基于CC标准的物联网数据安全需求分析及应用研究

Demand Analysis and Application of Internet of Things Based on Common Criteria

在物联网快速发展和应用的进程中,数据安全问题应作为首要问题加以重视。本文基于计算机安全评估标准-通用准则(Common Criteria,CC),探讨了物联网数据安全当前所面临的风险和威胁,制定了全面保障物联网数据安全必备的安全功能组件和安全保证组件。通过实例证实该方法能够反映物联网数据安全保障可能所需的产品功能,对物联网数据安全建设具有一定参考价值。

As the Internet of things is in the process of rapid development and application, data security issues should be as a top priority. This article is based on computer security evaluation Criteria - general rule (Common Criteria, CC), discusses the iot data security risks and threats faced by the current developed comprehensive Internet data security es-sential security functional components and security guarantees. Examples prove the method can reflect the iot data se-curity may be required to product features and construction of Internet data security has certain reference value.