摘要
《移动智能终端安全能力技术要求》是工信部在2013年颁布的移动终端安全的行业标准.通过分析和梳理上述移动终端安全要求的测评现状,并针对其中存在的问题,设计了基于PC客户端配套Android代理的自动化安全测评模型架构,实现了安全要求的批量自动化测评、测评行为全程监控,有效降低了测评人员技术门槛,提升了测评效率和测评质量;设计了云管理平台,研究实现了基于标签的测评数据多维度分析机制,有效提升了安全测评数据的统计分析效率.
“Technical Requirements for Security Capability of Smart Mobile Terminal”is the industry standard for the mobile terminal security which is promulgated by the Ministry of Industry and Information Technology in 2013.By analyzing the status and problems of security testing,we designed a security testing model based on the PC client and the testing agent so as to solve these problems,which realized the batch automatic script running and the security testing monitoring,effectively reduced the threshold of the security testing and improved the efficiency and quality of the security testing.This paper designed the cloud management platform,and researched the mechanism such as the testing data analyzing mechanism based on the label,which effectively improved the statistical analysis efficiency of the testing output data.
作者
张艳
彭华熹
何申
Zhang Yan;Peng Huaxi;He Shen(Department of Security Technology,China Mobile Research Institute,Beijing 100032)
出处
《信息安全研究》
2020年第5期427-432,共6页
Journal of Information Security Research
关键词
移动终端
安全能力
安全要求
安全测评
测评模型
mobile terminal
security capability
security requirements
security testing
testing model
