China Information Security Evaluation Center (hereinafter referred to as the evaluation center) is an authoritative functional organization specializing in information technology security testing and risk assessment in China.
According to the central authorization, the main functions of the evaluation center include: being responsible for security vulnerability analysis and information notification of information technology products and systems; Be responsible for the security risk assessment of information networks and important information systems of Party and government organs; Carry out security testing and evaluation of information technology products, systems and engineering construction; Carry out the ability evaluation and qualification review of information security services and professionals; Engaged in theoretical research, technology research and development, standard development, etc. of information security testing and evaluation.
The evaluation center is one of the important infrastructures in the national information security guarantee system. With the support of national special investment, it has domestic first-class information security vulnerability analysis resources and testing and evaluation technical equipment; It has built many professional technical laboratories such as vulnerability basic research, application software security, product security detection, system hidden danger analysis and evaluation equipment R & D; It has a national special control team dedicated to risk assessment for party and government organs, basic information networks and important information systems.
Since its establishment in 1997, the evaluation center has provided technical support for the country and public services to the society in the field of information security in accordance with national laws and regulations. It has completed the security evaluation of more than 600 products, more than 130 network information systems and more than 2000 professionals; Long term risk assessment for more than 20 ministries and more than 10 important information systems. At the same time, it has undertaken more than 100 scientific research projects such as national 863, 973, natural science foundation and national standard development. Many scientific research achievements have won national and ministerial scientific and technological progress awards. Dozens of technical standards have been officially released and implemented as national standards. The performance of the evaluation center in information security testing and evaluation, technological innovation, major security and social services has been fully affirmed and unanimously praised by the central leadership, relevant ministries and commissions and the society.