Analyzing Common Criteria Shortcomings to Improve its Efficacy

Information security has become a key concern for organizations conducting business in the current electronic era. Rapid technological development continuously creates novel security threats, making IT, an uncertain infrastructure. So the security is an important factor for the vendors as well as for the consumers. To fulfill the security needs, IT companies have to adopt some standards to assure some levels that concern with the security in their product. Common Criteria (CC) is one of the standards that maintains and controls the security of IT product. Many IT users in USA and UK have reservations with CC evaluation because of its limitations. We have analyzed the CC shortcomings and document them that will be useful for researchers to have an idea of shortcomings associated with CC. This study will potentially be able to strengthen the CC usage with a more effective and responsive evaluation methodology for IT community.

Autorentext

Rana Aamir Raza has obtained his Master of Science Degree from Blekinge Tekniska Högskola Karlskrona (BTH), Sweden. Since then he has been worked in different National & International Projects in the field of Computer Science and Information Security. Currently, he is working as Assistant Professor in Bahauddin Zakariya University Multan, Pakistan.