Re: Penetration testing via shrinkware

[Christopher Nicholls <chrisn () softway com au>]

At 09:04 PM 20/09/98 -0400, Marcus J. Ranum wrote:
> John McDermott wrote:
> > [...] Just out of curiousity 
> > does ICSA look at the source for certification?
>
> Last I saw, the ICSA "certification" was based on a firewall's
> ability to not have identified vulnerabilities in an ISS scan
> and a couple of other "advanced" tests.

Have you checked out the Common Criteria model?

See: http://csrc.nist.gov/cc/

Regards

Chris
----------------------------------------------------------------------
Christopher A. Nicholls
----------------------------------------------------------------------
Softway Pty Ltd  ACN: 002 726 641 
Canberra Branch Office: Suite 1.3, Dickson Park Professional Centre
151 Cowper Street, Dickson  ACT  2602
PO Box 923,  Dickson  ACT  2602
Ph:    +61 2 6257 0666  
Fax:  +61 2 6257 0665   E-mail: chrisn () softway com au
Mob: 0411 454 755       WWW:    http://www.softway.com.au
---------------------------------------------------------------------------