評価作業プログラムのガイドライン - JEITA

1.
1.1
jk p E ‘’“W0 `a + ‘’“W0 CC À
p ÁÂ$% + p , 2ùÄ, ˆÅ TOE 2ˆ9h EWP«
HIÆÇ ¯ È› +jk EWP È› ÉÊËÇÊT&, ‘’“W0 •–”
+FGp ,jk ) 2ˆ9h wxyz& ÌÍ Î ƒ& Ï $% +
ITSEC E2 ÐÑ 2Ò9 ÓcV&'()* E,jk$ ITSEC E2 &ÔÕ EAL3
Ö× À2=ØhÙÚ9 EAL3+ ‘’“W0 `a9 +EAL3+$ÛÑ~*
À ,£ 1.1 2Ü +
• ×ÝÓcVÞßk
• FGp àÛÑáâ
• ã¹äåæáâ
£ 1.1 EAL3+ À
KÇ
Assurance Family
ASE_ENV
ST (ST)
ASE_OBJ
ASE_REQ
ASE_TSS
çlèé (CM)
ACM_CAP.2
ACM_SCP.1
êë&ì (DO)
ADO_DEL.1
ADO_IGS.1
ADV_FSP.1
ADV_HLD.2
FG(DV)
ADV_LLD.1
ADV_RCR.1
ADV_SPM.1
ÉÊË{k(GD)
AGD_ADM.1
AGD_USR.1
ÇÊíUÊKV (LC) ALC_DVS.1
ATE_COV.2
L(TE)
ATE_DPT.1
ATE_FUN.1
ATE_IND.2
AVA_MSU.2
äåæáâ(VA)
AVA_SOF.1
AVA_VLA.2

1.2
[\ ,îH “W XTïWLðJÊíñÊîðòWV 2ˆ9h]^9 +
jk ,ƒ [\2= ó8 cW 2 l9 +
1.3
2 ôõö Qtp ÷ø +TOE FGp , 2 -. 9
Z*ù ) i+ú p$,CC 2ûØh TOE 9, .ük«ETR¯ 7 p«CB¯
qG\ +ýþ 7 p«CB¯$,ETR |27 k G\ +
1.4
p ,TOE ÿ , p , dÇ V, s ‰& “0 WV
HIÆÇ «EWP¯ È› + p & ,jk$ ‘’“W0$
% +
i+
p , EWP |29h]^~* ƒ& FGp&Â 9 Z*ù )
pÖ×
(1) ST
ô $]^~* +
ST , ` , ,TOE ‰ `a {k$,ST ,j ST
Ö
(2) TOE
TOE cW &9hÒ $% +
TOE ,ST 2¤ih ~* À 2] ~*hi ,TOE k
áâ ®9h 9,r ~* äåæ 9 $ Ñ Ï $% ƒ& +
(3) ETR È›
p , 2FGp2ˆ9h ETR È›9, wh WP m Šbý
ETR \~* G\ ƒ& % + +) p * ,! ETR UÊKV 2¤ih " ˜` 9,ý ETR $ ý #` \$+
, WK‘’“W0 %& †-.ük«OR¯&'(®óŒFGp2ˆ9hG E2n˜ ./ 0ÇW Ü
G1~* &G\~* +

1.5 `abcd ef
£ 1.2 2 EAL3+2ˆ ‘’“W0 ç< Ü +! ‘’“W02ˆ9h, p
‚7= ‚-., > / ,"B ?WV« L s, L?WVÕ¯ `a9 Z*ù
) i+
£ 1.2 ‘’“W0 ç<
‘’“W0 ID ‘’“W0@
WP3000 ST
WP3100
WP3200
WP3300 PP AB
WP3400 TOE À
WP3500 TOE UC Þß
WP4000 FG
WP4100 çlèé
WP4200 FG
WP5000 ]
WP5100 Þß
WP5200 5ÝÓcV
WP5300 ×ÝÓcV
WP5400 DEæ
WP5500 L
WP5600 ã¹ L
WP6000 FÑ
WP6100 èépÉÊË
WP6200 ÑpÉÊË
WP6300 êë
WP6400 6 78l7:;
WP7000 äåæ
WP7100 FGp äåæáâ
WP7200 ã¹9 äåæáâ
WP7300 GH
WP7400 àÛÑáâ
WP7500 I L
WP8000 .ü
WP8100 Jš.ü
WP8200 "#.ük

CM
1.6 TOE gh i
CC ,TOE ÇÊíUÊKV `a9 hi i ,?@ `9,ÒÑ ÇÊíUÊKV % +
1.3 2KW SWËÖ `~* ÇÊíUÊKV Ü +
qcr
`a
t
] 0JK
LSWË
1.7 jk el
1.3 KW SWËÖ TOE ÇÊíUÊKV&ÒÑ?@
jk , p2=Øh]^~* , ‘’“W0 È›9hi +LM
‘’“W0 ÿ ,2 M FGp @N wx ‡ OP2QR +ST ,
ÓcV )ã¹9hi $,3 M2ã¹~S +TM )UM 32 ‘’“W0
È›9hi + ‘’“W0 ?@ V WX $%>,cW &9 ?@ Y Z[ +
” JEIDA no&]v [\2¤Z ”$% + ‘’“W0 ID Z[Ï =$
2 ” ID«WEID¯ \t9h% +
1.8 mnop
CM DVS CM DVS
FGp
^–
CM: Configuration Management
DVS: Development Security
AGD: Assurance for Guidance Document
êë
Fb
_ÃFÑ
c`
_Ã
H/W
6
8l
AGD
àÛÑ
1) [CC1v1] Common Criteria for Information Technology Security Evaluation Part1:
Introduction and general model version1.0 96/01/31 CCIB-96/011
2) [CC1v2] Common Criteria for Information Technology Security Evaluation Part1:
Introduction and general model Version 2.0 Beta 1 Oct. 1997 CCIB-97/067
3) [CC3v1] Common Criteria for Information Technology Security Evaluation Part3:

Security Assurance Requirements version1.0 96/01/31 CCIB-96/013
4) [CC3v2] Common Criteria for Information Technology Security Evaluation Part3:
Security Assurance Requirements Version2.0 Beta 1 Oct 1997 CCIB-97/069
5) [GPPS] ISO/IEC JTC 1 SC27/WG3 N391 Guide for production of PPs and STs , 1997-10-
1
6) [ITSEC] Information Technology Security Evaluation Criteria (ITSEC) June 1991,
Version1.2
7) [ITSEM] Information Technology Security Evaluation Manual (ITSEM) 10th September
1993, Version1.0
8) [CEM1] Common Evaluation Methodology for Information Technology Security Part1:
Introduction and general model Version 0.6 97/01/11
1.9 uv
1.10 .v
CEM Common Evaluation Methodology
CLEF Commercial Laboratory Evaluation Facility
CM Configuration Management
DVS Development Security
ETR Evaluation Technical Report
EWP Evaluation Work Program
FS Functional Specification
HLD High Level Design
LLD Low Level Design
SOF Strength of Functions
ST Security Target
TOE Target of Evaluation
TSF TOE Security Functions
VA Vulnerability Assessment
j{ ÛÑ~* Ñd e Ö×2Ü +
f WX È› ghBd$k * +Bd&9h ®iÛÑ «{B ‰¯Öj È›5
—` kl YZ i+
IT TOE ; v mn IT +”(ù; HÇ’LíòW «opqr
OS¯ ‰

2 wxyz{
Ö×2 stuvw$FGp 2 9 Z*ù ) i x Ü +
!y x ,zz{|}~{v2€`~*hi ,ÌÍ&£ q À ‚ Œ $ Z*ù
) i+
7ST( ƒ )
7 Þßk
75ÝÓcV k
7×ÝÓcV k
7£ ˆ„(LÓWU/ )
7 LÞßk« L…dÓ0áâ,†~áâ ¯
7èépÑÉʦT {k
76 ,8l,:; 2Q {k
7 ÑpÑÉʦT {k
7çlèé2Q {k
7êë2Q {k
7FG 2Q {k
7 GHáâ
7àÛÑ áâ
7äåæáâ
(1)ST
ST ,TOE ˆ‡ wx ,Œˆwx €`9 {k$% +ST ,
CC Part 1 çl2ûØhçl +
(2) Þß
Þß , j‰ Þß Œ $% +
(3)5ÝÓcV
5ÝÓcV ,TOE ,U & Š‹ ÊTfíJW 2> / Œ 9
{k$% +
(4)×ÝÓcV
×ÝÓcV ,5ÝÓcV =>~)2] > / Œ 9 {k$%>, 0 WVÓc

V$ TSF ̉ Žx È› Œ $% +
(5)£ ˆ„(LÓWU/ )
£ ˆ„ , TOE ] £ " ˆ„Q‘ Œ $% +ƒ* ,ã¹
{k$Œ,!£ x ) ‰ $Œ=i+
(6) LÞß
LÞß , L ’ , LA3, L m +
L…dÓ0áâ,†~áâ +
(7)èépÑÉʦT
èépÑÉʦT ,TOE 9i B$,çl,“”,èé ƒ&2•– % — ÛÑ
y˜$% +
èépÑÉʦT 2 ,C îV ]TÇÊTšVHŒ * +
(8)6 ,8l,:; 2Q {k
TOE ›œ26 ,8l E -. +ƒ* ,ã¹ {k$ŒèépÉʦT
) ‰ $%ØhŒ=i+
(9) ÑpÑÉʦT
ÑpÑÉʦT ,TOE f èép$% Ñp ÛÑ y˜$% +
ÑpÉʦT 2 ,C îV ]TÇÊTšVHŒ * +
(10)çlèé2Q {k
TOE FG2ÛÑ~* ,çlèé2Q {k +
(11)FG 2Q {k
FG ,TOE FG,‹T T 2¤ih,TOE žæ,†œæ Ÿ E
,x é ,A3 ,— ˆ 2ˆih €¡ €¢$% +
(12)êë2Q {k
TOE ›œ2êë A£x2Q {k +
(13) GHáâ
GHáâ ,GHáâ ˆÅ& ‹…¤ 2ˆih,¥ ¦
§2ˆ‡$x ‚ áâ9,GHAB\$Œ $% +GHAB ,SOF-basic,SOF-medium,

SOF-high i¨* $ Z*ù ) i+
(14)àÛÑ áâ
àÛÑ áâ ,TOE ›œ$ i©Â$Œ,èép *2ª ˆ i K ý±Œ
ƒ& E áâ$% +
(15)äåæáâ
äåæáâ , 9 $ ,TSF « ¬,­®, ¯ æŒ ~* ƒ& iƒ&
E áâ$% +

3. ST
ST CC ASE KÇ $ ~* , WK‘’“W0 + ,ST †œ$) °
æ %>,"# 2 Œ $%>,þ2£± TOE cW &9hÒ $% ƒ&
E Œ $% +ˆ >,ƒ ‰ , WK‘’“W02ŒÃŠ²h\³* Z*ù )
i+
/*œ ´CC dW0XTeµ j[\ 2 G\~*hi Ø E,a9iíñ $%
ASE_DES & ASE_INT ƒ {k dW0XT$ ·> *hi i+ƒ*) íñ 2Q
, WK‘’“W0 údW0XT2¸¹ `$% +
3.1 |}
ST ?j& {k$% ƒ& ),j, WK‘’“W0 ST 2Ü~*hi TOE
5 —æ 2ˆ9hÒN$% ƒ& +WP3000 CC íñ Ö
× , WK‘’“W0 +
WP3100º ƒ º
WP3200º ƒ º
WP3300º ƒ ºTOE À
WP3400º ƒ ºTOE UC Þß
/*œ ´ƒƒ$ »³> , WK‘’“W0 `a ƒ&ŒÏ $% +Ö 2`a9 =$ CC
íñ 2¼Ø , WK‘’“W0 çl$ ±,ST çl2¼Ø , WK‘’“W0 `a
ƒ&ŒÏ $% &'()* +ƒ =$ ƒ& ),JEIDA ” ST ½ ‡& } ‰
á2á¾ 9È›9 +
3.2 ~ € ok
(1) ~ ok
• ST( ƒ )
(2) ok
• ST J š¿ L

3.3 ‚ (WP)ƒ „
j, WK‘’“W0 ,} ‰ , WK‘’“W02ŒÃÀZh\³ Z*ù ) i+

3.4 *+ (WP3100)
3.4.1 …|
ID
ÌÍ&£ 2ˆih 7
01 TOE È› ,TOE 2=Øh Ÿ wx IT yÁ2
ˆ ÂóŒ9± ` —`9, QR~*hi ƒ& ÃÄ +(1.1C)
02 TOE È› ,TOE Ñ v2Å wxÆÇ &9h s
—`9, QR~*hi ƒ& ÃÄ +(1.2C)
03 TOE È› , ]v , % i `~* $ TOE ›œ ÛÑ
2Q ` —`9, QR~*hi ƒ& ÃÄ +ƒ È` , 2¤Z x é , —
Š‹ £É , ƒ*)2l` 9 i+(1.3C)
p2= 7
51 p , TOE È› ,én̉ ) °æ ”ˆƒ& 79 Z*ù )
i+(1.2E)
3.4.2 WP †
ID ”
M2¤Z 7Ê Ë
01 )ù, &9h,ÆÇ &9h s È›~*hi ÃÄ
*1 (02)+
02 ˆ‡ &ˆ‡9 i 2áZhÈ›~*hi ƒ& ÃÄ +(01)+
03 QR&9h,Ö× ô¿ *hi ƒ& ÃÄ +
*2 7 \Ìp Í(”´TOE ÎÏ~* ÏWÐ)
7¦§ ˆÅ& IT yÁ(”´ ž Wf)
7¦§ WÑ(”´TOE 2ÎÏ~* ÏWÐ Ò> ƒ&)(01)
04 ›œ ÛÑ2Q `2 ,Ö× ôõö ` *hi ÃÄ +
*3 7TOE wh É2ˆ x é Ÿ
7 £É(È›ÌÍ ”´íñÊîðòWV ̉ 1’L, WK&j‰ 1’L, WK 1’L, WK
£&9h Ó çl~* ƒ&)
7— É(È›ÌÍ ”´ Ñp m ÔÕ, Ñp •–, Ñp Ö×~*hi HÂ
iÕ)(03)
p
05 ›œ ÛÑ2Q `&ˆ‡9 i($x i) "2Ø Ù QR iƒ& ÃÄ
06
(51)+
ÆÇ &9h s&! "2Ø Ù QR iƒ& ÃÄ (51)+
(j[\$ ÚÛ)
/*1 [GPPS] \Ü B ÆÇ &9h s&9heˆ ” Ü9hi +
Ý—` ÆÇ ,NhÖ×2Ü9hi Ö5 =>> / s Þ9hi

P.DAC —V Wfq 9iîK Ö×2?ßih˜`~* .+
a) ] 0JKL ºÞp
b) îK 9=$& U 0JKL îÊ T
c) ] 0JKL ºÞp2=ØhU 0JKL2ˆ9ht()* ] 0JKLq àá$RÜ
îK â
/*2 WE3103 [\2¤Z ”
Ö× T1 $ , p Ýj‰ 1’L, WK ¦§pã \Ìp$%>,ÝUW/ ã
¦§ IT yÁ U 0JKL$%>,Ý £9=$& ãƒ& ¦§ WÑ$% +
T1 j‰ 1’L, WK ¦§p , 9hi Rä UW/ Öj UW/ 2 £9=$
& +(”´ å L$ ~*hi i&9hŒ,å L ‹WV Â`æ&9hçl ƒ&
% )
/*3 WP3104 [\2¤Z ”
p Ö× Ë $ 79 +
a) 2¤Z x é Ÿ
5.íñÊîðòWV ,èép Ó îK $x =$2,x é 2 Ÿ~* Z*ù ) i+
—ç Ñ + WL& + WL2ˆ wh £ Ôß2 Ÿ~* Z*ù ) i+í
ñÊîðòWV 1’L, WK ) WL íñÊîðòWV YZ\Z E2çl~* ƒ&
= è +
.b) £É
1.íñÊîðòWV ̉ 1’L, WK&j‰ 1’L, WK " 1’L, WK £&9h Ó çl~
* Z*ù ) i+ˆ >,íñÊîðòWV Ý îVåW ã&9h `~* +
.c) — É
2.íñÊîðòWV
+
èép ,íñÊîðòWV è銋 çl •– é¸Õ>Nh)*

3.5 |} (WP3200)
/*œ ´ CC dW0XTL$ ÝIT ã&Ýf IT
ã&`a9hi +dW0XT 2µ CC ‘WL 1[CC1v2]$ ÝTOE ã&Ý ã&i$
Ñd2c³Øhi +
[GPPS]$ ,êp Ñd ,ÝIT ã&Ýf IT ã ÛÑ9hi +
JEIDA IT IT $%>, IT &f
IT &én9hi +

3.5.1 …|
ID
ÌÍ&£ 2ˆih 7
01 È› ,TOE & TOE È›9h% ƒ& ÃÄ +
(1.1C)
02 TOE , R 2È›9, —`~* ¤=‹ ë IT 2=
sq&ˆ„ ~*hi ƒ& ÃÄ +(1.2C)
03 2¤Z , R 2È›9, —`~* ¤=‹ ë TOE
2¤ihÒ E s% i È`q&ˆ„ ~*hi ƒ& ÃÄ +
(1.3C)
04 ½ ‡ , œh —`~* 2ˆ‡$x ƒ& R9hi ƒ& ÃÄ
+(1.4C)
05 ½ ‡ , È›~* ,œh —`~* , ÆÇ&9h
s& ` ‚M 2ÒN$% ƒ& R9hi ƒ& ÃÄ +(1.5C)
p2= 7
51 p , TOE È› , †œ$én$x̉ ) °æ ”ˆƒ& ÃÄ
+
3.5.2 WP †
/*œ ´ Ö× CC dW0XT 1 2?ßihi +ˆ >, ,IT
&f IT 2áö9hi +ƒ áö [CC1v2]2?ßihc`~* bì$+
Z[9hi íî [CC3v1] Y í î$% +

ID ”
M2¤Z 7Ê Ë
01 IT &f IT 2á *hi ƒ& ÃÄ
02
(1.1C)
IT ,TOE % i TOE & IT ï 2=>‚ ~*
$% ƒ& ÃÄ +(1.1C)
03 M —`~* % i ÆÇ &9h s ,ð ±&
Œñ &ˆÖ5 2=ØhQR~*hi ƒ& ÃÄ +(1.2C)
04 f IT TOE $ò ³* f "# ˆ‡ 2=Øh‚ ~* Œ $%
ƒ& ÃÄ +(1.1C)
05 M —`~* % i ÆÇ &9h s ,ð ±&
Œñ &ˆÖ5 f 2=ØhQR~*hi ƒ& ÃÄ +(1.2C)
½‡ M2¤Z7ÊË 06
*1
½ ‡ & ˆ„£ 9hi ƒ& ÃÄ +(1.4C)
07
,! 2ˆ‡ ƒ& ó‡ M2 Ü9hi ƒ&
*1 ÃÄ +(1.4C)
08 wh `~* ÛÑ B 2=>‚M~*hi ƒ& ó‡
*1 M2Ü~*hi ƒ& ÃÄ +(1.5C)
09 ÆÇ &9h s % ©Â, wh s 2=Øh
*1 ‚
p
~*hi ƒ& ‡ M2Ü~*hi ƒ& ÃÄ +(1.5C)
10 FGp&Ôß2 & , s ˆ„£ l9,½ ‡ ô F ƒ
&2=> ̉ ) °æ % ƒ& ÃÄ +(1.2E)
/*1 WE3206,07,08 and 09
IT
”
O.I O.DAC1 O.DAC.2 ODAC.3 O.AUDIT O.ADMIN
T1
T2 √ √ √
IT & Q‘
O.DAC2 j‰ 1’L, WK )îK $x å L¤=‹ UW/ + WL kl +
AUDIT :ƒ>$ ¦§ õö9, ¦§ Ã= A íñÊîðòWV èép2 9,
ÒN ˆ÷
+
Ï 2 +OE4 O.AUDIT øm 2ÛÑ~* ƒ&2=> ~* —ù
O.ADMIN OE1 & OE3.2=>úû~* íñÊîðòWV ›œ èé ƒ&2=>
ü úû +

3.6 PP ‡c (WP3300)
/*œ ´ j[\$ ]ø PP Z[9hi i E,jý$ PP 2Q ” i+
3.6.1 …|
ID
ÌÍ&£ 2ˆih 7
01 !y PP KÓW , @‡ KÓW PP KÓW 2 yþ Eh—`9h
i ƒ& ÃÄ +
02 !y PP KÓW , PP ÎÏ~* ì ‚ IT Š‹ À —`
,PP Š‹ À ~)2> / Œ 9hi ƒ& ÃÄ +
03 !y PP KÓW , PP Š‹ À2Dÿ IT Š‹ À
—`9hi ƒ& ÃÄ +
04 !y PP KÓW , IT À œ–æ ,PP À Ó U+ WL9,PP À
&Ø Ù9 iƒ& Ü9hi ƒ& ÃÄ +
05 !y PP KÓW , PP > / Œ PP => Å È› Þø no& Øhi
ƒ& Ü9hi ƒ& ÃÄ +
06 !y PP KÓW , PP À > / Œ PP => Å È› Þø no& Øhi
ƒ& Ü9hi ƒ& ÃÄ +
07 !y PP KÓW , PP ‚ 9, À ‚ ƒ& Ü~9hi ƒ& ÃÄ +
p2= 7
51 p , PP KÓW , †œ$én$x̉ ) °æ ”ˆƒ& ÃÄ +
3.6.2 WP †
&ē 9+

3.7 ˆ (WP3400)
3.7.1 …|
ID
ÌÍ&£ 2ˆih 7
01 TOE IT À , Ï l> CC Part 2 ÀST+ W1TL Ñih£ 9hi
ƒ& ÃÄ +(1.1C)
02 TOE IT À , CC Part 3 2`a9 ÓcV Š$i ƒ& ÃÄ +(1.2C)
03 TOE IT À , Ï l> CC Part 3 ÀST+ W1TL Ñih£ 9hi
ƒ& ÃÄ +(1.3C)
04 ST , 2„²h,IT q À —`9`a9hi ƒ& ÃÄ +(1.4C)
05 IT q À , Ï l>,CC Part 2 3 À Ñih£
9hi ƒ& ÃÄ +(14.5C)
06 CC ST+ W1TL Ñih£ 9hi i À ,CC ÀST+ W1TL £
V&9hÛÑ9hi ƒ& ÃÄ +(1.6C)
07 ST RÜ9 ‰ =$ ÀŒ‚ ƒ& 9 —`9, ‚ ƒ& Ü
9hi ƒ& ÃÄ +(1.7C)
08 ST À , RÜ9 ‰ =$ À Œú” 2Ò $% ƒ& Ü9hi ƒ
& ÃÄ +(1.8C)
09 ST 2 * CC Àq ì , —`9, QR9, †l9hi ƒ& ÃÄ +
(1.9C).
10 ST 2 * CC À 2÷Q‘ , 'g~*‚M~*hi ƒ& ÃÄ +
(1.10C)
11 œh À ,TOE @‡Œ9± f @‡ ˜`9 C ’K2ÜS =$,
`Ï $, _% À È›9hi ƒ& ÃÄ +(1.11C)
12 œh IT À , no ý±Œ =$2 ±£ ~*hi ƒ& ÃÄ +
(1.12C)
13 œh IT À , ‰ À ‰ IT ‚ ³ >, ‰
ÀŒý ) ˆ ‚ =$,IT qDE~*hi ƒ& ÃÄ +
(1.13C)
14 ST , À TOE IT ‚ 2Ò $% &Ü~*hi ƒ& ÃÄ
+(1.14C)
15 ST ,IT À Á , 2úû9%$=$çl~*,œ–&9h̉ ) °æ %
ƒ& Ü~*hi ƒ& ÃÄ +(1.15C)
ID
p2= 7
51 IT À ÁÂ , œh IT ‚ ƒ& ÃÄ +(1.2E)

3.7.2 WP †
ID ”
À M2¤Z 7Ê Ë
01 IT À IT À& IT À 9hi ƒ& ÃÄ +(01,03)
02 CC $RÈ9hi —` EAL —`% i `a~*hi ƒ& 7 +(02)
03 IT À ,CC ‘WL 2 ÀST+ W1TL ÛÑ9hi ƒ& ÃÄ (01)+
04 IT À ,CC ‘WL 3 ÀST+ W1TL ÛÑ9hi ƒ& ÃÄ (03)+
05 )ù,IT 2¤Z À& À È›9hi ƒ& ÃÄ (04)+
/* TOE ê &9h UNIX OS 9h¤>,j[\$ IT À ~*h
i +
06 IT À Ï Œ 2ˆih ,CC ‘WL 2 ÀST+ W1TL ÛÑ9h
i ƒ& ÃÄ (05)+
/* j[\2¤Z IT À ,CC ‘WL 2 ÛÑ9h£ ~*hi +
07 IT À Ï Œ 2ˆih ,CC ÀST+ W1TL ÛÑ9hi ƒ&
ÃÄ (05)+
/* j[\2¤Z À ,CS1 2 * Œ $% ++
08 CC ÀST+ W1TL ÛÑ9hi i À %*ù, À CC ÀST+ W1T
L V&9hi ÃÄ (06)+
/* j[\$ ÙÚ~* À ÷ø9 i+
09 ST 2 * CC À2ì % ©Â, ì —`~*,QR~*,†œ$
% ƒ& 7 +(09)
10 wh À , `Ï $ & À ›whi ƒ& ÃÄ +j
Ë Dÿ À i©Â ÚÛ$x +(11)
11 wh À %i i ±£ ~*hi ƒ& ÃÄ +ƒ* CC
À ST+ W1TL ÛÑ9hi ©Â ÚÛ$x +(10)
/*j[\$ ÚÛ9
½‡ M2¤Z7ÊË 12
& À ˆ„£ Ü~*hih,! !
*1 À ‚ 9hi ƒ& QR{ ~*hi ƒ& ÃÄ +(07)
13 À , ƒ & ÓcV t()*hi 2ˆ9h, ¨ ˆ
iƒ& N é È›~*hi ƒ& ÃÄ +(08)
14 ST 2 * CC À wh 2÷Q‘ ‚ ~*hi ƒ& ÃÄ +‚
*2 ~*hi i2÷ ÷ø ©Â , é Ü~*hi ƒ& 7 +(10)
15
À& IT ˆ„£ ÃÄ + £ Ö× ƒ& Ü9h
*1 i Z*ù ) i+
! IT ð ±&Œñ &ˆ À
! À ð ±&Œñ &ˆ IT QR9hi ƒ&
—`~* À 5È2ÒÂ 2 á$% ½ ‡ f WX 2Ü9hi
ƒ& ÃÄ + ½ ‡ ST 2 * œh À 9hi ƒ&
ÃÄ +(13,14)
16
À 2úû9h« ¬, ,f ¯ æŒ 2ˆ‡$x =$2,œ–&9h
*3 Ø Ù iƒ& ÃÄ (15)

p
17 À& ˆ„£ l9 ½ ‡ w +(1.2E)
18 « ¬, ,f ¯ æŒ áâ ,FGp nâ& V2]^ +(1.2E)
/*1 WE3412 & 15 ”
2ˆ9h ~* Ö× £¤=‹ QR ) wh À wh
‚ 9hi ƒ& 79 +
À O.DAC1 O.DAC2 O.DAC3 O.I O.AUDIT O.ADMIN
FIA_ATA.1 √ √
FIA_ATA.2 √ √
FIA_ATD.2 √ √
FIA_UID.2 √ √
FAU_ARP.1 √
FAU_GEN.1 √
FAU_SAA.1 √
FAU_SEL.2 √
FPT_RVM.1 √ √ √ √ √ √
FPT_SEP.2 √
FPT_TSA.1 √
FPT_TSM.1 √
FPT_TSU.1 √
FAU_POP.1 √
FAU_PRO.1 √
FAU_PRP.1 √
FAU_SAR.1 √
FAU_STG.1 √
FDP_ACC.1 √ √ √ √
FDP_ACF.1 √ √ √
FDP_ACF.4 √ √
FDP_ACI.1 √ √
FDP_SAM.1 √
FDP_SAQ.1 √
IT
IT & À Q

O.I íñÊîðòWV ,̉ 1’L, WK r`~* UW/ $ , £ ¹ ê2,
ã å L å L ÁÂ —` ƒ& $x Z*ù ) i+
KÇ FIA À Ñp 7 ( ~* i2]\$x 9hi
FPT_RVM.1 2=>úû~* FIA_ATD.2,FIA_UID.2) AB&, E2 Ñp æ
Å~* (FIA_ATA.1, FIA_ATA.2)AB 9hi +
/*2 WE3414 ”
Ö× £¤=‹ QR )CC À wh 2÷ ‚ ~*hi ƒ& 79 +
Ö× £ ,IT 2¤Z À Eh, M$Ü9 wh ST+ W1T
L 9hi +!ST+ W1TL ,Z[ E í î Õ>Nh)*hi +!ST+ W1
TL &2 CC $RÈ~*hi 2÷Q‘ È›9h%>,ST+ W1TLí î Z[à È
›9hi +ƒƒ$ , wh ST+ W1TL wh 2÷& ST+ W1TL 2÷
Q‘ ‚ ~* ƒ& Ü9hi +
Ö× ƒ £ 1 v œ Ê Ë Ü +
IT À Ü +
(H) 2÷Q‘ 5Ý $% ST+ W1TL2=>‚ ~* ƒ& Ü +
ƒ ST+ W1TL 2÷Ã
Ë í ST+ W1TL@ ST+ W1TL@ Z[
1 FIA_ATA.1 FIA_ATD.1
FPT_TSA.1
2 FIA_ATA.2 FIA_ATD.1
FPT_TSA.1
3 FIA_ATD.2 ADV_FSP.1 4
24 FDP_SAQ.1 FDP_ACC.1
FPT_TSA.1
ST+ W1TL 2÷
3(H)
11
3(H)
11
19
11

*3 3416 ”
ƒƒ$ ~* áâ , À Ö×2›w =$ f ¥ ¦§2ˆ9hi 2
9h 2 Ü9,Ö× =$29h À )* ƒ& ƒ&=>,
úû¤=‹ ̉ ) °æ ç +
« ¬¦§ ¦§p À ]\$x ± +TOE q ÊTfíJW Ñ
ΠE
¦§ À2=>ÛÑ~*hi Wf †œæq ¦§ +
f¯ 挦§ TSF à Ø çl +
9hi À
À « ¬ f ¯ æŒ
FIA_ATA.1 FPT_RVM.1 FIA_ATA.2.2
FPT_SEP.2
FIA_ATA.2 FPT_RVM.1 FIA_ATA.2.2
FPT_SEP.2
FIA_ATD.2 N/A FIA_ATA.2.2
FPT_SEP.2
N/A
N/A
N/A
FIA_UID.2 FPT_RVM.1 FPT_SEP.2 N/A
FAU_ARP.1 FPT_RVM.1 FAU_SAA.2.1
FAU_GEN.1
FPT_SEP.2
FAU_GEN.1 FPT_RVM.1 FAU_PRO.1
FPT_SEP.2
FAU_SAA.1 FPT_RVM.1 FAU_SAA.2.1
FPT_SEP.2
FAU_SAA.2.1
FAU_GEN.1
FAU_GEN.1
FAU_SAA.2.1
FAU_GEN.1
FAU_SEL.2 N/A FPT_SEP.2 FAU_GEN.1
ST+ W1TL" úû R

3.8 h‰ Š‹ (WP3500)
3.8.1 …|
ID
ÌÍ&£ 2ˆih 7
01 TOE UC Þß ,TOE IT Š‹ TOE ˆ `a9h% ƒ& Ã
Ä +(1.1C)
02 TOE UC Þß , ‰ IT ‰ À ‚ 9hi ³ >, ‰
Œý ) ˆ À ‚ 2 t9hi ƒ& ³ =$
) Àq&DE~*hi ƒ& ÃÄ +(1.2C)
03 TOE IT , & i én$x > / ÓcV$, fWX
2`a~*hi ƒ& ÃÄ +(1.3C)
04 ST 2 * ç "Bq Z[ , ‰ ç "B ‰ ] 2ÛÑ
~* ³ =$, Q‘ q&DE~*hi ƒ& ÃÄ +(1.4C)
05 TOE UC Þß , TOE IT TOE œh À ‚ ƒ& Ü9h
i ƒ& ÃÄ +(1.5C)
06 TOE UC Þß , TOE IT ÆÓ Â³S , TOE ‚
E2 2ú” =$Ž±ƒ& Ü9hi ƒ& ÃÄ +(1.6C)
07 TOE UC Þß ,TOE IT ˆ TOE ‚ 2ÒN$% ƒ& R9hi
ƒ& ÃÄ +(1.7C)
08 TOE UC Þß , ‰ ˆ ‰ À ‚ ³ =$, ˆ Àq&D
E~*hi ƒ& ÃÄ +(1.8C)
09 UC Þß
(1.9C)
, ˆ œh TOE À ‚ ƒ& Ü9hi ƒ& ÃÄ +
p2= 7
51 p , TOE UC Þß †œ$, én9 ±, ̉ ) °æ % ƒ& ÃÄ +(1.2E)

3.8.2 WP †
ID ”
TOE UC Þß M2¤Z 7Ê Ë
01 TOE IT UC Þß , & i én$x > / ÓcV$, fWX
TOE IT `a9hi ƒ& ÃÄ +(03)
02 )ù,TOE UC Þß TOE IT ˆ `a9hi ƒ& ÃÄ (01)
03 ç¤=‹ , "B % ©Â,ƒ*) ‰ $ Ñ~
*hi TOE UC Þß `a9hi ƒ& ÃÄ +(04)
/* j[\ TOE 2 ç ÛÑ~*hi i E,jË ÚÛ9
04 wh , ± ±&Œñ &ˆ À ‚ 9hi ƒ& ÃÄ +(02)
½‡ M2¤Z7ÊË 05 & À ˆ„£ Ü~*hih, wh À
2=Øh‚ ~* ƒ& ‡ ~*hi ƒ& ÃÄ +(05)
06
*1
WP3414 2=Øh & À ˆ„ R~*,WP3415 2=Øh
À" úû ~*,WP3505 2=Øh À& TOE
" ˆ„ R~*hi )ù,TOE IT 2úû B$Q
2 TOE ‚ =$2Žihi ƒ& 7$x +(06)
07 ST 2 ˆ % ©Â, ˆ ) Àq ‹ ˆx £ Ü9hi ƒ&
ÃÄ +(07)
/*[\$ ÚÛ9
08 ˆ % ©Â, ˆ wh À ‚ ƒ& TOE UC Þß Ü9h
i ƒ& ÃÄ +(08)
/*[\$ ÚÛ9
p Ë
09 p , À& ˆ„£ l9, ‰ =$2
9h À2‚ ~*hi È› + wh À ð ±&ŒLˆÖ5
2=>‚ ~*hi ƒ& £$ 7 +(51)
10 & ç¤=‹ "B ˆ„£ l9, ç¤=‹ "B
$i 29h] ~*hi È› +(51)
/*[\$ ÚÛ9
11 ST 2 ˆ È›~*hi ©Â, ˆ & À ˆ„£ l9, ˆ
wh À ‚ 9hi ƒ& ÃÄ +(51)
/*[\$ ÚÛ9
/*œ
+
´ WE3501 2Q9h , p ETR $Þß én È› ƒ& !"~*hi
/*œ ´ WE3502 2Q9h , ˆ Þß$ ~* Z*ù ) ié R$% +
/*œ ´ WE3503 2Q9h ,‚ ~* QR , È›
&~* ‰$ R $ i+ # ), TOE —Þ Ñd$QR~
*hi E, & À " DEæ WP3507 -.&!$

)$% +
/*1 WP3506 ”
79 +
À 2‚ ~* ƒ& ,Ö× £¤=‹ ½ ‡ QR2=>
À
FIA_ATA.1
FIA_ATA.2
FIA_ATD.2
FIA_UID.2
FPT_TSM.1
FPT_TSU.1
FDP_ACC.1
FDP_ACF.1
FDP_ACF.4
FDP_ACI.1
FDP_SAM.1
FDP_SAQ.1
FAU_GEN.1
FAU_SEL.2
FAU_ARP.1
FAU_SAA.1
IA_1 IA_2 DAC_
1
DAC_
2
DAC_
3
) Àq ˆ„
DAC_2 FIA_ATA.2, FIA_ATD.2, FDP_ACC.1, FDP_ACF.1 ¤=‹ FDP_ACF.4 )l +
DAC_2 VWVíñÊV ÌÍ Ü Œ $% +DAC_3 &%2,FIA_ACC.1 ,FDP_ACF.1 ¤
=‹ FDP_ACF.4 $ ~*hi ̉ 1’L, WKq îK k +

4. ()*+(WP4000)
FG , [CC3v2] çlèé(ACM KÇ )¤=‹ ÇÊíUÊKV(ALC KÇ )$ ~* ,
WK‘’“W0 +
4.1 elΠ(WP4100)
4.1.1 |}
& „ ) Å $ TSF çl Y †œæ ƒ& & +çlè
é ,çlèé ‚¤=‹ ,'( eˆ ) É ) +
4.1.2 ~ € ok
(1) ~ ok
• çlèé{k
(2) ok
• çlèé J š¿ L
4.1.3 ‚ ƒ „
FG (WP4200)&Q E, FG $FGpUÊL *J ©
 ,Ô 2 ]^9hŒ=i+
4.1.4 (WP)
(1)
ID
p Ë
ÌÍ&£ 2ˆih 7 (çlèé ‚)
01 çlèé{k , çl Y L&çlèé ’ ƒ& ÃÄ +
02 çl Y L ,TOE çl Y È›9hi ƒ& ÃÄ +
03 çlèé{k ,TOE çl Y ) 28V B È›9hi ƒ& ÃÄ +
04 çlèé ’ , çlèé ‰ =$2ÛÑ~* È›9hi ƒ& ÃÄ +
05 çlèé{k , çlèé Ò 2Žihi ƒ& ‡ 9hi ƒ& Ã
Ä +

06 çlèé{k , çlèé ×$œh çl Y øm 2“”~*£Zhi ƒ
& ‡ 9hi ƒ& ÃÄ +
07 çlèé ,TOE çl Y2ˆ9h, 7Ï~* + Ó ~*hi ƒ&
9hi ƒ& ÃÄ +
ÌÍ&£ 2ˆih 7 (çlèé '()
51 ý±l, Ö× çlèé 2=>DE~*hi ƒ& ÃÄ +
TOE ] £ , {k, L{k, ÑpÑ{k,èépÑ{k,çlèé{k
52 çlèé{k ,‰ =$2çl Y çlèé 2=ØhDE~* È›9h
i ƒ& ÃÄ +
(2)WP ”
ID ”
01 çlèé{k&9hÖ× {k çl Y L&çlèé ’ ~*hi
ÃÄ +
TOE ] £ , {k, L{k, ÑpÑ{k,èépÑ{k,çlèé{k
çl Y ) 2—` E @, \t€¡ ÃÄ (01,02,51)+
02 çlèé2Ö× ¿ *hi ƒ& ÃÄ +
*1 çl `a
c` èé
çl -Ñ QR
ƒ*) ,?WV&— A; 2= ŒŒ & ï B$]^~* +
çlèé ‰ =$2ÛÑ~* ,¤=‹ Ò 2FÑ~*hi ‡ ~*
hi ÃÄ (04,05)+
03 çlèé 2=>,çl Y øm 2“”~*DE~*hi ƒ& ,{kí î,
*2 c`./ ‰ ÛÑ Ü ƒ&2=>Ü~*hi ÃÄ (03,06,52)+
04 çlèé ’ èéÉ ÃÄ +
*3 çlèé ’ ,çlèé{k2 ~* + 07 Œ&2\³* + $% ƒ&
E2,+ ]^ E •–&âl —`9 Z*ù ) i+(06)+
/*1 WE4102 ”
Ö× çlèé{k$ 79
3.çlèé 2¤Z çl Y
Ö× Y ,{kè逢2¤ihèé~*hi +
KW SWË
{k
L ’ , LÞß
C îV
KW SWË2Q9h ,çlè逢& V2èé B €`~*hi + L m 1
è逢2ûièé~*hi +ƒ @ {k çlèéAB&€¢ {k2Q9h ,HI
0JKL €¢& V2€`~*hi +
/*2 WE4103 ”
Ö× çlèé{k$ 79

çl Y i 29h 9±ÈÜ~*hi
!€¢ ,{kí î i 29hFÑ~* ,C fíñÊV&íñÊVí î i 29hDE
Ï B$èé~* QR9hi +
KW SWË2Q9h ,Ö×2Ü Ë çlèé AB$çlèé-.&9h Å~* +
@, ,èé B,ÆÇ •–p, ÓKL ç

4.2 () (WP4200)
4.2.1 |}
TOE †œæ, žæ çlèé Ÿˆ á$%>, ƒ*) Å)*h
i ƒ& ƒ&$% . Ÿˆ 2 ,FG x é Ÿ,FG ° 3Ñ s,FG
C T îK k ,d’Kî’H Ÿ, VWV2 ³ 45 ‰ * .ƒ
, WK‘’“W0 ,ALC_DVS.1, ˆ 8V2?ß±+
4.2.2 ~ € ok
(1)~
(2)
• FG {k
• 2Q 0ÇW
4.2.3 ‚ ƒ „
CCC
4.2.4
9
(1) ‘’“W0
q6
ÌÍ&£ 2ˆih ÃÄ
01 FG {k ,TOE FG 2¤ih,TOE &] žæ&†œæ
E x é ,A3 ,— ,Š‹ } ˆ È›9hi ƒ& ÃÄ .
«1.1C)
02 FG {k ,TOE FGŠ‹ ‹T T 2,ƒ*) ˆ Å)*h
i ‡ ~*hi ƒ& ÃÄ .(1.2C)
p2= ÃÄ
51 p , ˆ ÒÑ~*hi ÃÄ .(1.2E)

(2)
Ë í
”
01 FG {k=>,TOE &] žæ,†œæ Ÿ E ˆ 8
*1 V .”(ù,Ö× ˆ ÃÄ +(01)
7 FG©º x é Ÿˆ
7 FG ° 3Ñ s 3ÑA£x
7 FG Š‹ FG{kq îK
7 FG{k KW SWË d’Kî’H Ÿ
7 VWV2Q 45
02 ˆ Å)*hi ƒ& ‡ 7 .(02)
”(ù,Ö× IÆ 7 +
7 FG©º 8IÆ
7 FG Š‹ FG{kq îK IÆ
7 45 ÈÜ
03 )ù,FGp2ˆ9h,Dÿ ‡ Œ9± ,FGUÊL*J æ#9 \i,
ˆ Å)*hi ÃÄ .(51)
/*1 WE4201 ”
FG©º x é Ÿˆ $ Ö× ˆ 8V9 +
a) ID …WË$F: g; Ëî2=> Ÿ~*hi +
b) ID …WË €û °&7Ï~* ; ¢FGp2G\~*hi +
c) *J p Å a2 ? 9hi +
7 €û ° R @Ñ€¡
7; ¢FGp AV ; ¢
b)FG ° = `
7 €û °2ˆih , ÌÍŠ‹ yþ2= ° = `VWV % +
7; ¢FGp2ˆih ,B Þß$ FGp º`ÓcV ‚ CJ’K +
FG q îK k $ ,Ö× ˆ 8V9 +
a) FG 2î…ðTL ”ˆ Ñp Ó , 2îK $x +
b) èép«VWLâl,d’Kî’Hâl ”ˆ¯,KW SWË ºÞp&Æ VWH
‹TdW Ó KW SWË2îK $x,] 0JKL l$x +
c) VWLâl ,C Tèép&KW SWËèép2=>èé~* +
FG{kq îK k $ ,Ö× ˆ 8V9 +

a) FG{k ,ISO9000-3 {kèé ×$DÜ7èé~* +
b) ƒ*) {k ,]í Ì —` ©º2 è~* +

5. DE (WP5000)
] ,CC FG«ADV¯& L«ATE¯KÇ $ ~* ‘’“W0 +ƒ*)
KÇ TOE À ] $% ƒ& , Þß LÞß ‰ ] Þß
& p ã¹ L2=Øh + p ,j ‘’“W0$ TOE ST 2¤Z
À2ˆ9hÒÂ9hi ƒ& 79 Z*ù ) i+
FGp ,ADV_RCR íñ ‚ E2FGp DEæáâ 9 Z*ù ) i+
p DEæáâ , Þß $,TOE À †œ ]–Œ $% ƒ&
7 ) AB$% +CC3v2 , p FGp DEæáâ ‚&9h p DEæ
áâ ÛÑ ƒ& Î9hi +
5.1. 78Š‹ ŽWP5100
5.1.1 |}
ST À †œ ]–Œ $% ƒ& 7 +
5.1.2 ~ € ok
(1)~
(2)
• ST( ƒ )
• FSP( Þß)
• Þß2ˆ9h]^9 m
• ~* -. ÷ø ©º& ó‡
• G1~* 0ÇW L

5.1.3 ‚ `abcdƒ „
/*œ ´ FSP ÌÍ&£ HLD 2 * )ù,ST &
TSF £ DEæ ˜`$x i+
5.1.4
(1) `abcd
WPID p
ÌÍ&£ 2Q 7
01 Þß ,ÊTíòWCVWX $È›~*hi ƒ& 7 +(1.1C)
02 Þß
(1.2C)
, wh j‰ TSF ÊTfíJW e &{B ƒ& 7 +
03 Þß
(1.3C)
TSF †œ2£ ~*hi ƒ& R ‡ ƒ& 7 +
04 Þß Ì‰ ) °æ ”ˆƒ& 7 + (1.4C)
p
51 Þß
+ (1.2E)
, $†œ TOE À ] 9hi ƒ& ˜`
(2) †
/*œ ´
ST HLD ADV_FSP.1.3C ST
ADV_FSP.1.2C HLD ADV_FSP.1.3C ST
! " #$ % & '() *+,-./ 0#1%21 345678 9
: ,;% %2

5.2 ‘‡’i“” ŽWP5200
5.2.1 |}
ST 2¤ihAB~* À ç< 2Ò 2] ~*hi E2\$+ 5
ÝÓcV k ,TOE çl U $%)³ +FGp 5ÝÓcV k2,U
,U " Ñ È› + p ,TOE œ–&9h ~*
9hi ƒ& #9 Ï Þßk$ Z*ù ) i+
œ´ U &i$Ñd ,> / Œ Ý&9hÛÑ9hi bZ$%>, 2=Øh , ,
ST+ W1TL ‰&Eù* ƒ&Œ% +
5.2.2 ~ € ok
(1) ~ ok
• ƒ «ST: Security Target¯
• 7+ WÞßk«FSP¯ F
• 5ÝÓcV «High Level Design¯
ok
• 5ÝÓcV 2ˆ9h\Ø ÌÍ
k 2¤Z -. —`&GN9 -.$% &i$ó‡
• 2G1~* 0ÇW L
5.2.3 ‚ (WP)ƒ „
{k2 DEæ * ,DEæ DEæ áâ (WP5400) $]^~* +

5.2.4 (WP)
(1) `abcd
WP-ID ÌÍ
ÌÍ&£ 2Q ÃÄ
01 5ÝÓcV k £ , fWX $% ƒ& ÃÄ (2.1C)+
02 5ÝÓcV k ,TSF çl , U 2=ØhÈ›9hi ƒ& Ã
Ä (2.2C)+
03 5ÝÓcV k ,TSF !y U æ
(*1) È›9hi ƒ& ÃÄ (2.3C)+
04 5ÝÓcV k ,TSF U ÊTfíJW —`9hi ƒ&
ÃÄ (2.4C)+
05 5ÝÓcV k ,TSF & × HWËðJî, íñW ðJî, Š
‹ « ¯KíLðJî Iƒ*) HWËðJî, íñW ðJî, KíLð
Jî2] ~* Ÿ ç2=> ~* &&Œ2—`9hi ƒ& ÃÄ
06
«eJ C¯+
5ÝÓcV ̉ ) °æ % «2.6C¯+
07 5ÝÓcV k ,TSF TSP ]\U &} U 2á¾
9hÈ›9hi ƒ& ÃÄ «eJ;C¯+
p2= ÃÄ
51 p
(2.2E)
, ST À ,TSF £ 2=Øh—`~*hi ˜`
/*1 j 2¤ih, æ & NGU 2= , 2
t Ñ r +
(2) †
WEID
01 f WX È› ÃÄ (01)+
02 Ñih,U ç

5.3 ⑇’i“” (WP5300)
5.3.1 |}
ST À ,×ÝÓcV $ 9± ˆøm 2> / Œ ~*hi ƒ& ƒ&$
% .ƒ , WK‘’“W0 ,ADV_LLD.1, È› ×ÝÓcV 2?ß±+
5.3.2 ~ € ok
(1)~
(2)
• 5ÝÓcV
• ×ÝÓcV
• £ ˆ„
• ×ÝÓcV$ TSP ]\ 0 WV
• TSP ]\ 0 WVŠ‹ ç
• 0ÇWŠ‹ äåæ L
5.3.3 ‚ (WP)ƒ „
5ÝÓcV ÐÊT ú2ÝR .
CCCC

5.3.4
(1) `abcd
q6
ÌÍ&£ 2ˆih ÃÄ
01 ×ÝÓcV £ f WX $% ƒ& ÃÄ .(1.1C)
02 TSF ×ÝÓcV , 0 WV2=ØhÈ›~*hi ƒ& ÃÄ .(1.2C)
03 ×ÝÓcV !y 0 WV È›9hi ƒ& ÃÄ .(1.3C)
04 ×ÝÓcV , 0 WV" Q‘ , ~* æ(*1)&} 0 WVq 2
÷Q‘2=Øh`a9hi ƒ& ÃÄ .(1.4C)
05 ×ÝÓcV ,TSP ]\ ‰ =$2 ~*hi È›9hi ƒ& ÃÄ
+(1.5C)
06 ×ÝÓcV ,!y 0 WV ÊTfíJW ,{B& e 2=ØhÈ›9hi
ƒ& ÃÄ .(1.6C)
07 ×ÝÓcV ,TSF j‰ ÊTfíJW &9h1( ,TSF 0 WV ÊTfíJ
W —`9hi ƒ& ÃÄ .(1.7C)
08 ×ÝÓcV ,̉ ) °æ ”ˆƒ& ÃÄ +(1.8C)
p2= ÃÄ
51 p ,×ÝÓcV TOE À ˆ†œ ] $% ƒ&
˜` +(2.2E)
/*1
+
æ& NG 0 WV 2ˆ9h56 ŠS ì r
/* WPID5308 TT6 ̉ ) °æ þÃN
(2) †
Ë í
01 ×ÝÓcV £ ,f WX $% ƒ& ÃÄ .(01)
02 ×ÝÓcV ,TSF 0 WV2> / Œ 9hi ÃÄ .(02)
03 !y 0 WV È›9hi ÃÄ .(03)
04 0 WV æ& 0 WV" Q‘«E‹ = 9Q‘,Ô„ ‰¯ È›9hi Ã
Ä .(04)
05 0 WV ‰ =$2 TSP ]\ 9hi È›9hi ÃÄ
.(05)
06 !y 0 WV ÊTfíJW «‘Ç‹f, W V,‹’ W0 ‰¯ `a~*,QR
~*hi ƒ& ÃÄ .(06)
07 Ö× TSF j‰ ÊTfíJW 8V~*hi ƒ& ÃÄ .(07)
7 Ñp èép& ÊTfíJW
7} TSF & ÊTfíJW
7OS U …W1V& ÊTfíJW
08 À œh—`~*, ˆ†œ2] ~*hi ˜` .(51)

*×ÝÓcV ,U ‰ =$2 0 WVq&> / Œ ~* -. +
×ÝÓcV ,> / H2¤ih5ÝÓcV & "2ŸU VW’H ±, p
TSP ]\ ‰ =$2] ~* én$x ƒ& ~* +
×ÝÓcV
C ýþC —˜š
çl”
CCCCCCok el
CCCCCCmnok
CCCCCCuv .v
C ÿþC ßd ciel
C C C C h­ r ßd ci Ù ®ÊË«¬±
C C C C º ßd ci |}®ÊË«¬±
C þC ßd ci
C C C C ßd ci ø ®ÊË«¬±
C C C C ßd ci 78·£ Ï š ! $ D 78®wx?ª©¬ÄÊË«¬±
C þ ÀgÁcr
C C C C c­i ¡a cd Š‹®ÊË«¬±
C C C C h­ r ÛcØiƒ ÀgÁcr®î﫬±
C þC ! $ D ßd ci
C C C C ! $ D ßd cišÞ©ª º “”Š‹®wx«¬±
CCCCCۧd ci |}
CCCCC€
CCCCC€
ÀgÁcr o ƒ

Z«SF 2ˆ
9i> /Œ
¥ Ø Ù¯
(3) †
Ëí Activities
01 FGp2= LÓWU/ 2Q9, wh 5Ý ×ÝÞß2=Øhú
û~*hi ÃÄ +(01)
02 p ,5ÝÞß2¤Z Ý&×ÝÞß2¤Z Ý&
ç

5.5 r (78 r Û ‡d å)(WP5500)
F¤F¤– |}
L , À ‚ TSF $% ƒ& ]\~* L ƒ&
$% +ƒƒ$ 2 ôˆ %¿ % +) ˆ , L †œæ ˆÅ& Ý…dÓ
0ã+[ˆ ,‰ ÓcV > / H $ TOE L~* ˆÅ& ݆~ã+ýþ ,
L ’ , LA3, L m ‰ L ‡ Ý Lã$% +ƒ , WK‘’“
W0 ,ATE_FUN.1,ATE_COV.2,ATE_DPT.1 2?ß±+
F¤F¤¥ ~ € ok
(1) ~ ok
• Þßk
• 5ÝÓcV k
• LÞßk
• FGp2= L m
• L…dÓ0 áâ
• L †~áâ
(2) ok
• L J š¿ L
F¤F¤% ‚ "#$'ƒ „
ƒ , WK‘’“W0 WP5100,5200,5300 22÷9hi E,ƒ*) , WK‘’“W0
þ2]^ +WP5500 m ,WP5600 ã¹9 L ‚& +

5.5.4
(1) …|
ID
ÌÍ&£ 2ˆih 7 « L¯
01 LÞßk , L ’ , LA3È›, ` L m )çl~*hi ƒ&
ÃÄ +(1.1C)
02 L ’ , L 8V9, L ƒ È›~*hi ƒ& Ã
Ä +(1.2C)
03 LA3 , ]\ L 8V9, !y L ] È›~*
hi ƒ& ÃÄ +(1.3C)
04 LÞßk
+(1.4C)
L m , !y L „…~* m Ü~~*hi ƒ& ÃÄ
05 FGp2= L m , !y , Þ߉¤>2]\~* ƒ& ]
~*hi ƒ& ÃÄ +(1.5C)
ÌÍ&£ 2ˆih 7 « L…dÓ0¯
31 L…dÓ0 áâ , LÞßk28V~* L ,TSF …dW9hi ƒ& ]
9hi ƒ& ÃÄ +(2.1C)
32 L…dÓ0 áâ , & LÞßk28V~* L& ˆ„ ]
9hi ƒ& ÃÄ +(2.2C)
ÌÍ&£ 2ˆih 7 « L†~¯
61 L †~áâ , LÞßk28V~* L ,TOE TSF Þß,5ÝÓc
V kŠ‹ ×ÝÓcV k‰¤>2 ƒ& Ü 2 á ƒ& ] 9hi
ƒ& ÃÄ +(1.1C)

(2)WP †
”
01 LÞßk , L ’ , LA3È›, ` L m )çl~*hi ƒ&
ÃÄ (01)+
02 LÞßk L ’ 2 , L & L ƒ Ü~*hi ƒ&
ÃÄ (02)+
03 LÞßk LA3 , *\* L ] È›9hi ƒ& ÃÄ +
] Ö× =$ Œ $% +
L ë L]Àë L Wf ‘Ç‹Wf¤=‹ æë LHIÆÇ ‰(03)+
04 LÞßk L m , !y L `~* L m Ü9hi ÃÄ
(04)+
05 FGp `9 L m&]v L m& ) ^ ÃÄ ƒ&2=>,!
Þß®>2]\~* ÃÄ (05)
06 L…dÓ0 áâ ,TSF 2ˆ„ L LÞßk2Ü~*hi &i$áâ
9hi ÃÄ (31)+
07 L…dÓ0 áâ , LÞßk2Ü~* L&! & ˆ„ ]
9hi ÃÄ (32)+
08 L †~áâ ,U , 0 WV L ]^9hi ó‡ Ü9hi
ÃÄ (61)+
/*œ ´ WE5502 L ƒ (goal) e &ƒì R 2 wx$% +JEDA L
ƒ L (objective)&#9 9h 9 +
F¤F¤F 78 r Û ‡d å
L…dÓ0 , L2=Øh ~*hi à $% + L †~
, 5ÝÓcV )> / Œ ~* ÓcVq ] 9±\³*hi
à $% +Ö× 5.2 $ FSP †~ FSP …dÓ’02=Øh ~* +
(FSP) ºTSF1 TSF 2
(HLD) ºTSF1.1 ººTSF1.2 TSF1.2 ºº…dÓ0áâ '(
(LLD) ºTSF1.1.1ºTSF1.1.2ººTSF1.2.1ººTSF1.2.2ºTSF2.1.1
ºº†~áâ '(
5.2 L…dÓ0&†~

5.6 šÏ¬ r (Independent testing)(WP5600)
F¤/¤– |}
p FGp L& V2ã¹9 L ]^ +ã¹9 L FGp L
2 i‰ á L ]^ &=i+WP5600 À ATE_IND.2 ã¹9 L7
UTHV2?ßihi
FGp& V ã¹9 _`p2= L2=>,FGpa2¤Z L m
b9, Þß®>2 ƒ& ÃÄ ƒ&$% +
F¤/¤¥ ~ € ok
(1) ~ ok
(2) ok
• Ñp ÉʦT
• èépÑÉʦT
• WP5500 m
• p2= L ]^$x TOE
• L J š¿ L
F¤/¤% ‚ "#$'ƒ „
j WP WP5100 Þß,WP6100 èépÑÉʦT ,WP6200 Ñp
ÑÉʦT ¤=‹ WP5500 22÷9hi + E,j WP Ö5 WP -
þ2]^9 Z*ù ) i+
/*œ ´j WP5600 WP5500 L†~,…dÓ0, L22÷9hi +9 9,
CC 2 ƒ& RÈ~*hi i+

5.6.4
ID
(1) …|
ÌÍ&£ 2ˆih 7 « p2= L¯
01 TOE L 2Ò $% ƒ& ÃÄ +(2.1C)
p2= 7
51 p , TSF Þ߉¤>2 ƒ& ÃÄ E,TSF L +(2.2E)
52 p , FGp L m à E, LË ‹TL L )UTHV =
c9]\ +(2.3E)
(2)WP †
ID ”
1 FGp2 ~* TOE 2 9idW0XT$% ƒ& ÃÄ +(01)
2 WP5500 …dÓ’0&†~ m )dZhi &'()* Ë L ]^
+(51)
3 p , FGp L m à E, LË ‹TL L )UTHV =
c9]\ (52)+

6. -.*+ (WP6000)
FÑ 2 ,ADO & AGD KÇ $ ~* ,TOE FÑ aÉ , WK‘’“W0
+ƒ*) , WK‘’“W0 ,FG~* TOE ›œ2êë7FÑ~* ƒ& +
6.1 Π. rok (WP6100)
6.1.1 |}
TOE èép ,èépÉʦT {k2=>,TOE ›œ2èé E 9i-. Î
ƒ& $x ƒ& ƒ&$% .
6.1.2 ~ € ok
CC
(1)~ ok
• èépÑÉʦT {k
• ST( ƒ )
• Þßk
(2) ok
• ÉʦT {k èépÑ &,ST ˆ„
• 0ÇW L
6.1.3 ‚ (WP)ƒ „
~* -. 9~, áæ 2 ,TOE ] > / 2ˆih, p áé n9
hi Z*ù ) i E,ƒ WP ®i, þe 2ÝRßZ)* .
ƒ WP ,AVA_MSU íñ 2ˆ„ WP &Q æ ”ˆ.

6.1.4
(1) `abcd
q6
ÌÍ&£ 2ˆih ÃÄ
01 èépÑÉʦT ,TOE èép ÛÑ &ÊTfíJW È›9hi ƒ&
ÃÄ +(1.1C)
02 èépÑÉʦT ,TOE ›œ B$,‰ =$2èé È›9hi ƒ
& ÃÄ .(1.2C)
03 èépÑÉʦT ,›œ ÷é 2¤ih,k 9 Z*ù ) i &âl2ˆ
ih f ü Š$i ƒ& ÃÄ .(1.3C)
04 èépÑÉʦT ,èép k ×2% ,œh ‘Ç‹f È›9hi
ƒ& ÃÄ .(1.4C)
05 èépÑÉʦT ,TSF k ×2% 0T æ c` èé
2Q !y Q Ê Å fÊH È›9hi ƒ& ÃÄ .(1.5C)
06 èépÑÉʦT , 2 ~* œh Ë ‹TL&) °9hi ƒ& ÃÄ
.(1.6C)
07 èépÑÉʦT ,èép2Q % IT q œh À È›9h
i ƒ& ÃÄ +(1.7C)

(2)WP †
Ë í
01 èépÑ & ÊTfíJW «SCTËÊTfíJW ,GUI) È›~*hi ƒ& Ã
Ä +(01)
02 TOE ›œ B$èé E A3 rÜ 9hi ÃÄ .(02)
”(ù,Ö× ì ›œ2\$ E -. ~*hi 7 +
7 5K …V íñÊV d’Kî’H,g|A3
7 çl c` ì
03 èép âl $h÷ø9,ƒ*) âl22÷9hèépÑ ÛÑ kl =$
©Â,ƒ*) âl& Q‘2ˆih f ü È›9hi ÃÄ +”(ù,
õÄÓ+ WL õÄâl ”ˆèép2l` ‰$% + (03)
04 èép2 k ×2% œh ‘Ç‹f -. ~* Z*ù )
i+ƒ*) ‘Ç‹f2 , TOE çl`a,âl èé,IÆ·Î ` ‰ èé
œh2Q ‘Ç‹f * +(04)
05 Q Ê Å G8 2,èép Ò 2ˆ„$x ÉʦT ~* Z*
ù ) i+ Q Ê Å2 , TOE gi õÄÏ Œ bZ$ ±,HWËð
Jî KíLðJî j' $ * +(05)
Q Ê Å ”&9h ,Ö× =$ Ê Å % +
77 lk,lm
7õÄIÆíñÊV ]WdWíIW
06 ST & ) °æ ÃÄ +
7 ,›œ ÛÑ `&) °9hi ÃÄ +
Þß&) °9hi ÃÄ +
)1h ,C îV ) °æ,-. áæ áâ .(06)
07 OS 1’L, WK q À ,œh IT q À È›~*h
i ƒ& ÃÄ +(07)

6.2 . . rt ¡ (WP6200)
6.2.1 |}
ÑpÉʦT {k2=>, Ñp TOE ›œ2 Ñ E2 9i-. Î ƒ& $
x ƒ& ƒ&$% .
6.2.2 ~ € ok
(1)~ ok
(2)
• ÑpÑÉʦT {k
• ST
• Þßk
• ÉʦT {k ÑpÑ &,ST ˆ„
• 0ÇW L
6.2.3 ‚ (WP)ƒ „
~* -. 9~, áæ 2 ,TOE ] > / 2ˆih, p áén9h
i Z*ù ) i E,ƒ WP , þe 2ÝRßZ)* .
ƒ WP ,AVA_MSU íñ 2ˆ„ WP &Q æ ”ˆ.

6.2.4
(1) `abcd
q6
ÌÍ&£ 2ˆih ÃÄ
01 ÑpÑÉʦT ,f èép Ñp Ñ$x &ÊTfíJW È›9hi
ƒ& ÃÄ .(1.1C)
02 ÑpÑÉʦT ,TOE ÛÑ È›9hi ƒ& ÃÄ
.(1.2C)
03 ÑpÑÉʦT ,›œ ÷é $k ~* wx ÑpÑ &âl2ˆih
f ü Š$i ƒ& ÃÄ .(1.3C)
04 ÑpÉʦT ,ST Ñp \; 2Q È` E,TOE ›œ FÑ2
&~* Ñp •– R 2È›9hi ƒ& ÃÄ +(1.4C)
05 ÑpÉʦT , 2 ~* } œh Ë ‹TL&) °9hi ƒ& ÃÄ
.(1.5C)
06 ÑpÑÉʦT , Ñp2Q % IT q œh À È›9h
i ƒ& ÃÄ +(1.6C)
(2) †
Ë í
01 ÑpÑ & ÊTfíJW «SCTËÊTfíJW ,GUI) È›~*hi ƒ& Ã
Ä +(01)
02 ÑpÑ ÛÑ B ~*hi ÃÄ +(02)
”(ù,Ö× Ñp ÛÑ B 7 +
7‘ , WË c` B
7 Ñp íñÊVq æ `,c` B
03 ÑpÑ ÛÑ , Ñp ”ˆâl2=>kl~* Z*ù ) i+
”(ù, € DÜ~* Ñp&ï LÏWÐ&$ ,ÛÑÏ '( kl
~* Z*ù ) i+ƒ*) âl& Q‘2ˆih f ü È›9hi
ÃÄ +(03)
04 ST $ Ñp i2ˆih È` E,›œ Ñ E
Ñp •– È›9hi ÃÄ +(04)
”(ù,Ö× Ñp •– RÈ~*hi 7 +
7‘ , WË `„ c`•–
7¾ n XT I’K•–
05 ST & ) °æ ÃÄ +
7 ,›œ ÛÑ `&) °9hi ÃÄ +
Þß&) °9hi ÃÄ +
)1h ,C îV ) °æ,-. áæ áâ .(05)
06 Ñp PC KÇÊîTL q À , Ñp2Q œh IT
q À È›~*hi ƒ& ÃÄ +(06)

6.3 ŽDelivery (WP6300)
6.3.1 |}
FG~* TOE ›œ B$ Ñpqêë~* ƒ& +
6.3.2 ~ € ok
(1) ~ ok
• TOE êë2Q A3k
(2)Output ok
• 0ÇW L
6.3.3 ‚ ƒ „
• ] op|qrrrs -þ t 9i ,äåæ ê2 - ƒ&+
• FGpUÊL *J ©Â Ôß2FGpUÊL*J Þø } &Ô
2\ØhŒ=i+
6.3.4 `abcd
(1) `abcd
WP
ÌÍ&£ 2Q ÃÄ
rP ÑpUÊLq uvs ý êë v2&)* A£x È›9hi ƒ& Ã
Ä oP¾PzsJ

Ž2 †
WP
01 Ñp 9i TOE ›œ2 A E2 wh A3 È›~*
hi ÃÄ (01)+
A32 ,Ö× +
• C f ) SwWAB
• FGp=> Ñpq x bA
• TOE yzŠ~* ƒ& ±,ž:~* Ñp yzŠ G1 ƒ& Ï
$% AB+
• Ñpa$ TOE 9i«C f 9iSwW$% ¯ƒ& 7 AB+
02 NGÓcV2ˆ9hêë TOE Ö{æ ~* &7E)* A£x$%
, ÃÄ (01)+

½¾¿ ~€ l€! " (WP6400)
6.4.1 |}
FG~* Ñpqêë~* þ,›œ26 ,:; ~* ƒ& +
6.4.2 ~ € ok
(1) ~ ok
• 6 78l7:; 2Q A3k
(2)Output ok
• 0ÇW L
6.4.3 ‚ ƒ „
• ] op|qrrrs -þ t 9i ,äåæ ê2 -9hi ƒ&+
• FGpUÊL *J ©Â Ôß2FGpUÊL*J Þø } &Ô
2\ØhŒ=i+

6.4.4 »#
(1) `abcd
WP
ÌÍ&£ 2Q ÃÄ
01
p
uvs ›œ 6 |{8lŠ‹ :; 2 È›9 Z*ù ) i¾
02 6 A3 m î çl& ƒ& 7 +.(1.2E)
Ž2 †
WP
01 } çl Ï $% ©Â, 5 çlq 56 È›~*hi
ƒ& ÃÄ (01)+
02 TOE 8l ]H XT¤=‹ c` ÈÜ~*,Ö ,Ô² B$ 9±~8l
Ï $% ƒ& ÃÄ (01)+
03 ]\ :; , iFÑ Å 2f ¯ æŒ ,c`~
* ƒ& % ÃÄ (01)+
04 TOE ]\ HWËð0îST+ W1TL ©Â,èép,
Ñp2= 9 L g€ 9 L ÷ø ƒ& ÃÄ +
L ì 2¤ih TOE 2ˆ9h]\~* (01) +
05 ÊT LWV,8l¤=‹ :; A3 ]v2 Ñ9 õÄ E
”2=Øh ]2 9iƒ& 7 (02)+

7 ü 123ÙôŽWP7000
äåæáâ ,CC äåæKÇ $ &~* ‘’“W0 +jKÇ ,TOE Ì
‰ ç< ,FÑ ,àÛÑ çl ‰ %¿ )äåæ Ñ$x iƒ& + p
,FGp äåæáâ CJ’K& p ã¹9 äåæáâ ]^ ƒ&$, 9
$äåæ Ñ Ï $% ƒ& 79 Z*ù ) i+
/* pœ FGp7 p$%ÞÏ + 0L ç ƒ& $% +ƒ + 0L ‚
O&9h JP-CERT '()* +
/*?@A VLABCD EFG H 9I1JKL% 9I,MN/O10#
7.1 () 123ÙôŽWP7100
7.1.1 |}
ý 2¤ih, 9 2¤Z äåæ áâ9,ƒ* Ñ Ï $% ƒ&
7 ƒ&+ p ,FGpáâ æ 9,ƒ* $ $ƒ Î9 TOE ç<
‰ ] ,FÑ5, 5 ó8$ TSF „¸ 9 iƒ& 9 Z*ù ) i+
7.1.2 ~ ok
(1)Input ~ ok
• FGp äåæáâ&äåæq ˆ÷
FGp áâ ,ý TOE ó8&,…†,"#,y‡bZ$¦§Ï $%>,
‘ ’KË‹ÊT5$Z[Ï Rä äåæ áâ$% +
• I LÖj ƒ* $ m
(2) ok
• p2= äåæáâ{k
p áâ ,FGp áâ )1( i,> / "#-.&—` TOE ]
2…†9 ¦§ ` +

7.1.3 ‚ ƒ „
äåæáâ , * $]^~* wh m ‚& E ý 2]^
+~)2, p ã¹9 äåæáâ I L ˆ ˜` E2,j
‘’“W0 m Ñ +j ‘’“W0 ã¹äåæáâ=>ê2]^ ƒ&+
7.1.4
(1)
WPID
ÌÍ&£ 2Q ÃÄ
01 !y äåæ2ˆih, äåæ ,TOE ~* $ Ñ
$x i ‡ Ü ÃÄ (2.1C)+
02 nâ{k , 8V~* äåæ2ˆ9, TOE Rä I ¦§2‰ ‡$
x ƒ& NŒ 9hi ÃÄ (2.2C)+
p2= ÃÄ
51 ã¹9 äåænâ ]\ +
52 TOE Rä I ¦§2‰ ‡$x ƒ& ˜` +
(2) †
WEID
1 FGp2= áâ ,äåæ Ñ Ï $% ƒ& È›9h¤>,
‡ Ü9hi ÃÄ +(01)
2 FGp2= áâ äåæ Rä I ¦§ ]&‰ ‡ Ü
9hi ÃÄ +«02¯
3 p2= äåæáâ ]^9«AVA_VLA.2.3E¯ ,I L ]^
˜` +

7.2 šÏ¬123Ùô (WP7200)
7.2.1 |}
p FGp = 9 äåæáâ& V2ãg äåæáâ \$+jáâ ,ƒ* $
mG\~* •Â E,TOE TSP „¸ Šx:ƒ Ï æ i ‹ Ä
$% + p2= äåæáâ2=ØhÃ= ~* äåæ ,Ö I L2=Øh
ÑÏ ÃÄ~* +EAL3 2ˆ À ST+ W1TLÓcV AVA_VLA.1 F
Gpäåæáâ$% , p äåæáâ ! $% Ej EWP $ AVA_VLA.2 S
T+ W1TL = c9 +
7.2.2 ~ € ok
(1) ~
(2)
• FGpäåæáâ m
• ƒ* $ m
• p2= äåæáâ{k
PQ) KR%STU VW STU TOE XY 9/ Z[%\]^_,0
# / `a,bc/
7.2.3 ‚ `abcdƒ „
äåæáâ ,ƒ* $ wh m & +áâ ,I L ê ý
$]^~* +
7.2.4
(1)
p2= ÃÄ
51 ã¹9 äåænâ ]\ (2.3E)+
52 TOE Rä I ¦§2‰ ‡$x ƒ& ˜` +

(2) †
WEID
01 p2= äåæáâ ]^9«AVA_VLA.2.3E¯ ,I L ]^
˜` (51,52)+
7.2.5 Ùô Æ c$
(1) Ùô % &
k £ Ý«5ÝÓcV $%*ùU ¯2Q9,Ö× %¿ )
¦§~* Ï æ áâ +
• Bypass Circumvent
• Corrupt
,« ¬~* Ï æ Œ +
£ Ý ~*yŽ~* Ï æ Œ +
• Deactivate
£ Ý f ¯ æŒ ~* Ï æ Œ +
Ö× =$2 -. ),äåæ2ˆ Ï æ áâ +
• TSF j‰ & ÊTfíJW
• 5ÝÓcV $ ³* i} U & * ÊTfíJW
• ×ÝÓcV$ ç ] 5 FGp ˜`«”(ù‘ ,
WË =$ WKÓ’L ‘y 0 WV 9±] ~*hi ¯
(2)Ùô$ Áa r
ITSEM 87 K W02È›~* CJ’KË 'g !" +
(3)' &
p ,TOE ; 2Q á "#‚ ” ’ ù ) i+”(ùíñÊîðòWV$
%*ù1’L, WK ,ÊTf1’L,TCP/IPUNIX …W1V"# ‰+jáâ ,U ),
×ÝÓcV Þßkq“E +
(4)†
áâHI ‘“’Lí VfíñÊîðòWV ”29hÖ×2Ü +

a)
Clients TOE
Objects
7.1 íñÊîðòWV çl
a) TOE q îK ÎÏ TOE çl 'g +( 7.1). inetd.conf &
/etc/services CJ’K9,èép ã¹9 èé ’ XTÖj2 TOE q Ï
æ Œ + WLSCTË LOGIN Î 9,fp, nfs íñÊVq îK
Î +ƒ*) Ï æ HI 8l ‰2=Øh,TOE Šx:ƒ +
b) TOE q îK Ï æ %*ù,ú2 TOE çl CJ’K +TOE ̉
2ˆ9hHI 8l Ï æ 'g +ƒ* ,¦§p2 GUI & FEM(í
Vf TÆ]\ )"ÊTfíJW Î + UNIX OS 2= Ë‹ÊTá¾
‹…¤ % ),USER/KERNEL îËÓ K W Ñ Ï
$% +
c) V ,çlíñÊV&õÄíñÊV2ˆ9h'g +ƒ*) íñÊV
UNIX íñÊVîK 2=ØhVWLâ $ Ÿ~* +ûØhíñÊV
Ÿ~* +
d) ÊTfíJW ) FEM ,ICMP, ARP, RIP, EGP and IGS 2=ØhG8
Ï æ % +) ” 4” ICMP 0SW2= IP death$% +
e) ]\ST+ W1TL FEM or AUDIT f ¯ æ 'g +
f) FEM ST+ W1TL « ¬Ï æ 'g +Ethernet IWË W L‹’ W0
,null îËÓ YÖ9 ©Â CJ’K +} SNMP ‰ HILSV C
J’K +
g) ƒ*) '& m&9h!äåæ2ˆ Ÿ‹…¤ G1 +ˆ
]\ ,ì 5 5 ˆ & ì$+ƒ*) 7 E
2I L ]\~* +

)
Corrupt by
Attacker
d) Corrupt
by ICMP
c)
c) c)
GUI Audit
TCP/UDP/IP
FEM: Filtering Enforcing Mechanism
LAN DRIVER
f) Bypass
e) Deactivate
d) d)
LOG
KERNEL SPACE
e) Deactivate or Bypass
7.2 íñÊîðòWV ST+ W1TL2¤Z äåæáâ
USER SPACE

7.3 78 9: (WP7300)
7.3.1 |}
FGp GHAB 9iƒ& 7 ƒ&$% .ƒ WP ,AVA_SOF
2?ßihi +
7.3.2 WP ~ ƒ
(1)~
(2)
• FGp GHáâ
• ST
• Þß
• 5ÝÓcV
• ×ÝÓcV
• ‹…¤ Š‹ K …V ‹…¤ 8V
• GHKÓW m
• äåæ 8V
7.3.3 ‚ (WP)ƒ „
5ÝÓcV ,×ÝÓcV ‚& E,ƒ*) WP þ2ÝR()Å欤
7.3.4
(1) `abcd
q6
ÌÍ&£ 2ˆih ÃÄ
01 TOE GHAB ”ˆ!y ‹…¤ 2ˆih, G
Háâ ,PP/ST $`a~* ý± GHÖ5$% ƒ& ÃÄ +(1.1C)
02 —` TOE GHAB ”ˆ!y ‹…¤ 2ˆih,
GHáâ ,PP/ST $`a~* —` GHrƒ Ö5$% ƒ& ÃÄ +(1.2C)
p2= ÃÄ
51 p ,GHAB 9iƒ& ˜` .(1.2E)

(2) †
Ë í
01 ‹…¤ &, * ‰ TSF $] ~*hi ÃÄ .
02 GHáâ $% ‹…¤ 8V 9i ÃÄ .
7fÊH A,fÊH B ‹…¤ 8V~*hi ƒ& 7 .
03 fÊH A GHáâ , )1h,FGp AB ‚ ˜` .
7!y ‹…¤ GH ,PP/ST ý± GHÖ5$% ˜` +
7—` GHAB Œˆ‹…¤ ,PP/ST —` GHrƒ ‚ ˜` +
7.3.5 78 9:
(1) ¡ÛÜÝ À
, ‹…¤ 2=> ~* .”(ù,‘ , WË‹…¤ ,8V&
7 .
‹…¤
a)fÊH A ‹…¤
,Ö× fÊHáZ Ï $% .
‘ , WË‹…¤ =$2, á y‡, V Ñ9 ¥ ¦§2=>•– Ï fÊH
‹…¤ .‘ , WË àî—,˜h =$2,"> ž" ÛÑ —æ ”ˆ‹…¤ $%
.
b)fÊH B ‹…¤
îK k =$2,à> ±] ~**ù,¥ ¦§$ ƒ& $x i‹…¤ $% .
b9,fÊH B ‹…¤ ,f ¥ ¦§2=Øh ƒ& Ï $% .
fÊH A ‹…¤ , îV ¤ šé2›ø äåæ ”ˆ.œ áâ2=>,ƒ
‹…¤ ,¥ ¦§2ˆ‡ ‚ ÓcV\Z Ï $% .
FGp , GHáâ ]\9,{kŒ 9 Z*ù ) i.áâ ‹…¤ Óc
V$]\9,GHAB \$.GHAB ,Ö× i¨* $ Z*ù ) i.
7SOF-basic
ÓcV ¦§ ‚ ”ˆ¦§p2= , G I (2ˆ9Ò 2ˆ‡$x .
7SOF-medium
ÓcV ¦§ ‚ ”ˆ¦§p2= I (2ˆ9,Ò 2ˆ‡$x .
7SOF-high
ÓcV ¦§ ‚ ”ˆ¦§p2= I (2ˆ9,Ò 2ˆ‡$x .

(2)() 9:Ùô
FGp GHáâ{k ,Ö× -. .
a)‰ ‹…¤ ,‰ TSF $] ~*hi QR .
b)fÊH A ‹…¤ &fÊH B ‹…¤ 2áö .
c)fÊH A ‹…¤ 2ˆih,GH áâ9,GHAB \$.
CCCCCC

7.4 ;

4¤,¤, "#$'
(1) …|
ID
ÌÍ&£ 2ˆih 7
01 ÉʦT {k ,lm% i ì þ2›œ FÑ “” E ì E
h,TOE wh :ƒ>$ ì B È›9hi ÃÄ (2.1C)+
02 ÉʦT {k ,†œ$%>,àn ž±,Ø Ù ,% i Âé ÉʦT
iΠ$% ̀ (2.2C)+
03 ÉʦT
(2.3C)+
{k , ~* 2Q wh ` 9hi ÃÄ
04 ÉʦT {k ,(j‰ A3,x é ,— ƒ& E ¯j‰ ˆ‡ 2
ˆ wh À 9hi ÃÄ (2.4C)+
05 FGp
(2.5C)+
áâ {k ,ÉʦT {k †œ$% ƒ& R9hi ÃÄ
p2= 7
51 FGp áâ ,TOE FÑ wh WË2¤Z ›œ FÑ ÉʦT
$% ƒ& Ü9hi ƒ& 7 +(2.2E)
52 p ,TOE ›œ2çl,ÛÑ~* ƒ& 7 E2, ~* ÉʦT {
k Ó ÛÑ9h, wh çl,ÊT LWV ¤=‹ } = c9 A3 \$
(2.3E)++

(2)WP ”
ID ”
1 ÉʦT {k ,lm% i ì þ2›œ FÑ “” E ì E
h,TOE wh :ƒ>$ ì B È›9hi ÃÄ +
ì -Ñ ” Ö×2Ü +
ã Ñp ,$h Ñp
Å FÑ
:; -
õÄíñÊV ÎÍ -Ñ(”´æ lH) Ÿ ( ƒ&)
ÉʦT 5È -Ñ2¤Z 0ÇW2¤ih,èép Ñp ƒ À2Q9h
wxÊ 9hi ƒ& ÃÄ +(01)
2 ÉʦT {k ,†œ$%>,àn ž±,Ø Ù ,% i Âé ÉʦT
iŒ $% ƒ& ÃÄ +(02)
3 ÉʦT {k ,ST $`a~*hi 9 2¤Z `
wh 9hi ƒ& ÃÄ +(03)
4 ÉʦT {k ,«j‰ A3,x é ,— ƒ& Eh¯j‰ ˆ‡ q
À wh 9hi ÃÄ +
j‰ ˆ‡ ”&9h ,õÄíñÊV %Ò* ©Â >¡( B % +(04)
5 FGp2= áâ ,ÉʦT {k †œæ R9hi ÃÄ +(05)
6 FGp áâ ,Ö× 9hi ƒ& ÃÄ +
7!ì WË2¤Z ›ø9hi 0ÇW&:ƒ>$ f ›œ -Ñ —`9hi ƒ&
7èép
ƒ&
Ñp i 29h-¢ G19ò $ QR ½ ‡ hix£$9hi
FGp áâ 9iƒ& ÃÄ +(06)
7 ~* ÉʦT {k Ó ÛÑ9h, wh çl,ÊT LWV \i, TOE
›œ2çl,ÛÑ~* ƒ& ÃÄ +
5 %¿ 2¤Z íñÊVq 56$% çl% i 6 ¤¥ þ2,ç
líñÊV ! íñÊV ÃÄ +(07)
(3)*
ØÙ, WË,†œ QR ” {CC3v2} [428-432] ¦$QR~*hi +

7.5 +~ r ŽAVA_VLA.2.2E,AVA_VLA.2.4E (WP7500)
7.5.1 |}
äåæáâ m YZ,äåæ ` Œ&$ Ñ Ï $% ƒ& 7 + I
L Ö× ôõö ÷ø9, p2=Øh]^~* š¡& ,FGp L
FG2Q §B t( ƒ& Ï $% + FGp N ÛÑ ƒ& % +
(1) FGp äåæáâ2?ßx,¨Rä äåæ«Obvious Vulnerability¯© ›w)*h
i «address¯ «ensure¯ L«AVA_VLA.2.2E¯
(2) p2= äåæáâ 7 L(AVA_VLA.2.4E)
p \Ø äåæáâ$8V~* äåæ ` Œ&$ ÑÏ ˜`
E2]\ +
(3) =±ó)* äåæ 7 L«Obvious Vulnerability¯
J-CERT Õ2ªÁ~* äåæ $Ä(1)$áâ~*hi iŒ 2Q9,TOE 2GN Œ
= 9hˆ‡Ï 7 +
7.5.2 ~ ok
(1)~ ok
• ƒ* $ wh m,äåæáâ m
(2)Output ok
• I L LÞßk7 m7 máâk
7.5.3 ‚ ƒ „
ý &9h,äåæáâþ]^+

7.5.4
(1)
WPID
p2= ÃÄ
01 FGp äåænâ2?ßx, Rä äåæ —`~*hi ƒ&
E, I L ]^9 (2.2E)+
02 ã¹9 äåænâ2?ßx, 8V~* äåæ ƒ & $
ÑÏ ˜` E, ã¹9 I L ]\ (2.4E)+
03 TOE Rä I ¦§2‰ ‡$x ƒ& ˜` (2.5E)+
(2) †
WP
1 FGp2= áâ2ûØh«I L ]^ «01¯
2 p2= áâ2ûØh,I L ]^ (02)+
3 I L m2=>,TOE äåæ2ˆ‡$x ƒ& 7 «03¯

8 ‡×c
jM$ ,ETR çl ” Ü .ý& 2,!, WK‘’“W0$= ‚ ETR çl” Ü9,
ú2ý ETR 2çl ” Ü .
8.1 º, c `abcd³ ETR el†
Ö×2,AV , WK‘’“W0$ l~* ETR çl” Ü .
C C C – üC —˜š
CCCCCC£ , c `abcdÄ®ÖÉ«¬¤
C C C ¥ üC mnt ¡
C C C C C C ç , c `abcd ~ t ¡ ®ÊË«¬¤
C C C % üC -ñ
CCCCC%¤–C./
ˆ ./
C C C C C C C C C C C ç , c `abcdš›0 «¬-ñ ˆ uƒ0£ Ï ¢./ ®
CCCCCCCCCCCD1?@Ä®ÊË«¬¤
CCCCC%¤¥Càá
CCCCCCCCCC, c `abcd2ƒ034 5 ñ®ÊË«¬¤
CCC,üC6 5
8.2 78}¢ ETR el†
œh -þ,ý Ó+ WL l .ƒ Ó+ WL çl” Ö×2Ü
.
CCC–üCC—˜š
C C C C C C B!9 |}0B!9 el®ÊË«¬¤
C C C ¥ üC C h‰
CCCCCC!AB 5:U0;l B6U0 h‰ ®ÊË«¬¤
CCC%üCC!AB

C C C C C C !AB 78 uƒÆc $ < ®ÊË«¬¤
CCC,üCC!AB Ö3
C C C C C C ! šä=æ¬>? ®@ÊË«¬¤
C C C F üC C
C C C C C C
CC
rbd ci0 A B 0C D0Ew®ÊË«¬¤
C C C / üC C 6 F
CCCCCC!AB , c `abcd ÆÍ a ®=ƒ¬¤
CCC4üCC6 5
C C C C C C !AB · ! ®G @«Ä0123·¢©Ä 6 5 ®ÊË«¬¤
(H
CCCC6CCwxyz{
CCCCICC.vz{
C C C C J C C ³.©@ r el
CCCCVCCK L ‡×c "34šÄÄM ¬K L N ® r «¬'