网络安全风险评估用例.doc

目 录

目 录

1 概述 1

2 系统安全性检测用例 1

2.1 WINDOWS 系列 JCFP-RDXT-0100................................................................................................6

2.1.1 Windows 2003 JCFP-RDXT-0101...........................................................................................6

2.1.2 Windows XP JCFP-RDXT-0102............................................................................................16

2.1.3 Windows 2012 JCFP-RDXT-0103.........................................................................................26

2.3.2 RedFlag JCFP-RDXT-0302...................................................................................................51

3 网络安全性检测用例 1

3.1 网络设备 JCFP-RDWL-0100........................................................................................................5

3.1.1 Cisco

交换机／

Cisco

路由器

3.1.2

3.2 网络安全设备 JCFP-RDWL-0200..............................................................................................22

3.2.1

3.2.2

JCFP-RDWL-0202...........................................................................24

3.2.3

JCFP-RDWL-0203...................................................................30

3.2.4 IDS

入侵检测系统

JCFP-RDWL-0204................................................................................32

4.2 WEB 应用（中间件） JCFP-RDYY-0200...................................................................................20

4.2.1 IIS JCFP-RDYY-0201............................................................................................................20

4.2.2 Apache JCFP-RDYY-0202.....................................................................................................23

4.2.3 Tomcat JCFP-RDYY-0203.....................................................................................................26

4.2.4 Weblogic JCFP-RDYY-0204..................................................................................................28

4.3 邮件服务 JCFP-RDYY-0300.......................................................................................................32

4.3.1 Exchange JCFP-RDYY-0301.................................................................................................32

4.4 FTP JCFP-RDYY-0400.................................................................................................................33

4.4.1 IIS FTP JCFP-RDYY-0401....................................................................................................33

目 录

4.5 DNS JCFP-RDYY-0500...............................................................................................................34

4.8 其他 JCFP-RDYY-0800...............................................................................................................43

4.8.1

JCFP-RDYY-0801.....................................................................................43

5 密码安全性分析检测用例 1

5.1 数据通讯安全检测 JCFP-RDMM-0101.......................................................................................1

5.1.1

.............................................................................................................1

5.1.2

.....................................................................................................................2

5.1.3

.........................................................................................................................4

5.1.4

.................................................................................................................5

5.2 密码与密钥管理安全检测 JCFP-RDMM-0201............................................................................5

5.2.1

.....................................................................................................................5

6.1.4

6.2 动态检测 JCFP-RDMB-0201........................................................................................................5

6.3 综合检测 JCFP-RDMB-0301........................................................................................................6

6.4 木马文件分析 JCFP-RDMB-0401................................................................................................7

6.4.1

6.4.2

.............................................................................................................7

7 渗透测试检测用例 1

7.1 WEB 应用服务 JCFP-RDST-0101.................................................................................................2

7.2 FTP 应用服务 JCFP-RDST-0102..................................................................................................3

7.3 电子邮件服务 JCFP-RDST-0103..................................................................................................3

7.10 SYMANTEC PCANYWHERE 远程控制检测 JCFP-RDST-0110.....................................................6

7.11 WINDOWS 操作系统服务器检测 JCFP-RDST-0111...................................................................7

目 录

7.12 UNIX 操作系统服务器检测 JCFP-RDST-0112..........................................................................7

8 管理安全性检测用例 1

8.1 安全管理机构 JCFP-RDGL-0101.................................................................................................3

8.2 安全策略 JCFP-RDGL-0102.........................................................................................................4

8.3 安全管理规章制度 JCFP-RDGL-0103.........................................................................................4

8.4 人员管理 JCFP-RDGL-0104.......................................................................................................11

8.5 运行安全 JCFP-RDGL-0105.......................................................................................................16

8.6 安全审计 JCFP-RDGL-0106.......................................................................................................18

8.7 备份与恢复 JCFP-RDGL-0107...................................................................................................19

8.8 检测与响应 JCFP-RDGL-0108...................................................................................................20

8.9 日常维护 JCFP-RDGL-0109.......................................................................................................23

8.10 关键设备和服务的采购情况 JCFP-RDGL-0110.....................................................................24

8.11 机房文档管理 JCFP-RDGL-0111..............................................................................................24

8.12 技术管理 JCFP-RDGL-0112.....................................................................................................25

8.13 管理脆弱性调查问卷表 JCFP-RDGL-0113.............................................................................27

9.7 存储介质管控脆弱性检测 JCFP-RDWL-0107............................................................................4

9.8 物理脆弱性问卷调查表 JCFP-RDWL-0108................................................................................7