Abuse Melding

Je hebt een klacht over de onderstaande posting:

21-03-2003, 10:32 door Anoniem

The CC itself does not set the requirements, it is more of a set of standard requirements you can use to describe your IT security product. That said, there are several standard sets of requirements (protection profiles) for OSes: Controlled Access PP (roughly the old C2 level, this is what MS Win2K is evaluated against, requires discretionary access control i.e. ACLs or similar). Labelled Security PP (roughly the old B1 level and a proper superset of CAPP, requires mandatory access control) For both there is a stronger requirements set: Single-Level resp. Multi-Level Operating Systems in Medium Robustness Environments PP. These PPs mostly add much more assurance requirements on the development process (and are more explicit in the functional requirements). See for the actual PPs http://niap.nist.gov/cc-scheme/PPRegistry.html#operatingsystem For more information on the Dutch CC lab, see http://www.commoncriteria.nl/

Beschrijf je klacht (Optioneel):

captcha
Nieuwe code
Klacht Versturen
Zoeken
search