YDT 1730-2008 《电信网和互联网安全风险评估实施指南》

《YDT 1730-2008 《电信网和互联网安全风险评估实施指南》》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、bYD中华人民共和国通信行业标准YD/T××××—××××电信网和互联网安全风险评估实施指南ImplementationGuideforSecurityRiskAssessmentofTelecomNetworkandInternet（报批稿）××××-××-××发布××××-××-××实中华人民共和国信息产业部发布YD/Txxxx-xxxx目次前言...........................................................................

2、.III1范围................................................................................12规范性引用文件......................................................................13术语和定义..........................................................................14风险

3、评估框架及流程..................................................................44.1风险要素关系......................................................................44.2实施流程..........................................................................64.3工作形式........

4、..................................................................64.4遵循的原则........................................................................75风险评估实施........................................................................75.1风险评估的准备.............

5、.......................................................75.2资产识别..........................................................................95.3威胁识别.........................................................................125.4脆弱性识别.......................

6、................................................145.5威胁利用脆弱性的关联关系.........................................................165.6已有安全措施的确认...............................................................175.7风险分析...........................................

7、..............................175.8风险评估文件.....................................................................206风险评估在电信网和互联网及相关系统生命周期中的不同要求.............................216.1电信网和互联网及相关系统生命周期概述.............................................216.2启动阶段的风险评估

8、...............................................................226.3设计阶段的风险评估...............................................................226.4实施阶段的风险评估...............................................................236.5运维阶段的风险评估............