Commercial Off-the-Shelf (COTS) Security Products Evaluation Process

摘要

This document describes the commercial off-the-shelf (COTS) security product evaluation process, defines the seven phases of the evaluation process, outlines the documentation requirements of the process, and discusses how the evaluation process fits into the overall evaluation framework. The evaluation process as described in this document is expected to be revised as the overall evaluation framework is developed. Appendix A contains additional information regarding Common Criteria and protection profiles and Appendix B contains additional details regarding the Information Assurance & Engineering Division (D87) formal inspection process.