SecureData, an ERP.com company and sub-Saharan distributor of BorderWare Technologies Inc, a leading Internet security vendor, today announced that the BorderWare Firewall Server has been accepted for re-certification under Common Criteria EAL4+ with EAL5 Vulnerability Analysis.
The BorderWare Firewall Server was the first Firewall product worldwide to gain a Common Criteria EAL4+ certification in January 2000. BorderWare has now further outperformed the competition to be the first accepted for re-certification under EAL4+ and against the EAL5 Vulnerability analysis.
The inclusion of an EAL5 vulnerability analysis in the Common Criteria Certification of V6.5 of the Firewall Server increases the level of independent assurance that the product is well designed and engineered to provide protection against all known vulnerabilities and offers the highest level of security. The evaluation timetable puts the BorderWare Firewall Server on track to become the first firewall product worldwide to pass an EAL5 vulnerability analysis and qualifies it as the most secure firewall on the market.
The vulnerability analysis is a key part of the Common Criteria evaluation process and is one of the areas that differentiate the Common Criteria from other certification schemes such as the European ITSEC and US TCSEC.
The vulnerability analysis component of a Common Criteria evaluation is designed to search for exploitable vulnerabilities in the evaluated product. This search is based on extensive databases including a database maintained by NIAP, a collaboration between the US National Institute of Standards (NIST) and National Security Agency (NSA). For each known and applicable vulnerability, the developer is required to provide a detailed analysis, backed up by design documentation, to demonstrate how the product defends against the vulnerability. The results of this analysis are confirmed by extensive independent testing.
Share
The CC represents the outcome of a series of efforts to develop criteria for evaluation of IT security that are broadly useful within the international community. In the early 1980's the Trusted Computer System Evaluation Criteria (TCSEC) was developed in the United States. In the succeeding decade, various countries began initiatives to develop evaluation criteria that built upon the concepts of the TCSEC but were more flexible and adaptable to the evolving nature of IT in general.
In Europe, the Information Technology Security Evaluation Criteria (ITSEC) version 1.2 was published in 1991 by the European Commission after joint development by the nations of France, Germany, the Netherlands, and the United Kingdom. In Canada, the Canadian Trusted Computer Product Evaluation Criteria (CTCPEC) version 3.0 was published in early 1993 as a combination of the ITSEC and TCSEC approaches. In the United States, the draft Federal Criteria for Information Technology Security (FC) version 1.0 was also published in early 1993, as a second approach to combining North American and European concepts for evaluation criteria.
The first Common Criteria product certifications were completed in the late 1990's and today some 14 countries have signed the Mutual Recognition Agreement including all the originators of the TCSEC, ITSEC and CTCPEC schemes. For further information on Common Criteria see http://www.commoncriteria.org.
For further information on BorderWare Products, please contact SecureData on +27(11) 257 8600 alternatively tollfree: 080 802 8800
SecureData
SecureData an ERP.com company is Africa's Premier IT Security Solution Provider. SecureData's solutions incorporate Antivirus and Content Security, Network Security and Network Asset Management. SecureData's comprehensive "Managed Security Services" include design, audit, implementation, outsourcing and hosting.
SecureData distributes, sells and supports category leading IT Security products to the public, corporate and SME Sectors throughout Africa as well as products and services to the SOHO and consumer markets through partnerships with ISP's.
Editorial contacts