Relier Pairs Security EvaluationVersion en ligne Computer System Security Chapter 11 par Aidora Abdullah 1 Assurance 2 ITSEC 3 EAL 1 4 Functionality 5 Common Criteria 6 Method of Evaluation 7 Protection Profile 8 Evaluation Assurance Level (EAL) 9 Trusted Execution Environment 10 Cryptographic Modules, Security Levels 11 Security Target 12 TCSEC 13 Purpose of Evaluation 14 EAL 7 15 Target of Evaluation The security services have been implemented properly so that the user can rely on them. Evaluation should not miss problems / different evaluations of the same product should give the same results. Defines what has to be done in an evaluation. Security evaluation criteria for US Defense sector. An international set of specifications and guidelines designed to evaluate information security products and systems. European security evaluation criteria separating functionality and assurance. Product/System has the security properties claimed, is suitable for a given application, and is accredited. formally verified, designed and tested. Implementation-dependent statement of security needs for a specific identified TOE. Software has to meet generic security requirements; OR system meets specific security requirements of a given application. Functionally tested. An example of Data Protection, Protection Profile. System provides adequate for meeting a user's concrete security requirements. A reusable set of security requirements. An example of a Trusted Computing Protection Profile.
Créer jeu