© ISO/IEC 2005 – All rights reserved iii
Contents Page
Foreword .............................................................................................................................................................v
Introduction.......................................................................................................................................................vii
1 Scope......................................................................................................................................................1
2 Terms and definitions .......................................................................................................................... 2
3 Symbols and abbreviated terms..........................................................................................................7
4 Overview.................................................................................................................................................8
4.1 Introduction............................................................................................................................................8
4.1.1 Target audience of ISO/IEC 15408 .......................................................................................................8
4.2 Evaluation context.................................................................................................................................9
4.3 Organisation of ISO/IEC 15408...........................................................................................................10
5 General model......................................................................................................................................11
5.1 Security context...................................................................................................................................11
5.1.1 General security context.....................................................................................................................11
5.1.2 Information technology security context..........................................................................................13
5.2 ISO/IEC 15408 approach .....................................................................................................................13
5.2.1 Development........................................................................................................................................13
5.2.2 TOE evaluation ....................................................................................................................................15
5.2.3 Operation..............................................................................................................................................15
5.3 Security concepts................................................................................................................................16
5.3.1 Security environment..........................................................................................................................17
5.3.2 Security objectives..............................................................................................................................18
5.3.3 IT security requirements.....................................................................................................................18
5.3.4 TOE summary specification...............................................................................................................19
5.3.5 TOE implementation............................................................................................................................19
5.4 ISO/IEC 15408 descriptive material ...................................................................................................19
5.4.1 Expression of security requirements................................................................................................19
5.4.2 Types of evaluation.............................................................................................................................24
6 ISO/IEC 15408 requirements and evaluation results.......................................................................25
6.1 Introduction..........................................................................................................................................25
6.2 Requirements in PPs and STs ...........................................................................................................25
6.2.1 PP evaluation results ..........................................................................................................................26
6.3 Requirements in TOE..........................................................................................................................26
6.3.1 TOE evaluation results........................................................................................................................26
6.4 Conformance results...........................................................................................................................26
6.5 Use of TOE evaluation results ...........................................................................................................27
Annex A (normative) Specification of Protection Profiles............................................................................29
A.1 Overview...............................................................................................................................................29
A.2 Content of Protection Profile .............................................................................................................29
A.2.1 Content and presentation...................................................................................................................29
A.2.2 PP introduction....................................................................................................................................30
A.2.3 TOE description...................................................................................................................................30
A.2.4 TOE security environment..................................................................................................................31
A.2.5 Security objectives..............................................................................................................................31
A.2.6 IT security requirements.....................................................................................................................32
A.2.7 Application notes ................................................................................................................................33
A.2.8 Rationale ..............................................................................................................................................33
Annex B (normative) Specification of Security Targets ...............................................................................34
B.1 Overview...............................................................................................................................................34
ISO/IEC 15408-1:2005(E)
4星 · 超过85%的资源 需积分: 0 11 浏览量
2011-03-25
11:02:57
上传
评论
收藏 727KB PDF 举报 
tanghongbin20122013-12-11标准是必备的，要是能把几部分都打包在一处下载就更好了
feitianfly2012-09-17材料其实有用，希望多发类似的材料
