Evaluation Process Management Software for Security Evaluation

摘要

In this paper we describe the design and implementation of Evaluation Process Management Software which is developed as a web-based tool for simplifying the security evaluation of Information Technology (IT) products based on Common Criteria (CC) standard. There are three main roles in the system: developer, evaluator and the system administrator. Evaluation process on the IT products is applied by these three main roles. The IT products registered in the system are called target of evaluation (TOE) in the CC terminology.