Bennett Todd [mailto:[EMAIL PROTECTED]] wrote:
> Once we figure out what security is, and how
> to specify it properly in a design, then we
> can start working on certification programs.
One point that I think is missed is that the Common Criteria is not a
certification program, it is a syntax and grammar for specifying security.
So once you figure out what security is, here is way to express it to
someone else.
Now once you have a specification, you can certify products that meet it, or
have someone else do that job as Paul McNabb has described.
scud
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]