CS 526 Information Security : Assignment 7

We begin by addressing methods for evaluating Xinu with respect to the User Data Protection requirements of the Common Criteria documents. Secondly, we address the constraints necessary to secure an EAL6 certification. We are given that the Xinu operating system has already satisfied the requirements for an EAL5 approval, we only address the additional constraints that must be satisfied to obtain a rating of EAL6. In the interest of brevity, we only list the major section heading, rather than the specific requirements we address (e.g. ADV IMP.2 rather than ADV IMP.2.Xi). It is trivial to take the set difference between the EAL5 and EAL6 requirements. We focus on discussing the specific tools, methods and approaches an evaluator would take to certify Xinu at the EAL6 level. For clarity, our crucial points are emphasized, uld or printed in bold face.