Re: Common criteria evaluation? - Mailing list pgsql-general

On Fri, 16 Nov 2007, Sam Mason wrote:

> Just out of interest, what does EAL level 1 actually test/check for?

There's a good summary of this whole process on the relevant Wikipedia
pages:

http://en.wikipedia.org/wiki/Evaluation_Assurance_Level
http://en.wikipedia.org/wiki/Common_Criteria

Actually digging into the details will put you to sleep fast, the specs
are available at
http://isotc.iso.org/livelink/livelink/fetch/2000/2489/Ittf_Home/PubliclyAvailableStandards.htm

To figure out how to map the EAL levels into what's acually tested, you
need to look at the table at the end of ISO/IEC 15408-3:2005.  That serves
as a sort of index of what you need to pay attention to in the other
documentation.

--
* Greg Smith gsmith@gregsmith.com http://www.gregsmith.com Baltimore, MD