JR_T 0276-2023 证券期货业信息系统渗透测试指南.docxVIP

ICS?03.060

CCS?A11

JR

中?华?人?民?共?和?国?金?融?行?业?标?准

JR/T?0276—2023

证券期货业信息系统渗透测试指南

Guidelines?for?penetration?testing?of?information?systems?in?the

securities?and?futures?industry

2023-02-07?发布 2023-02-07?实施

中国证券监督管理委员会 发?布

JR/T?0276—2023

目 次

前言?..................................................................................? I

引言?.................................................................................? II

1??范围?...............................................................................? 1

2??规范性引用文件?.....................................................................? 1

3??术语和定义?.........................................................................? 1

4??总则?...............................................................................? 3

5??渗透测试策划?.......................................................................? 3

5.1??概述?...........................................................................? 3

5.2??渗透测试范围?...................................................................? 3

5.3??渗透测试对象?...................................................................? 3

5.4??渗透测试时间?...................................................................? 4

6??渗透测试设计?.......................................................................? 4

6.1??概述?...........................................................................? 4

6.2??信息收集?.......................................................................? 4

6.3??信息系统功能及技术弱点研判?.....................................................? 4

6.4??渗透测试就绪准备?...............................................................? 4

7??渗透测试执行?.......................................................................? 4

7.1??概述?...........................................................................? 5

7.2??漏洞扫描?......................................................................