2024 Technical Exchange Meeting on Security Assessment of Commercial Password Applications Successfully Held
2024-05-17
Source: China Cryptographic Society Hits:
From May 8 to 10, 2024, sponsored by the Joint Committee for Security Assessment of Commercial Cryptography Applications of the Chinese Cryptographic Society (hereinafter referred to as the Joint Committee for Security Assessment), the Data and Communication Protection Research and Education Center of the Chinese Academy of Sciences, the 15th Research Institute of China Electronics Technology Corporation (Information Industry Information Security Assessment Center) The "2024 Technical Exchange Conference on Security Assessment of Commercial Password Applications" hosted by the National Information Technology Security Research Center was successfully held in Beijing. The conference focused on the publicity and popularization of security assessment policies and technical standards for commercial password applications, improved the use level of commercial passwords, and invited relevant experts to exchange and share information about security assessment policies, basic password knowledge, standard system, technical application, practical ability and other aspects of commercial password applications. More than 250 units and nearly 600 people participated in the conference.
![](e8185ec5be8e4cfb808d1622ea35f37b/images/111111111.png)
At the meeting, relevant experts gave explanations around the Commercial Password Management Regulations, password application and security evaluation policies, password product and service management, etc; The basic principles and concepts of cryptographic algorithms, key management, cryptographic security protocols, etc; This paper summarizes the security evaluation standard system of commercial password applications, the basic requirements, evaluation requirements, design guidelines, evaluation process guidelines, quantitative evaluation rules and high-risk judgment guidelines, secret evaluation FAQ (the third version) and other national/industry standards and guiding documents of information system password applications; And around the improvement of the practical ability of secret assessment, we carried out experience sharing in secret assessment operations, tool use, report preparation and other aspects. During the meeting, participants put forward nearly 200 communication questions, and relevant experts focused on typical problems and discussed them with on-site participants.
![](e8185ec5be8e4cfb808d1622ea35f37b/images/222222222222.png)
The meeting lasted for three days, and there were no empty seats on the scene. The exchange content was highly praised by the participants. The technical exchange meeting played a positive role in promoting the benign interaction of industry peers, the publicity and popularization of secret evaluation policies and technical standards, and the improvement of practical ability. After the meeting, the Joint Committee of Secret Assessment will continue to promote the cooperation of all parties involved in the "production learning research application" of commercial password security assessment, build academic and scientific exchange platforms, promote the improvement of the technical level of password application security assessment, and continue to make efforts in the supply of standards and norms in the field of secret assessment, innovation of secret assessment technology, training of secret assessment talents, etc, Promote passwords to play a greater role in ensuring network and data security.
![](e8185ec5be8e4cfb808d1622ea35f37b/images/2.png)