A Problem-Oriented Approach to Common Criteria Certification
نویسندگان
چکیده
There is an increasing demand to certify the security of systems according to the Common Criteria (CC). The CC distinguish several evaluation assurance levels (EALs), level EAL7 being the highest and requiring the application of formal techniques. We present a method for requirements engineering and (semi-formal and formal) modeling of systems to be certified according to the higher evaluation assurance levels of the CC. The method is problem oriented, i.e. it is driven by the environment in which the system will operate and by a mission statement. We illustrate our approach by an industrial case study, namely an electronic purse card (EPC) to be implemented on a Java Smart Card. As a novelty, we treat the mutual asymmetric authentication of the card and the terminal into which the card is inserted.
منابع مشابه
A hybrid DEA-based K-means and invasive weed optimization for facility location problem
In this paper, instead of the classical approach to the multi-criteria location selection problem, a new approach was presented based on selecting a portfolio of locations. First, the indices affecting the selection of maintenance stations were collected. The K-means model was used for clustering the maintenance stations. The optimal number of clusters was calculated through the Silhou...
متن کاملAn Problem-oriented Approach in Commenting “Pure Life” in the Verse 97 of Surah An-Nahl
The problem-oriented approach is one of the efficient methods of “contemplation in Quran”. This approach is applied as opposed to the subject-oriented and concept-oriented approaches. Historical analysis of the commentators’ appeal to the verse 97 Surah An-Nahl shows that lack of having the problem-oriented approach has led to the fact that many of them ignored this verse without making any com...
متن کاملROBUST RESOURCE-CONSTRAINED PROJECT SCHEDULING WITH UNCERTAIN-BUT-BOUNDED ACTIVITY DURATIONS AND CASH FLOWS I. A NEW SAMPLING-BASED HYBRID PRIMARY-SECONDARY CRITERIA APPROACH
This paper, we presents a new primary-secondary-criteria scheduling model for resource-constrained project scheduling problem (RCPSP) with uncertain activity durations (UD) and cash flows (UC). The RCPSP-UD-UC approach producing a “robust” resource-feasible schedule immunized against uncertainties in the activity durations and which is on the sampling-based scenarios may be evaluated from a cos...
متن کاملA Common Weight Data Envelopment Analysis Approach for Material Selection
Material selection is one of the major problems in manufacturing environments since the improper selected material may lead to fail in the production processes and result in customer dissatisfaction and cost inefficiency. Every material has different properties which should be considered as major criteria during the material selection procedure. Selection criteria could be quantitative or quali...
متن کاملکاربرد مدل ملی بهره وری در بخش بهداشت و درمان
Introduction: Integrated and goal - oriented productivity attempts as well as decision making for next action can be considered as a leading approach for organizations which will in turn result in to competitive advantages. This research was done to assess Social Security Organization Hospitals in Tehran according to The National Productivity Model. Methods: This cross- sectional descriptive re...
متن کامل