Download Security Target - Common Criteria

REDOWL SecuOS V4.0 for RHEL4 ST
2
z
Common Criteria for Information Technology security system (Ministry of Information
Communication Notification No.2005-25) V2.3 Part 2 Conformant
z
Common Criteria for Information Technology security system (Ministry of Information
Communication Notification No.2005-25) V2.3 Part 3 conformant
9
This ST is the CC Part3’ EAL3 assurance requirements conformant and additional
assurance requirement-ADV_IMP.2, ADV_LLD.1, ALC_TAT.1, ATE_DPT.2,
AVA_VLA.2- for government conformant. Consequently, assurance requirement is
following the EAL3+.
This ST has followed the function strength of PP.
1.4. Organization of the Security Target
This document is organized by the follow.
Chapter 1, Introduction – Introduces TOE document identify, overview, PP claims and glossary
Chapter 2, TOE Description – Provides and overview of the TOE security functions and boundary
Chapter 3, TOE Security Environment – Describes the threats, organizational security policies and
assumptions that pertain to the TOE
Chapter 4, Security Objectives – Identifies the security objectives that are satisfied by the TOE and
the TOE environment
Chapter 5, IT Security Requirements – Presents the security functional and assurance requirements
met by the TOE
Chapter 6, TOE Summary Specification – Describes the security functions provided by the TOE to
satisfy the security requirements and objectives
Chapter 7, Protection Profile Claims – Presets the rationale concerning compliance of the ST with
the LACSPP
Chapter 8, Rationale – Presents the rationale for the security objectives, requirements, and TOE
summary specifications as to their consistency, completeness and suitability
1.5. Glossary
z
Mandatory Access Control(MAC)
A kind of access control as a means of restricting access to objects based on the sensitivity
(as represented by a label) of the information contained in the objects and the formal
authorization (i.e., clearance) of subjects to access information of such sensitivity."
z
Discretionary Access Control(Discretionary Access Control)