第1页共111页编号:时间:2021年x月x日书山有路勤为径,学海无涯苦作舟页码:第1页共111页1.绪论.............................................................41.1范围........................................................41.1.1扩展的和保留的功能需求.................................41.2第二部分的组织..............................................51.3功能需求范例................................................52.安全功能成分....................................................102.1综述.......................................................102.1.1类结构................................................102.1.2族结构................................................102.1.3成分结构..............................................122.1.4允许的功能成分操作....................................132.2成分目录...................................................142.2.1突出成分改变..........................................153.FAU类:安全审计...............................................163.1安全审计自动响应(FAU_ARP)................................173.1安全审计数据发生(FAU_GEN)...............................173.3安全审计分析(FAU_SAA)...................................183.4安全审计浏览(FAU_SAR)...................................213.5安全审计事件选择(FAU_SEL)...............................233.6安全审计数据存贮(FAU_STG)...............................234.FCO类:通信...................................................264.1源端不否认(FCO_NRO)......................................264.2接受不否认(FCO_NRR)......................................285.FCS类:密码支持...............................................305.1密钥管理(FCS_CKM).......................................305.2密码运算(FCS_COP).......................................326.FDP级:保护用户数据............................................346.1访问控制策略(FDP_ACC)....................................376.2访问控制功能(FDP_ACF).....................................386.3数据鉴别(FDP_DAU)........................................396.4输出到TSF控制范围之外(FDP_ETC)..........................406.5信息流控制策略(FDP_IFC)..................................416.6信息流控制功能(FDP_ICF)..................................426.7从TSF控制范围之外输入(FDP_ITC)..........................456.8TOE内部传输(FDP_ITT).....................................476.9剩余信息保护(FDP_RIP)....................................496.10反转(FDP_ROL)............................................506.11存储数据的完整性(FDP_SDI)...............................516.12TSF间用户数据机密性的传输保护(FDP_UCT)..................536.13TSF间用户数据完整性的传输保护(FDP_UIT)..................547.FIA级:标识和鉴别..............................................567.1鉴别失败(FIA_AFL)........................................587.2用户属性定义(FIA_ATD)....................................59第2页共111页第1页共111页编号:时间:2021年x月x日书山有路勤为径,学海无涯苦作舟页码:第2页共111页7.3秘密的规范(FIA_SOS)......................................607.4用户鉴别(FIA_UAU)........................................617.5用户标识(FIA_UID)........................................647.6用户-主体绑定(FIA_USB)...................................658.FMT级:安全管理................................................668.1TSF中功能的管理(FMT_MOF).................................688.2安全属性的...