摘要
基于通用信息技术安全测评准则(CC)标准设计了模板化测评信息安全系统的CC应用软件工具箱。它能帮助认证机构、客户或授权个人生成与实现无关的一组安全要求的保护轮廓(PP)文档,也能帮助开发者为已有或计划的系统产品生成安全目标(ST)文档。
Base on a lucubration of the information technology-security techniques-evaluation criteria for IT security, CC, and design the Internet applications ,CC Toolbox, which can use template to evaluate the security of information system. The CC Toolbox system not only can help authentication organization, client or individual authorization to create a group of Protect Profile(PP) report for security requirement, which is independent of realization, but also can help developer to create Security Target(ST) report for existent or scheming system and production.
出处
《计算机应用研究》
CSCD
北大核心
2005年第2期100-101,117,共3页
Application Research of Computers
基金
国家"863"计划资助项目(863 104 01 03)
关键词
CC工具箱
信息安全
测评
CC Toolbox
Information Security
Evaluation
