A Security Evaluation and Certification Management Database Based on ISO/IEC Standards
Huilin Chen, Da Bao, Hongbiao Gao, Jingde Cheng · 2016
ISO/IEC 15408 and ISO/IEC 18045 are a pair of international standards for security evaluation and certification of IT systems. However, evaluating and certificating IT systems based on the standards is a difficult and time-consuming work. Thus, we have proposed a supporting environment aiming to reduce the difficulty and time-consuming of evaluation work, enhance the credibility of evaluation results. Because components of the environment shall perform various tasks with complex relationships, manage tens of documents and a huge number of intermediate products. Moreover, the standards are frequently newly published and revised. Therefore, a database is demanded to enhance the associations between the components of the supporting environment, make the environment flexible with updating of the standards, and protect relating data from unauthorized disclosure or modification. This paper proposes a database system that can manage all relating data and relationships between them and be easily updated with the standards changed.