The current development in the world is, that infrastructures of information technologies (IT) offer more and more services to everybody, so that their application field grows. Simultaneously, also opportunities of abuse or misuse of IT infrastructures grow. Security certification and evaluation makes our IT environment more secure and reliable. This contribution addresses the circle of readers and interested parties facing the Common Criteria first time and need to understand what security evaluation and certification are as well as what has to be prepared and considered for them. It introduces the general approach, methodology and proceeding of a security evaluation and certification according to the Common Criteria. The aspects being important for consumers of certified security products are discussed as well. The Common Criteria establish a globally recognized standard for security evaluation and certification of information technology products. As an example, the type approval procedure for the digital tachograph system also concluding a security certification is considered herein.
Security certification and Common Criteria: how does this standard work?
Sicherheitszertifizierung und allgemeine Kriterien: Wie funktioniert dieser Standard?
2006
11 Seiten, 3 Bilder, 3 Tabellen, 4 Quellen
Conference paper
English
From a DO-178B Certified Separation Kernel to Common Criteria Security Certification
SAE Technical Papers | 2011
|Airworthiness Certification Criteria
NTIS | 2004
Establishing Hardware Outgassing Certification Criteria
NTRS | 2009
|National Electronic Process Certification Standard
SAE Technical Papers | 2016
Evaluating Certification Authority Security
British Library Conference Proceedings | 1998
|