Publication detail

Reference

ISO/IEC/TR 20004 ed1.0

> preview

Title

Information technology -- Security techniques -- Refining software vulnerability analysis under ISO/IEC 15408 and ISO/IEC 18045

Publication date

2012-08-08

Format, price
(Swiss francs)
and language

	92.-		17 pages
	92.-		501 Kb

Abstract

ISO/IEC TR 20004:2012 refines the AVA_VAN assurance family activities defined in ISO/IEC 18045:2008 and provides more specific guidance on the identification, selection and assessment of relevant potential vulnerabilities in order to conduct an ISO/IEC 15408 evaluation of a software target of evaluation.

ISO/IEC TR 20004:2012 leverages the Common Weakness Enumeration (CWE) and the Common Attack Pattern Enumeration and Classification (CAPEC) to support the method of scoping and implementing ISO/IEC 18045:2008(E) vulnerability analysis activities.

ISO/IEC TR 20004:2012 does not define evaluator actions for certain high assurance ISO/IEC 15408 components, where there is as yet no generally agreed guidance.

Technical Committee

JTC 1/SC 27 - IT security techniques

ICS Codes

35.040

Character sets and information coding
*Including coding of audio, picture, multimedia and hypermedia information, IT security techniques, encryption, bar coding, electronic signatures, etc.

Work in progress

Project	Stage code	Forecast publication date
No project under development	-	-

Search

Quick access by ref. number

Basket

Your basket is empty

Payment

Accepted credit cards:
	Prices in CHF (Swiss francs)
Request a pro forma to pay by bank transfer or cheque
Learn how to share your publications with your colleagues, using networking options

Just Published

>> Published in the last 30 days