CSPP-Guidance for COTS Security Protection Profiles (Formerly: CS2 - Protection211 Profile Guidance for Near-Term COTS). Version 1.0

摘要

The purpose of CSPP is to provide the guidance necessary to develop 'compliant'211u001eprotection profiles for near-term achievable, security baselines using commercial 211u001eoff the shelf (COTS) information technology; giving those requirements which are 211u001egenerally applicable to such systems. CSPP accomplishes its purpose by: 211u001edescribing a largely policy-neutral, notional information system in the format of 211u001ea protection profile (PP); specifying a subset of the common criteria to be used 211u001ein developing 'compliant' protection profiles; providing the basis for refining; 211u001epolicy neutral guidance into specific policy requirements and system security 211u001ethreats, objectives, and requirements into a subset which is appropriate for a 211u001especific PP.