A Common Criteria-Based Team Project for High Assurance Secure Systems

Author(s):  
Cynthia E. Irvine
2008 ◽  
pp. 1537-1549
Author(s):  
Rayford B. Vaugh

Corporate decisions concerning the purchase of security software and hardware appliances are often made based simply on the recommendations of the technical staff, the budget process (return on investment arguments), and/or a sales presentation and assertions. This chapter addresses the notion of trusted products and assurance in those products (i.e., confidence in the correct operation of a product) and how assurance is gained through independent review and testing. Early attempts to measure assurance in trusted products are described (some products today still refer to these procedures). Modern approaches to measuring assurance will be discussed in the context of ISO Standard 15408 (the Common Criteria (CC)). Current U.S. federal government policy concerning the use of evaluated products is presented, as well as a discussion of why industrial organizations may wish to consider such products.


10.29007/w9b3 ◽  
2018 ◽  
Author(s):  
Bernhard Beckert ◽  
Daniel Bruns ◽  
Sarah Grebing

It is a common belief that the rise of standardized software certification schemes like the Common Criteria (CC) would give a boost to formal verification, and that software certification may be a killer application for program verification. However, while formal models are indeed used throughout high-assurance certification, verification of the actual implementation is not required by the CC and largely neglected in certification practice - despite the great advances in program verification over the last decade.In this paper we discuss the gap between program verification and CC software certification, and we point out possible uses of code-level program verification in the CC certification process.


2002 ◽  
Vol 27 (6) ◽  
pp. 129-138 ◽  
Author(s):  
Monika Vetterling ◽  
Guido Wimmel ◽  
Alexander Wisspeintner

Author(s):  
Rayford B. Vaugh

Corporate decisions concerning the purchase of security software and hardware appliances are often made based simply on the recommendations of the technical staff, the budget process (return on investment arguments), and/or a sales presentation and assertions. This chapter addresses the notion of trusted products and assurance in those products (i.e., confidence in the correct operation of a product) and how assurance is gained through independent review and testing. Early attempts to measure assurance in trusted products are described (some products today still refer to these procedures). Modern approaches to measuring assurance will be discussed in the context of ISO Standard 15408 (the Common Criteria (CC)). Current U.S. federal government policy concerning the use of evaluated products is presented, as well as a discussion of why industrial organizations may wish to consider such products.


2020 ◽  
Vol 99 (5) ◽  
pp. 271-275
Author(s):  
N.B. Guseva ◽  
◽  
S.S. Nikitin ◽  
R.O. Ignatiev ◽  
E.V. Mlynchik ◽  
...  
Keyword(s):  

Sign in / Sign up

Export Citation Format

Share Document