Information on CTAS?

Does anyone have experience with CESG Tailored
Assurance Service run by the UK government. It was
originally billed as a Common Criteria light style of
evaluation. Common Criteria is rather weak on hands on
security analysis and penetration testing. Is CTAS an
better or more of the same?

Cheers, Jon


____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

Relevant Pages

  • Re: Windows EAL4 Evaluation
    ... Windows 2000 is applicable to any other system certified. ... > Understanding the Windows EAL4 Evaluation ... you may have heard that Microsoft has received a Common Criteria ... > one of these -- usually a general baseline protection profile and then ...
    (microsoft.public.win2000.security)
  • Re: Common Criteria Certification
    ... evaluation method with NSA, we have no plans now to abandon Common Criteria, ... and Steve Lipner has never made such a claim. ... We kicked off our Common Criteria evaluation of Windows Vista and Windows ... CC certification both here and abroad. ...
    (microsoft.public.windowsxp.security_admin)
  • [Full-Disclosure] [Fwd: Announcement of Common Criteria Discussion List]
    ... Announcement of Common Criteria Discussion List ... atsec information security announces the setup of a discussion list ... for aspects related to the Common Criteria and security evaluations. ... interpretations of the Common Criteria and the Common Evaluation ...
    (Full-Disclosure)
  • Re: C2 and EAL4
    ... In the "old" days a number of countries had their own evaluation systems, ... Under that system SQL Server 2000 received the C2 certification. ... There is a new system, used worldwide, called Common Criteria. ...
    (microsoft.public.sqlserver.security)
  • Re: Common Criteria Certification
    ... While it's true that we're exploring a new evaluation method with NSA, we have no plans now to abandon Common Criteria, and Steve Lipner has never made such a claim. ... CC certification both here and abroad. ...
    (microsoft.public.windowsxp.security_admin)