Ricoh Aficio MP C2800 Security Target - Page 53

Security Assurance Requirements

Page 53 highlights

Page 53 of 80 6.2 Security Assurance Requirements This evaluation assurance level of this TOE is EAL3. Table 21 lists the assurance components of theTOE. These components meet evaluation assurance level 3 (EAL3). Other requirements are not included. Table 21: TOE security assurance requirements (EAL3) Assurance classes ADV: Development AGD: Guidance documents ALC: Life -cycle support ASE: Security Target evaluation ATE: Tests AVA: Vulnerability assessment ADV_ARC.1 ADV_FSP.3 summary ADV_TDS.2 AGD_OPE.1 AGD_PRE.1 ALC_CMC.3 ALC_CMS.3 ALC_DEL.1 ALC_DVS.1 ALC_LCD.1 ASE_CCL.1 ASE_ECD.1 ASE_INT.1 ASE_OBJ.2 ASE_REQ.2 ASE_SPD.1 ASE_TSS.1 ATE_COV.2 ATE_DPT.1 ATE_FUN.1 ATE_IND.2 AVA_VAN.2 Assurance components Security architecture description Functional specification with complete Architectural design Operational user guidance Preparative procedures Authorisation controls Implementation representation CM coverage Delivery procedures Identification of security measures Developer defined life-cycle model Conformance claims Extended components definition ST introduction Security objectives Derived security requirements Security problem definition TOE summary specification Analysis of coverage Testing: basic design Functional testing Independent testing- sample Vulnerability analysis Copyright (c) 2009,2010 RICOH COMPANY, LTD. All Rights Reserved.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80

Page 53 of 80
Copyright (c) 2009,2010 RICOH COMPANY, LTD. All Rights Reserved.
6.2
Security Assurance Requirements
This evaluation assurance level of this TOE is EAL3. Table 21 lists the assurance components of the TOE.
These components meet evaluation assurance level 3 (EAL3). Other requirements are not included.
Table 21: TOE security assurance requirements (EAL3)
Assurance classes
Assurance components
ADV_ARC.1
Security architecture description
ADV_FSP.3
Functional
specification
with
complete
summary
ADV: Development
ADV_TDS.2
Architectural design
AGD_OPE.1
Operational user guidance
AGD: Guidance documents
AGD_PRE.1
Preparative procedures
ALC_CMC.3
Authorisation controls
ALC_CMS.3
Implementation representation CM coverage
ALC_DEL.1
Delivery procedures
ALC_DVS.1
Identification of security measures
ALC: Life -cycle support
ALC_LCD.1
Developer defined life-cycle model
ASE_CCL.1
Conformance claims
ASE_ECD.1
Extended components definition
ASE_INT.1
ST introduction
ASE_OBJ.2
Security objectives
ASE_REQ.2
Derived security requirements
ASE_SPD.1
Security problem definition
ASE: Security Target evaluation
ASE_TSS.1
TOE summary specification
ATE_COV.2
Analysis of coverage
ATE_DPT.1
Testing: basic design
ATE_FUN.1
Functional testing
ATE: Tests
ATE_IND.2
Independent testing – sample
AVA: Vulnerability assessment
AVA_VAN.2
Vulnerability analysis