Oracle is an active advocate of the Common Criteria.
The first
vendor to develop and evaluate database protection profiles, Oracle was the first database vendor to be awarded a Common Criteria
certificate for its Oracle7, Release 7.2 database server product.
Evaluation Status
Within the Common Criteria
there are two evaluation states:
Overview
of the Common Criteria
The
International Common Criteria for Information Technology Security
Evaluation is a joint effort between North America and the
European Union to develop a single set of internationally
recognized security criteria. Recently finalized as an ISO
standard (number 15408), the Common Criteria supersedes the existing US TCSEC
and the European ITSEC. It has been since embraced by most countries around the world as the de facto security evaluation criteria. All documents on the Common Criteria can be
downloaded from the CC's
official web site.
The Common Criteria awards
successfully evaluated products evaluation assurance level (EAL)
ratings from EAL0 (lowest) to EAL7 (highest).
To date all of
Oracle's evaluations have been performed under Common Criteria version 2. The
latest Common Criteria version is 3.1 and was released in September 2006. |
Bookmark
