ICS35.110 L70 T/CERS0117-2025团 体 标 准 中国能源研究会发布 发布大数据平台网络攻击日志的交叉认证要求 Thecross-certificationrequirementsfornetworkattacklogsofthebigdataplatform 2025-11-26发布 2025-11-26实施 全国团体标准信息平台 T/CERS0117-2025 I目次 目次.....................................................................................................................................................................I 前言....................................................................................................................................................................II 引言...................................................................................................................................................................III 1范围.......................................................................................................................................................................1 2规范性引用文件..................................................................................................................................................1 3术语和定义...........................................................................................................................................................1 4网络攻击日志交叉认证工作流程规范..............................................................................................................1 4.1概述...............................................................................................................................................................1 4.2日志采集流程要求.......................................................................................................................................2 4.3证据生成流程要求.......................................................................................................................................2 4.4证据加密要求...............................................................................................................................................3 4.5关联规则设计要求.......................................................................................................................................3 4.6关联证据库构建要求...................................................................................................................................3 4.7证据间交叉认证流程要求...........................................................................................................................3 4.8证据间交叉认证要求...................................................................................................................................4 4.9标准化证据报告要求...................................................................................................................................4 5网络攻击日志交叉认证要求..............................................................................................................................4 5.1原始日志收集范围.......................................................................................................................................4 5.2日志要求.......................................................................................................................................................4 5.3证据要求.......................................................................................................................................................5 5.4关联证据库数据模型要求...........................................................................................................................5 5.5关联规则要求...............................................................................................................................................5 5.6关联规则维护要求.......................................................................................................................................6 5.7后期维护要求...............................................................................................................................................6 5.8更新管理要求..........................................................................................................................