A New Evaluation Strategy Based on Combining CC and SSE-CMM for Security Systems and Products

Abstract

In this paper, through utilizing the complementarity of CC and SSE-CMM, we map CC to SSE-CMM, and present a new evaluation strategy for security systems and products: CCS_SE-CMM_CS. The following quantitative analysis is shown that CCS_SE-CMM_CS not only can decrease evaluation expensive, time-consuming and arduous, but also can make the results of evaluation based on CCS_SE-CMM_CS have inheritance, that is to say, the evaluation results of TOE have relation with the same engineering team, the forgoing systems developed by analogous engineering process. More important, the new evaluation strategy has a reasonable time frame, and responds well to the market demands of developers and consumers, as well as improve the evaluation efficiency