A formal verification and simulation of Common Criteria Recognition Arrangement (CCRA)

Common Criteria (CC) is an international standard body for certifying security products and services. CC is used for information technology security evaluation that covers generic security model, security functional and security assurance components. The standard is published to unify pre-existing s...

Full description

Saved in:
Bibliographic Details
Main Authors: Mat Isa, Mohd Anuar, Mahmod, Ramlan, Udzir, Nur Izura, Ab Manan, Jamalul-lail, Dehghantanha, Ali, Shamsuddin, Solahuddin
Format: Article
Language:English
Published: World Academic Press, World Academic Union 2017
Online Access:http://psasir.upm.edu.my/id/eprint/60651/1/A%20formal%20veri%EF%AC%81cation%20and%20simulation%20of%20Common%20Criteria%20Recognition%20Arrangement%20%28CCRA%29.pdf
http://psasir.upm.edu.my/id/eprint/60651/
http://www.wjms.org.uk/
Tags: Add Tag
No Tags, Be the first to tag this record!
Institution: Universiti Putra Malaysia
Language: English
Description
Summary:Common Criteria (CC) is an international standard body for certifying security products and services. CC is used for information technology security evaluation that covers generic security model, security functional and security assurance components. The standard is published to unify pre-existing security standard for users, vendors, manufactures (industries) and government in using standard security requirements and evaluations. This publication is the first attempt in an information security research that is to CCRA model and simulates it. The purpose of this research work is to help CC’s stakeholders to further understand CC’s framework using a modeling and simulation. The CCRA model will deliver a generic model of CC relationships between a product manufacturer, product authorizer and product consumer in the CC’s supply chains. We use Event-B as modeling language (notation), Atelier-B as theorem prover and ProB as a simulation tool. We also provide a case study for a simulation.