A security specification verification technique based on the international standard ISO/IEC 15408
Shoichi Morimoto, Shinjiro Shigematsu, Yuichi Goto, Jingde Cheng · 2006
This paper proposes a security specification verification technique based on the international standard ISO/IEC 15408. We formalized the security criteria of ISO/IEC 15408 and developed the verification technique of security specifications based on the formalized criteria with formal methods. With the technique, one can formally verify whether or not specifications satisfy the security criteria of ISO/IEC 15408. Ambiguity and/or oversight about security in specifications written in natural language can also be detected.