Norm

NPR-ISO/IEC TR 20004:2012 en

Information technology - Security techniques - Refining software vulnerability analysis under ISO/IEC 15408 and ISO/IEC 18045

  • Deze norm is ingetrokken sinds 23-12-2015

79,70

Over deze norm

Status Ingetrokken
Aantal pagina's 17
Commissie Interconnection of information technology equipment
Gepubliceerd op 01-08-2012
Taal Engels
This Technical Report refines the AVA_VAN assurance family activities defined in ISO/IEC 18045:2008 and provides more specific guidance on the identification, selection and assessment of relevant potential vulnerabilities in order to conduct an ISO/IEC 15408 evaluation of a software target of evaluation. This Technical Report leverages the Common Weakness Enumeration (CWE) and the Common Attack Pattern Enumeration and Classification (CAPEC) to support the method of scoping and implementing ISO/IEC 18045:2008 vulnerability analysis activities. This Technical Report does not define evaluator actions for certain high assurance ISO/IEC 15408 components, where there is as yet no generally agreed guidance.

Details

ICS-code 35.040
Engelse titel Information technology - Security techniques - Refining software vulnerability analysis under ISO/IEC 15408 and ISO/IEC 18045
Vervangen door

Winkelwagen

Subtotaal:

Ga naar winkelwagen