Data Protection and Security

VI

Operating System Security and Secure Programming

VI.III

Security Evaluation

Method and Structure of Evaluation:

Security Evaluation can be product oriented or process oriented. The concepts of Repeatability and Reproducibility are important in this regard.

Three aspects are addressed in an evaluation criteria:

• Functionality: The security features of a system.
• Effectiveness: Are the mechanisms used appropriate for the given security requirement?
• Assurance: The thoroughness of the evaluation.