A CC-based Security Engineering Process Evaluation Model

Proceedings - IEEE Computer Society's International Computer Software and Applications Conference

Volumn , Issue , 2003, Pages 130-135

  Lee, Jongsook ^a   Lee, Jieun ^a   Lee, Seunghee ^a   Choi, Byoungju ^a  

^a Ewha Womans University   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

DATA PRIVACY; DATA PROCESSING; SOFTWARE ENGINEERING; SYSTEMS ENGINEERING;

SECURITY ENGINEERING;

SECURITY OF DATA;

EID: 0345097590     PISSN: 07303157     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1016/B978-075065332-9.50008-2     Document Type: Conference Paper

References (15)

1. CC: ISO/IEC 15408 Information technology - Security technology - Evaluation criteria for IT security V2.1, December, 1999
2. SSE-CMM: System Security Engineering Capability Maturity Model, April, 1999.
3. AAWG Task 1 Report - An Alternative Assurance Package to the CC's EAL3 assurance level, draft v0.9, August, 1997.
4. ISO/IEC 15443 Information technology - Security techniques - A framework for IT security assurance, February, 2001.
5. CMM: Capability Maturity Model for Software, V1.1, February, 1993.
6. SE-CMM: A Systems Engineering Capability Maturity Model, V1.1, November, 1995.
7. SA-CMM: Software Acquisition Capability Maturity Model V1.03, March, 2002
8. CMMI: Capability Maturity Model Integration for System Engineering, Software Engineering, Integrated Product and Process Development, and Supplier Sourcing, March, 2002.
9. TCMM Trusted CMM Release Summary V2.1, March, 1997.
10. ISO/IEC TR 15504 Software Process Assessment (SPICE), August, 1998
11. ISO/IEC TR 13335 Guidelines for the management of IT Security, December, 1996.
12. BS 7799 Information Security Management, 1999.
13. ISO/IEC 15288 CD2 Life Cycle Management - System Life Cycle Processes, January, 2000.
14. ISO/IEC 12207 Information technology - Software life cycle processes, August, 1995.
15. Final research report on approach to the existing security assurance methods for improving the effectiveness of information security system evaluation, Korea Information Security Agency, December, 2002