원문정보
초록
영어
Security is concerned with the protection of assets from threats, where threats are
categorised as the potential for abuse of protected assets. All categories of threats should be
considered, but in the domain of security greater attention is given to those threats that are
related to malicious or other human activities. ISO/IEC 15408 requires the TOE(Target of
Evaluation) Security Environment section of a Protection Profile(PP) or Security Target(ST) to
contain a list of threats about the TOE security environment or the intended usage of the TOE.
This paper presents a specific physical threats should be considered in the smart card PP
which developers of smart card PP must consider in Security Level 1st.
목차
1. Introduction
2. Protection Profile
2.1 Overview of Protection Profile
2.2 TOE Security Environment
2.3 How to Identify and Specify the Threats
2.4 Completing the statement of threats
2.5 Attacker’s capability
3. Security Level
3.1. Threats Identification
3.2. Determination of System Security Level and Robustness Strategy
4. Physical Threats for Smart Card PP
5. Conclusion
6. References
