Project Overview

INCITS/ISO/IEC TR 20004:2015[R2022]: Information technology - Security techniques - Refining software vulnerability analysis under ISO/IEC 15408 and ISO/IEC 18045, a Technical Report prepared by INCITS and registered with ANSI (Inactive)

page=project_overview&type=project

Start: 2022-02-24 Completed: 2022-07-24

100% Complete

Share |

Title of Standard:: Information technology - Security techniques - Refining software vulnerability analysis under ISO/IEC 15408 and ISO/IEC 18045, a Technical Report prepared by INCITS and registered with ANSI

Scope Summary:: Refines the AVA_VAN assurance family activities defined in ISO/IEC 18045 and provides more specific guidance on the identification, selection and assessment of relevant potential vulnerabilities in order to conduct an ISO/IEC 15408 evaluation of a software target of evaluation. Leverages publicly available information security resources to support the method of scoping and implementing ISO/IEC 18045 vulnerability analysis activities.

Patent Policy Information:: INCITS subscribes to the ANSI Patent Policy when developing American National Standards. INCITS encourages disclosure, where possible, of the existence of pending U.S. patent applications relating to the standard under development, and of any relevant unexpired foreign patents. If such notice is received, INCITS seeks a statement that the patent holder will comply with the ANSI Patent Policy. To download the patent declaration form and for additional information, see https://www.incits.org/standards-information/legal-info.