Common Criteria for Information Technology Security Evaluation, version 3.1 Part 1 (Called “CC 3.1” or “CC”) defines the Security Target (ST) as an “implementation-specific statement of security needs for a specific identified Target of Evaluation (TOE)”. In other words, the ST defines boundary and specifies the details of the TOE. In a product evaluation process according to the CC the ST document is provided by the vendor of the product.
An ST defines information assurance security and functional requirements for the given information system product, which is called the Target of Evaluation (TOE). An ST is a complete and rigorous description of a security problem in terms of TOE description, threats, assumptions, security objectives, security functional requirements (SFRs), security assurance requirements (SARs), and rationales. The SARs are typically given as a number 1 through 7 called Evaluation Assurance Level (EAL), indicating the depth and rigor of the security evaluation, usually in the form of supporting documentation and testing, that the product meets the SFRs.
An ST contains some (but not very detailed) implementation-specific information that demonstrates how the product addresses the security requirements. It may refer to one or more Protection Profiles (PPs). In such a case, the ST must fulfill the generic security requirements given in each of these PPs, and may define further requirements.
Read more about Security Target: Security Target Outline, See Also
Famous quotes containing the words security and/or target:
“In the long course of history, having people who understand your thought is much greater security than another submarine.”
—J. William Fulbright (b. 1905)
“Well gentlemen, this is it. This is what weve been waiting for. Tonight your target is Tokyo. And youre gonna play em the Star Spangled Banner with two-ton bombs. All youve got to do is to remember what youve learned and follow your squadron leaders. Theyll get you in, and theyll get you out. Any questions? All right thats all. Good luck to you. Give em hell.”
—Dudley Nichols (18951960)