Front cover - IBM Redbooks

56 Lotus Security Handbook
► Part 3, Security assurance requirements, establishes a set of assurance
components as a standard way of expressing the assurance requirements for
TOEs. Part 3 catalogues the set of assurance components, families, and
classes. It also defines evaluation criteria for Protection Profiles (PPs) and
Security Targets (STs) and presents evaluation assurance levels that define
the predefined CC scale for rating assurance for TOEs, called the Evaluation
Assurance Levels (EALs).
In support of the three parts of the CC listed here, some other types of
documents have been published, some being guidance documents. Other
documents are planned for publication, including technical rationale material and
guidance documents.
Complete information on the Common Criteria, including copies of the Common
Criteria documents (available as PDF files), are available at the following URL:
http://www.commoncriteria.org/
Even though the Common Criteria has some very useful information, we will
nonetheless look at other methodologies and utilize some of their contents. We
recommend that you take the time to read further on the Common Criteria and
assess the suitability of using it to address specific security requirements and
needs unique to your organization.
2.4 Method for Architecting Secure Solutions (MASS)
IBM has a method used by IBM Global Services (IGS) employees for security
architecture engagements. It is call the Method for Architecting Secure Solutions
(MASS). It helps analyze and categorize security-related problems and
discussion in today’s e-business driven enterprise IT infrastructures. The
contents of this section were originally posted in a special edition of the IBM
Systems Journal on End-to-End Security, Volume 40, No 3. The article is
available at the following URL:
http://www.research.ibm.com/journal/sj/403/whitmore.html
2.4.1 Problem statement
A systematic approach for applying security throughout information technology
solutions is necessary in order to ensure that all reasonable measures are
considered by designers, and that the resulting computing systems will function
and can be operated in a correct and reliable manner.