TC260 to Promote Effective Integration of Asset Information for Network Security Product Interconnect
On March 26, the National Technical Committee 260 on Cybersecurity of Standardization Administration of China (TC260) released the Practical Guide to Cybersecurity Standard – Asset Information Format for Network Security Product Interconnect (the "Guide").
According to the Guide, the network security product interconnect involves the interconnected functions and interconnected information. The interconnected information is mainly divided into six categories: asset information, vulnerability information, threat information, behavior information, alarm information, and incident information. The Guide standardizes the description formats of the asset information for network security product interconnect, which is applicable to the design, development, application, and testing of network security products. Asset information is composed of general information and additional information. The former includes basic information, location information, network information, etc.; the latter includes device-related addition information, operating system-related additional information, etc.
(Source: National Technical Committee 260 on Cybersecurity of Standardization Administration of China)