Computer Security - Florida State University计算机安全-佛罗里达州立大学.pptVIP

* * * * * * * * * * * * * * * * * * * * * Computer SecuritySecurity Evaluation * Security Evaluation How do you get assurance that your computer systems are adequately secure? You could trust your software providers. You could check the software yourself, but you would have to be a real expert. You could rely on an impartial security evaluation by an independent body. Security evaluation schemes have evolved since the 1980s; currently the Common Criteria are used internationally. * Objectives Examine the fundamental problems any security evaluation process has to address. Propose a framework for comparing evaluation criteria. Overview of the major evaluation criteria. Assess the merits of evaluated products and systems. * Agenda History Framework for the comparison of criteria Orange Book ITSEC Federal Criteria Common Criteria Quality Standards? Summary * Security Evaluation – History TCSEC (Orange Book): criteria for the US defense sector, predefined evaluation classes linking functionality and assurance ITSEC: European criteria separating functionality and assurance so that very specific targets of evaluation can be specified and commercial needs can better addressed TCSEC and ITSEC no longer in use; replaced by the Common Criteria (CC): /, /cc-scheme * Framework for Security Evaluation What is the target of the evaluation? What is the purpose of an evaluation? What is the method of the evaluation? What is the organizational framework for the evaluation process? What is the structure of the evaluation criteria? What are the costs and benefits of evaluation? * Target Purpose Target of evaluation Product: “off-the-shelf” software component to be used in a variety of applications; has to meet generic security requirements System: collection of products assembled to meet the specific requirements of a given application Purpose of evaluation Evaluation: assesses whether a product has the security properties claimed for it Certification: asse