1. Anti attack

The information network shall be able to resist network attacks from outside the firewall, and use popular attack means to simulate attacks. If it cannot be broken, it will be judged as qualified;

2. Internet access control

The information network shall control the Internet connection request and content of the internal terminal according to the demand, and use the terminal to access different resources of the Internet with different identities. It is qualified if it meets the design requirements;

3. Security isolation between information network and control network
The intelligent engineering test method shall meet the requirements of article 5.3.2 of this specification to ensure that the control network cannot be accessed from the information network without authorization; Those who meet this requirement are judged as qualified;

Intelligent engineering

4. Effectiveness of anti-virus system

Spread the files (virus samples) containing the current known popular viruses to each point through file transmission, email attachments, Internet neighbors, etc. the anti-virus software at each point shall be able to correctly detect the virus containing files and perform anti-virus operations; Those who meet the requirements are judged as qualified;

5. Effectiveness of intrusion detection system

If an intrusion detection system is installed, use popular attack means to simulate attacks (such as DOS denial of service attack), and these attacks should be found and blocked by the intrusion detection system; Those who meet this requirement are judged as qualified;

6. Effectiveness of content filtering system
If the content filtering system is installed, try to access several restricted websites or access restricted content, and these attempts should be blocked; Then, access to a number of unrestricted web sites or content, which should be accessible normally; Those who meet this requirement are qualified.