美国:最早实行信息安全测评认证的国家。1985年,美国国家安全局正式公布了《可信计算机系统评估准则》(TCSEC,美国国防部桔皮书),这是国际公认的第一个计算机安全系统评估标准,当时评估目标仅限于政府部门和军队的计算机系统。1989年,美国国家安全局(NSA)与国家标准局(NIST)联合实施国家信息安全认证。此后,英国、德国、法国等欧美国家和日本、韩国等亚洲国家纷纷效仿。1997年,美国国家标准技术局和国家安全局共同组建了“国家信息保证联盟”,确立了新的信息 United States: the earliest implementation of information security assessment certification of the country. In 1985, the National Security Agency formally released the Trusted Computer System Evaluation Criteria (TCSEC, the U.S. Department of Defense Orange Paper), which is internationally recognized as the first assessment standard for computer security systems when the assessment targets were limited to government departments And the army’s computer system. In 1989, the National Security Agency (NSA) and the National Institute of Standards (NIST) jointly implemented the National Information Security Certification. Since then, Britain, Germany, France and other European and American countries and Japan, South Korea and other Asian countries have to follow suit. In 1997, the United States National Bureau of Standards and Technology and the National Security Agency jointly formed the “National Information Assurance Union,” established a new message