Security Target Common Criteria (4 results)

Taschenbuch. Condition: Neu. Protection Profile | Security Target, Common Criteria, Information assurance | Pollux Évariste Kjeld | Taschenbuch | Englisch | 2026 | OmniScriptum | EAN 9786200814159 | Verantwortliche Person für die EU: preigu GmbH & Co. KG, Lengericher Landstr. 19, 49078 Osnabrück, mail[at]preigu[dot]de | Anbieter: preigu Print on Demand. …

Taschenbuch. Condition: Neu. nach der Bestellung gedruckt Neuware - Printed after ordering - Please note that the content of this book primarily consists of articles available from Wikipedia or other free sources online. A Protection Profile is a document used as part of the certification process according to the Common Criteria. As the generic form of a Security Target, it is typically created by a user or user community and provides an implementation independent specification of information assurance security requirements. A PP is a combination of threats, security objectives, assumptions, security functional requirements, security assurance requirements and rationales. A PP specifies generic security evaluation criteria to substantiate vendors' claims of a given family of information system products. Among others, it typically specifies the Evaluation Assurance Level, a number 1 through 7, indicating the depth and rigor of the security evaluation, usually in the form of supporting documentation and testing, that a product meets the security requirements specified in the PP.…

Taschenbuch. Condition: Neu. nach der Bestellung gedruckt Neuware - Printed after ordering - In an IT product certification process according to the Common Criteria (CC), a Security Target (ST) is the central document, typically provided by the developer of the product, that specifies security evaluation criteria to substantiate the vendor's claims for the product's security properties. An ST defines information assurance security requirements for the given information system product, which is called the Target of Evaluation (TOE). An ST is a complete and rigorous description of a security problem in terms of TOE description, threats, assumptions, security objectives, security functional requirements (SFRs), security assurance requirements (SARs), and rationales. The SARs are typically given as a number 1 through 7 called Evaluation Assurance Level (EAL), indicating the depth and rigor of the security evaluation, usually in the form of supporting documentation and testing, that the product meets the SFRs.…

Taschenbuch. Condition: Neu. nach der Bestellung gedruckt Neuware - Printed after ordering - Please note that the content of this book primarily consists of articlesavailable from Wikipedia or other free sources online. The EvaluationAssurance Level of an IT product or system is a numerical grade assignedfollowing the completion of a Common Criteria security evaluation, aninternational standard in effect since 1999. The increasing assurancelevels reflect added assurance requirements that must be met to achieveCommon Criteria certification. The intent of the higher levels is toprovide higher confidence that the system's principal security featuresare reliably implemented. The EAL level does not measure the security ofthe system itself, it simply states at what level the system was tested.To achieve a particular EAL, the computer system must meet specificassurance requirements. Most of these requirements involve designdocumentation, design analysis, functional testing, or penetrationtesting. The higher EALs involve more detailed documentation, analysisand testing than the lower ones. Achieving a higher EAL certificationgenerally costs more money and takes more time than achieving a lowerone. The EAL number assigned to a certified system indicates that thesystem completed all requirements for that level.…