Mapping TCSEC to Common Criteria

1
Mapping TCSEC to Common Criteria
2
Common Criteria Accreditation Process

• Obtain Protection Profile
• Refine Protection Profile to create Security
  Target
• Security Target Accreditation

3
Protection Profile (PP)

• Required for accreditation or re-accreditation of
  systems to meet new Common Criteria standard
• PP defines mandatory requirements with flexible
  implementation

4
Protection Profile to Security Target
Protection Profile The TSF shall generate an
alarm to the authorized administrator if the
audit trail exceeds assignment pre-defined
limit Security Target The TSF shall generate
an alarm to the authorized administrator if the
audit trail exceeds 10mb.
5
TOE
Protection Profile TOE General class of systems
that the Protection Profile refers to. Security
Target TOE A specifically defined system
6
Mapping C2 accreditedation to Common Criteria

• Obtain NIAP certified Protection Profile (CAPP
  1.d) from http//csrc.ncsl.nist.gov/cc
• Apply Protection Profile to system
• Refinement of Protection Profile creates Security
  Target
• Insert Security Target into DITSCAP process

7
Mapping B1 accreditation to Common Criteria

• Primary difference is Protection Profile
• LSPP 1.b
• More requirements than CAPP 1.d

8
Justin Townsend townseju_at_cnrf.nola.navy.mil