600.436 High-Assurance Systems
Fall 01/Operational Assurance
28
Vulnerability
Analysis
¨Goal of Vulnerability Analysis is to determine if vulnerabilities identified - during the evaluation of the construction and anticipated operation of the TOE or by other methods (e.g. by flaw hypotheses) - could allow users to violate the TSP
¨Four Components, levelled based on an increasing rigour of vulnerability analysis by the developer and the evaluator
–Developer Vulnerability Analysis
–Independent Vulnerability Analysis
–Moderately Resistant
–Highly Resistant