ti tr c trch nhim cung cp cc ti liu sau y: - Ngi s dng ti liu - Cc Qun l ti liu E3.25 Cc ti liu s dng s m t cc chc nng bo mt thc thi c lin quan n ngi dng cui. N cng c trch nhim hng dn bao gm hot ng an ton ca h. Ngi s dng ti liu V d: Hng dn s dng ti liu tham kho, hng dn s dng, c cu trc, ni b ph hp, v ph hp vi tt c cc ti liu khc c cung cp cho cp ny. E3.26 Cc ti liu s dng s m t lm th no mt ngi dng cui s dng TOE trong mt an ton. E3.27 K