AT90SC6404RT datasheet(49/65 Pages) ATMEL

49 / 65 page

TOE Security Functional Requirements

TPG0053A (24 Nov 04)

General Business Use

49 of 64

5.3.3

AVA_VLA.4 Highly Resistant

Developer actions elements

130

The developer shall:

Perform a vulnerability analysis

Provide vulnerability analysis documentation

Content and presentation of evidence elements

131

The vulnerability analysis documentation shall:

describe the analysis of the TOE deliverables performed to search for ways in

which a user can violate the TSP.

describe the disposition of identified vulnerabilities.

show, for all identified vulnerabilities, that the vulnerability cannot be exploited in

the intended environment for the TOE.

justify that the TOE, with the identified vulnerabilities, is resistant to obvious

penetration attacks.

show that the search for vulnerabilities is systematic.

provide a justification that the analysis completely addresses the TOE

deliverables.

Evaluator actions elements

132

The evaluator shall:

Confirm that the information provided meets all requirements for content and

presentation of evidence

Conduct penetration testing, building on the developer vulnerability analysis, to

ensure the identified vulnerabilities have been addressed.

Perform independent vulnerability analysis

Perform independent penetration testing, based on the independent vulnerability

analysis, to determine the exploitability of additional identified vulnerabilities in the

intended environment.

Determine that the TOE is resistant to penetration attacks performed by an

attacker possessing a high attack potential.

AT90SC6404RT датащи(PDF) 49 Page - ATMEL Corporation