Protection Profile: Security Target, Common Criteria, Information assurance - Tapa blanda

Sinopsis

Please note that the content of this book primarily consists of articles available from Wikipedia or other free sources online. A Protection Profile is a document used as part of the certification process according to the Common Criteria. As the generic form of a Security Target, it is typically created by a user or user community and provides an implementation independent specification of information assurance security requirements. A PP is a combination of threats, security objectives, assumptions, security functional requirements, security assurance requirements and rationales. A PP specifies generic security evaluation criteria to substantiate vendors' claims of a given family of information system products. Among others, it typically specifies the Evaluation Assurance Level, a number 1 through 7, indicating the depth and rigor of the security evaluation, usually in the form of supporting documentation and testing, that a product meets the security requirements specified in the PP.

"Sinopsis" puede pertenecer a otra edición de este libro.