Data Protection and Security

VI

Operating System Security and Secure Programming

VI.III

Security Evaluation

Target of the Evaluation:

Evaluation criteria refer to either

• Products: We have to find an accepted set of generic requirements (Security classes of Orange Book and the protection profile of Federal and Common Criteria)
• Systems: Requirements capture and analysis becomes part of each individual evaluation (ITSEC).

VI.III.I Q