GB/T 30279-2020
Information security technology—Guidelines for categorization and classification of cybersecurity vulnerability

Standard No.

GB/T 30279-2020

Language

Chinese

Release Date

2020

Published By

国家市场监督管理总局、中国国家标准化管理委员会

Lastest

GB/T 30279-2020

Replace

GB/T 30279-2013 GB/T 33561-2017

Scope

This standard provides the classification method and grading index of network security vulnerabilities (hereinafter referred to as "vulnerabilities"), and gives suggestions for grading methods. This standard is applicable to network product and service providers, network operators, vulnerability collection organizations, and vulnerability emergency response Organize vulnerability classification and hazard level assessment in vulnerability management, product production, technology research and development, network operations and other related activities.

GB/T 30279-2020 Referenced Document

• GB/T 20984 Information security technology—Risk assessment method for information security*， 2022-04-15 Update
• GB/T 25069 Information security techniques—Terminology*， 2022-03-09 Update
• GB/T 30276 Information security technology—Specification for cybersecurity vulnerability management

GB/T 30279-2020 history

• 2020 GB/T 30279-2020 Information security technology—Guidelines for categorization and classification of cybersecurity vulnerability
• 2013 GB/T 30279-2013 Information security technology.Vulnerability classification guide

GB/T 30279-2020 Information security technology—Guidelines for categorization and classification of cybersecurity vulnerability has been changed from GB/T 33561-2017 Information security technology—Vulnerability classification.