标准摘要
[中文适用范围]: 本文件提供了可用于开发安全产品、系统和应用程序的架构和设计原则的目录,并提供如何有效使用这些原则的指导。本文件为开发安全产品、系统和应用程序提供了指南,包括对其安全属性的有效评估。本文件未建立对评估或评估过程或实施的要求。 [外文原描述]: ISO/IEC TS 19249:2017 provides a catalogue of architectural and design principles that can be used in the development of secure products, systems and applications together with guidance on how to use those principles effectively. ISO/IEC TS 19249:2017 gives guidelines for the development of secure products, systems and applications including a more effective assessment with respect to the security properties they are supposed to implement. ISO/IEC TS 19249:2017 does not establish any requirements for the evaluation or the assessment process or implementation.
英文名称Information technology - Security techniques - Catalogue of architectural and design principles for secure products, systems and applications