This Evaluation Technical Report (ETR) for the Windows Server 2003/XP Target of Evaluation (TOE) gives the detailed results of the Common Criteria (CC) evaluation and follows the outline presented in the Common Criteria (CC) Evaluation and Validation Scheme (CCEVS) for Information Technology (IT) Security, Guidance to CCEVS Approved CC Testing Laboratories, Scheme Publication #4, Version 1, March 20, 2001.
There are three parts to this report:
Part 1 gives an overview and describes the TOE, including its architecture and subsystems. It describes the evaluation process, results, conclusions, and recommendations observed during the evaluation. The evaluation evidence is listed along with the Validated Products List (VPL) entry, Observation Reports (OR) and Observation Decisions (OD), and national and international interpretations. The Security Target (ST) is presented, ending with the Specific Results of Evaluation, which leads to Part 2.
Part 2 provides the ETR sections containing the verdicts, rationale, and work performed per work unit.
Part 3 or the Part 2 ADV Supplement gives a detailed report (2,350 pages) of the CC evaluation results for each component and subcomponent that comprises the TOE.
Although parts 2 and 3 of the ETR were labeled Microsoft Proprietary throughout the CC evaluation, Microsoft has declassified these documents in order to release the greatest amount of detailed information possible about this security evaluation.
|