On Fri, Nov 16, 2007 at 01:34:40PM -0500, Greg Smith wrote: > On Fri, 16 Nov 2007, Sam Mason wrote: > >Just out of interest, what does EAL level 1 actually test/check for? > > There's a good summary of this whole process on the relevant Wikipedia > pages: > > http://en.wikipedia.org/wiki/Evaluation_Assurance_Level > http://en.wikipedia.org/wiki/Common_Criteria I had a look though those, but they seemed pretty vague about what was actually being checked/verified. > Actually digging into the details will put you to sleep fast, the specs > are available at > http://isotc.iso.org/livelink/livelink/fetch/2000/2489/Ittf_Home/PubliclyAvailableStandards.htm > > To figure out how to map the EAL levels into what's acually tested, you > need to look at the table at the end of ISO/IEC 15408-3:2005. That serves > as a sort of index of what you need to pay attention to in the other > documentation. And that's the other extreme. The introduction seems readable, lets see how long I last! Sam ---------------------------(end of broadcast)--------------------------- TIP 4: Have you searched our list archives? http://archives.postgresql.org/
