基于CC安全保障要求的数据采集系统安全工程

Security Engineering for Data Acquisition System Based on CC Security Assurance Requirements

探讨了一种基于保障范围的CC安全保障要求类层次结构,并阐述了各层次下CC安全保障要求在软件工程活动中的确立方法。在此基础上,以一个面向CC EAL3评估级的安全数据采集系统的开发活动为背景,阐述了一种结合实际软件工程活动的、基于CC安全保障类的安全工程方法。

This paper presents a layered framework of CC security assurance requirements based on the assurance scope, and the concrete corresponding assurance methods integrated with the activities in software engineering. Based on this framework, this paper explains a security engineering method based on the CC security assurance requirements, by means of case study developing secure data acquisition system according to EAL3 in CC.