Technology Assessment: Methods for Measuring the Level of Computer Security

摘要

The document is a companion to FIPS PUB 102, 'Guideline for Computer Security Certification and Accreditation.' Since a security certification depends upon a technical security evaluation, this document is meant to provide information on and insigt about twenty-five evaluation methods in common use today in the security, EDP audit, and risk analysis communities.