Abstract: “Technical Requirements for Security Capability of Smart Mobile Terminal” is the industry standard for the mobile terminal security which is promulgated in 2013. IWe analyzed the status and problems of security testing according to “Technical Requirements for Security Capability of Smart Mobile Terminal”. In order to solve these problems, we designed a security testing model based on the PC client and the testing agent, which realized the batch automatic script running and the security testing monitoring, effectively reduced the threshold of the security testing and improved the efficiency and quality of the security testing. This paper designed the cloud management platform, and researched the mechanism such as the testing data analyzing mechanism based on the label, which effectively improved the statistical analysis efficiency of the testing output data.

Key words: Mobile Terminal, Security Capability, Security Requirements, Security Testing, Testing Model

摘要： 《移动智能终端安全能力技术要求》是工信部2013年颁布的移动终端安全的行业标准。通过分析和梳理了上述移动终端安全要求的测评现状，并针对其中存在的问题，设计了基于PC客户端配套Android代理的自动化安全测评模型架构，实现了安全要求的批量自动化测评、测评行为全程监控，有效降低了测评人员技术门槛，提升了测评效率和测评质量；设计了云管理平台，研究实现了基于标签的测评数据多维度分析机制，有效提升了安全测评数据的统计分析效率。

关键词: 移动终端, 安全能力, 安全要求, 安全测评, 测评模型