ICS 33.040.50 CCS M 19 中 华 人 民 共 和 国 通 信 行 业 标 准YD YD/T ××××-×××× 代替YD/T 2050-2009 接入网安全技术要求 无源光网络（PON）设备 Technical requirements for security of Passive Optical Network (PON) equipment （报批稿） ××××-××-××发布 ××××-××-××实施 中华人民共和国工业和信息化部 发布YD/T 2050-×××× I目 次 前 言 ............................................................................................................................................. II 1 范围 ................................................................................................................................................ 1 2 规范性引用文件 ............................................................................................................................ 1 3 术语和定义 .................................................................................................................................... 1 4 缩略语 ............................................................................................................................................ 1 5 概述 ................................................................................................................................................ 2 6 硬件安全要求 ................................................................................................................................ 4 7 系统安全要求 ................................................................................................................................ 4 7.1 操作系统内核安全 ..................................................................................................................... 4 7.2 开源软件安全 ............................................................................................................................. 4 7.3 自研软件安全 ............................................................................................................................. 4 7.4 启动安全 ..................................................................................................................................... 4 7.5 升级安全 ..................................................................................................................................... 5 7.6 运行态防护 ................................................................................................................................. 5 7.7 安全态势 ..................................................................................................................................... 5 7.8 最小暴露面 ................................................................................................................................. 5 8 网络安全要求 ................................................................................................................................ 5 8.1 组网拓扑安全 ............................................................................................................................. 6 8.2 防火墙/ACL功能 ........................................................................................................................ 6 8.3 网络协议安全 ............................................................................................................................. 7 8.4 PON接入安全 ............................................................................................................................. 8 9 应用安全要求 ................................................................................................................................ 8 9.1 管理访问安全 ............................................................................................................................. 8 9.2 网管系统安全 ............................................................................................................................. 9 9.3 安全风险可视化（可选） ....................................................................................................... 11 9.4 口令和证书安全 ....................................................................................................................... 11 9.5 日志安全 .............