Phone: (011) 7541-421, 3409-301, 3409-335, 6547-293, 3409-310
E-mail: Standards sales: prodaja@iss.rs Education: iss-edukacija@iss.rs Information about standards: infocentar@iss.rs
Stevana Brakusa 2, 11030 Beograd
Main menu

ISO/IEC TR 20004:2012

Information technology — Security techniques — Refining software vulnerability analysis under ISO/IEC 15408 and ISO/IEC 18045

Aug 8, 2012
95.99   Withdrawal of Standard   Dec 8, 2015

General information

95.99     Dec 8, 2015

ISO/IEC

ISO/IEC JTC 1/SC 27

Technical Report

35.030  

English  

Buying

Withdrawn

Language in which you want to receive the document.

Scope

ISO/IEC TR 20004:2012 refines the AVA_VAN assurance family activities defined in ISO/IEC 18045:2008 and provides more specific guidance on the identification, selection and assessment of relevant potential vulnerabilities in order to conduct an ISO/IEC 15408 evaluation of a software target of evaluation.

ISO/IEC TR 20004:2012 leverages the Common Weakness Enumeration (CWE) and the Common Attack Pattern Enumeration and Classification (CAPEC) to support the method of scoping and implementing ISO/IEC 18045:2008(E) vulnerability analysis activities.

ISO/IEC TR 20004:2012 does not define evaluator actions for certain high assurance ISO/IEC 15408 components, where there is as yet no generally agreed guidance.

Life cycle

NOW

WITHDRAWN
ISO/IEC TR 20004:2012
95.99 Withdrawal of Standard
Dec 8, 2015

REVISED BY

PUBLISHED
ISO/IEC TR 20004:2015

ABANDON
ISO/IEC NP TR 20004-2