Dictionary of Information Security

Common Criteria for Information Technology

Security the Common Criteria is a standard for

evaluating information technology products and sys-

tems, such as operating systems, computer networks,

distributed systems, and applications. It states

requirements for security functions and for assurance

measures. Canada, France, Germany, the

Netherlands, the United Kingdom, and the United

States (NIST and NSA) began developing this stan-

dard in 1993, based on the European ITSEC, the

Canadian Trusted Computer Product Evaluation

Criteria (CTCPEC), and the United States “Federal

Criteria for Information Technology Security” (FC)

and its precursor, the TCSEC.Version 2.1 of the

Criteria is equivalent to ISO’s International Standard

15408 (I15408).

communications secur ...