ICS 35.030 CCS L80 T/NJCESS 团体标准 T/NJCESS 001 -2024 网络弹性测评系统设计指南 Design guide for cyber resilience testing and evaluation system 2024 -12-26发布 2025 -06-30实施 南京市网络空间内生安 全协会 发布 全国团体标准信息平台 全国团体标准信息平台 I 目 次 前 言 ................................ ................................ ................................ ................................ ............................. I 引 言 ................................ ................................ ................................ ................................ ............................ II 1 范围 ................................ ................................ ................................ ................................ ................................ . 1 2 规范性引用文件 ................................ ................................ ................................ ................................ ............. 1 3 术语和定义 ................................ ................................ ................................ ................................ ..................... 1 3.1网络安全事件 cybersecurity i ncident ................................ ................................ ................................ .... 1 3.2 威胁情报 threat intelligence ................................ ................................ ................................ .................... 1 3.3 攻击样本 attack sample ................................ ................................ ................................ ........................... 1 4 缩略语 ................................ ................................ ................................ ................................ ............................. 1 5 网络弹性测评系统框架 ................................ ................................ ................................ ................................ . 2 6 网络弹性测评系统工作阶段 ................................ ................................ ................................ ......................... 2 7 硬件资源层设计 ................................ ................................ ................................ ................................ ............. 4 7.1 存储资源 ................................ ................................ ................................ ................................ .................. 4 7.2 计算资源 ................................ ................................ ................................ ................................ .................. 4 7.3 网络资源 ................................ ................................ ................................ ................................ .................. 4 8 基础能力层设计 ................................ ................................ ................................ ................................ ............. 4 8.1 攻击工具集 ................................ ................................ ................................ ................................ .............. 4 8.2 数据采集模块 ................................ ................................ ................................ ................................ .......... 4 8.3 数据处理模块 ................................ ................................ ................................ ................................ .......... 4 9 知识库层设计 ................................ ................................ ................................ ................................ ................. 5 9.1 指标体系 ................................ ................................ ................................ ................................ .................. 5 9.2 风险要素 ................................ ................................ ................................ ................................ .................. 5 9.3 评估算法模型 ................................ ................................ .........................