T/ZSIA 0002-2023
Technical specification of attack surface reduction architecture (English Version)

Standard No.

T/ZSIA 0002-2023

Language

Chinese, Available in English version

Release Date

2023

Published By

Group Standards of the People's Republic of China

Latest

T/ZSIA 0002-2023

Scope

Technical requirements 5.1 Identity security 5.1.1 Identity management 5.1.2 Multi-factor authentication 5.1.3 Certificate authentication 5.1.4 Attribute dynamic identity authentication 5.2 Access security 5.2.1 Network access 5.2.2 Access device management 5.2.3 Service Stealth 5.2.4 Tunnel encryption 5.3 Access security 5.3.1 Dynamic access policy 5.3.2 Permission control 5.3.3 Access log audit 5.4 Behavior security 5.4.1 Abnormal behavior engine 5.4.2 Full-link behavior monitoring 5.4.3 Security joint defense 6 Detection Method 6.1 Identity security test 6.1.1 Test purpose 6.1.2 Test content 6.1.3 Result judgment 6.2 Access security test 6.2.1 Test purpose 6.2.2 Test content 6.2.3 Result judgment 6.3 Access security test 6.3.1 Test purpose 6.3 .2 Test content 6.3.3 Result judgment 6.4 Behavioral safety test 6.4.1 Test purpose 6.4.2 Test content 6.4.3 Result judgment

T/ZSIA 0002-2023 history

• 2023 T/ZSIA 0002-2023 Technical specification of attack surface reduction architecture
• 2022 T/ZSIA 0002-2022 Basic functional specification of internet hospital information platform