GB/T 44810.3-2024IPv6 網(wǎng)絡(luò)安全設(shè)備技術(shù)要求第3部分：入侵防御系統(tǒng)(IPS)

ICS

33.040.40

CCS

M32

中華人民共和國(guó)國(guó)家標(biāo)準(zhǔn)

GB/T44810.3—2024

IPv6網(wǎng)絡(luò)安全設(shè)備技術(shù)要求

第3部分:入侵防御系統(tǒng)(IPS)

TechnicalrequirementforIPv6networksecurityequipment—

Part3:Instrusionpreventionsystem(IPS)

2024-10-26發(fā)布2025-02-01實(shí)施

國(guó)家市場(chǎng)監(jiān)督管理總局發(fā)布

國(guó)家標(biāo)準(zhǔn)化管理委員會(huì)

GB/T44810.3—2024

目次

前言

·····································································································

Ⅲ

引言

·····································································································

Ⅳ

1

范圍

··································································································

1

2

規(guī)范性引用文件

······················································································

1

3

術(shù)語(yǔ)和定義

···························································································

1

4

縮略語(yǔ)

································································································

1

5

功能性要求

···························································································

2

5.1

數(shù)據(jù)監(jiān)測(cè)

·························································································

2

5.1.1數(shù)據(jù)收集5.1.1

···············································································

2

5.1.2協(xié)議分析

····················································································

2

5.1.3行為監(jiān)測(cè)

····················································································

2

5.1.4流量監(jiān)測(cè)

····················································································

2

5.1.5流量過(guò)濾

····················································································

2

5.2

入侵分析

·························································································

2

5.2.1數(shù)據(jù)分析

····················································································

2

5.2.2入侵取證

····················································································

2

5.2.3攻擊防護(hù)

····················································································

2

拒絕服務(wù)攻擊防護(hù)

······································································

2

漏洞攻擊防護(hù)

···········································································

3

Web攻擊防護(hù)

··········································································

3

僵木蠕攻擊防護(hù)

········································································

3

自動(dòng)化攻擊威脅防護(hù)

····································································

3

攻擊逃逸防護(hù)

···········································································

4

外部系統(tǒng)協(xié)同防護(hù)

······································································

4

威脅情報(bào)庫(kù)

·············································································

4

5.3

入侵響應(yīng)

·························································································

4

5.4

管理控制

·························································································

4

5.5

檢測(cè)結(jié)果處理

····················································································

4

5.6

安全策略

·························································································

4

5.7

異常應(yīng)急處置

····················································································

4

6

性能要求

······························································································

4

6.1

網(wǎng)絡(luò)層吞吐量

····················································································

4

6.2

混合應(yīng)用層吞吐量

···············································································

4

6.3

TCP新建連接速率

··············································································

4

Ⅰ

GB/T44810.3—2024

6.4

TCP并發(fā)連接數(shù)

·················································································

5

6.5

誤攔截率

·························································································

5

6.6

漏攔截率

·························································································

5

7

兼容性要求

···························································································

5

8

可靠性要求

···························································································

5

9

自身安全性要求

······················································································

5

參考文獻(xiàn)

··································································································

6

Ⅱ

GB/T44810.3—2024

前言

本文件按照GB/T1.1—2020《標(biāo)準(zhǔn)化工作導(dǎo)則第1部分：標(biāo)準(zhǔn)化文件的結(jié)構(gòu)和起草規(guī)則》的規(guī)

定起草。

本文件是GB/T44810《IPv6網(wǎng)絡(luò)安全設(shè)備技術(shù)要求》的第3部分。GB/T44810已經(jīng)發(fā)布了以下

部分：

—第1部分：防火墻；

—第2部分：Web應(yīng)用防護(hù)系統(tǒng)（WAF）；

—第3部分：入侵防御系統(tǒng)（IPS）。

請(qǐng)注意本文件的某些內(nèi)容可能涉及專(zhuān)利。本文件的發(fā)布機(jī)構(gòu)不承擔(dān)識(shí)別專(zhuān)利的責(zé)任。

本文件由中華人民共和國(guó)工業(yè)和信息化部提出。

本文件由全國(guó)通信標(biāo)準(zhǔn)化技術(shù)委員會(huì)（SAC/TC485）歸口。

本文件起草單位：中國(guó)信息通信研究院、華為技術(shù)有限公司、北京神州綠盟科技有限公司、北京天

融信網(wǎng)絡(luò)安全技術(shù)有限公司、鄭州信大捷安信息技術(shù)股份有限公司、北京浩瀚深度信息技術(shù)股份有限公

司、國(guó)家計(jì)算機(jī)網(wǎng)絡(luò)應(yīng)急技術(shù)處理協(xié)調(diào)中心、中國(guó)電信集團(tuán)有限公司、天翼安全科技有限公司、杭州迪

普科技股份有限公司、北京通和實(shí)益電信科學(xué)技術(shù)研究所有限公司、國(guó)家工業(yè)信息安全發(fā)展研究中心、

中國(guó)福利會(huì)國(guó)際和平婦幼保健院、北京元支點(diǎn)信息安全技術(shù)有限公司、新華三技術(shù)有限公司、深圳大

學(xué)、北京可信華泰信息技術(shù)有限公司、杭州安恒信息技術(shù)股份有限公司。

本文件主要起草人：董悅、戴方芳、王雨晨、李翔、陳宏偉、趙粵征、畢程、王龑、劉為華、

龐韶敏、陳陸穎、石桂欣、嚴(yán)寒冰、康和、龔超、吳慶、左虹、路云鵬、王欣萍、程曦、余果、

陳昌杰、季新華、楊志衛(wèi)、史晨偉、萬(wàn)曉蘭、杜君、段古納、田麗丹。

Ⅲ

GB/T44810.3—2024

引言

根據(jù)《關(guān)于加快推進(jìn)互聯(lián)網(wǎng)協(xié)議第六版（IPv6）規(guī)模部署和應(yīng)用工作的通知》，為更好面對(duì)網(wǎng)絡(luò)復(fù)

雜化和用戶(hù)規(guī)模擴(kuò)大化帶來(lái)的安全挑戰(zhàn)，推動(dòng)IPv6網(wǎng)絡(luò)安全工作的標(biāo)準(zhǔn)化，我國(guó)制定了一系列IPv6安

全標(biāo)準(zhǔn)。其中，GB/T44810《IPv6網(wǎng)絡(luò)安全設(shè)備技術(shù)要求》是為規(guī)范在IPv6中網(wǎng)絡(luò)安全產(chǎn)品的適用性

的技術(shù)標(biāo)準(zhǔn)，擬由三個(gè)部分構(gòu)成。

—第1部分：防火墻。目的在于IPv6部署后，保障防火墻在新的網(wǎng)絡(luò)環(huán)境中的有效應(yīng)用。

—第2部分：Web應(yīng)用防護(hù)系統(tǒng)（WAF）。目的在于IPv6部署后，保障Web應(yīng)用防護(hù)系統(tǒng)

（WAF）在新的網(wǎng)絡(luò)環(huán)境中的有效應(yīng)用。

—第3部分：入侵防御系統(tǒng)（IPS）。目的在于IPv6部署后，保障入侵防御系統(tǒng)（IPS）在新的網(wǎng)

絡(luò)環(huán)境中的有效應(yīng)用。

Ⅳ

GB/T44810.3—2024

IPv6網(wǎng)絡(luò)安全設(shè)備技術(shù)要求

第3部分:入侵防御系統(tǒng)(IPS)

1范圍

本文件規(guī)定了支持IPv6的入侵防御系統(tǒng)的安全技術(shù)要求。

本文件適用于支持IPv6的入侵防御系統(tǒng)的設(shè)計(jì)、開(kāi)發(fā)、部署、使用、維護(hù)與測(cè)試。

2規(guī)范性引用文件

下列文件中的內(nèi)容通過(guò)文中的規(guī)范性引用而構(gòu)成本文件必不可少的條款。其中，注日期的引用文

件，僅該日期對(duì)應(yīng)的版本適用于本文件；不注日期的引用文件，其最新版本（包括所有的修改單）適用

于本文件。

GB/T25069—2022信息安全技術(shù)術(shù)語(yǔ)

GB/T28451—2023信息安全技術(shù)網(wǎng)絡(luò)入侵防御產(chǎn)品技術(shù)規(guī)范

GB/T44810.1—2024IPv6網(wǎng)絡(luò)安全設(shè)備技術(shù)要求第1部分：防火墻

3術(shù)語(yǔ)和定義

GB/T25069—2022、GB/T28