Formal Methods and Security Evaluation

Abstract

Formal methods have long been recognised as central to the development of secure system. Formal models of security policy and formal verification of cryptographic protocols have shown to be very useful to the development of real systems. But many new and promising research results in the area of security protocol verification, security architecture, or mobile code analysis, are still to be shown for practibility.

Quite recently the United States,United Kingdom,Germany,France, Canada, and the Netherlands released a jointly developed evaluation standard usually referred to as the “Common Criteria” (CC). This standard is to replace two earlier security standards: the american TCSEC and the european ITSEC.