Labeled Security Protection Profile
Encyclopedia
Labeled Security Protection Profile (LSPP) is a protection profile
within the Common Criteria for Information Technology Security Evaluation
, a set of security functional and assurance requirements for IT products. The LSPP requirements are derived from the B1 class of the US
Department of Defense
security standard called Trusted Computer System Evaluation Criteria
(TCSEC) which was originally published in 1985.
For example, z/OS
V1.7 was certified EAL
4+ for LSPP in 2006.
Protection Profile
A Protection Profile is a document used as part of the certification process according to the Common Criteria . As the generic form of a Security Target , it is typically created by a user or user community and provides an implementation independent specification of information assurance security...
within the Common Criteria for Information Technology Security Evaluation
Common Criteria
The Common Criteria for Information Technology Security Evaluation is an international standard for computer security certification...
, a set of security functional and assurance requirements for IT products. The LSPP requirements are derived from the B1 class of the US
United States
The United States of America is a federal constitutional republic comprising fifty states and a federal district...
Department of Defense
United States Department of Defense
The United States Department of Defense is the U.S...
security standard called Trusted Computer System Evaluation Criteria
Trusted Computer System Evaluation Criteria
Trusted Computer System Evaluation Criteria is a United States Government Department of Defense standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system...
(TCSEC) which was originally published in 1985.
For example, z/OS
Z/OS
z/OS is a 64-bit operating system for mainframe computers, produced by IBM. It derives from and is the successor to OS/390, which in turn followed a string of MVS versions.Starting with earliest:*OS/VS2 Release 2 through Release 3.8...
V1.7 was certified EAL
Evaluation Assurance Level
The Evaluation Assurance Level of an IT product or system is a numerical grade assigned following the completion of a Common Criteria security evaluation, an international standard in effect since 1999. The increasing assurance levels reflect added assurance requirements that must be met to...
4+ for LSPP in 2006.
See also
- Common criteriaCommon CriteriaThe Common Criteria for Information Technology Security Evaluation is an international standard for computer security certification...
- LABELED SECURITY PROTECTION PROFILE