规范《GAT389-2002-计算机信息系统安全等级保护数据库管理系统技术要求》.pdf

ics35020 L09 6A 中华人民共和 国公共安全行业标准 GA/T389-2002 计算机信息系统安全等级保护 数据库管理系统技术要求 Databasemanagementsystem technologyrequirement incomputerinformationsystem classifiedsecurityprotection 2002一07门5发布 2002一07一15实施 中华人民共和国公安部 发 布 GA/T 389-2002 目 次 一 Ao}I A 1范围··········· 2规范性引用文件 ······。·············，····································································。，····..一 3术语和定义····························································，···································…… 4数据库管理系统安全技术要求·································..··...……，二‘…… 4. 1 身份鉴别 ···，······。···。，··········，······················。，，································，·····……，，.·..·一 4.1.1用户标识 ·································…… 4.1.2 用户鉴别 ··········。··································。·························..········.··.···…… 4.2 自主访问控制 ····，·········，····，“············ I ········.·····t··… 4.2. 1访问操作 ··...····.·..·.…… 4. 2. 2访问规则 ，··········。，···················································……，·····……，..·.······.·…… 4. 2. 3 授权传播限制 ··················································，·..…… 4. 3 标记与强制访问控制······················································...·… … 4. 3. 1标记 ····································。‘·····················，·············································…… 4.3.2 强制访问控制 ·······································，································.·.·..······...·…… 4. 3. 3 访问控制粒度及特点········，··································，..·.·······……，·…… 4. 4 客体重用 4··················，，，，·········甲··················甲，，······················…… ，···4…… 4. 5数据库安全审计 ·········