Windows and Common Criteria...

Microsoft Corp. recently earned EAL 4+ certification for a fistful of operating-systems software, including Windows Server 2003 SP1 Enterprise, Server and Datacenter Editions, Windows XP Professional SP2 and Embedded XP SP2. Steve Lipner, Microsoft's director of security engineering strategy, told GCN the certifications include Assurance Life Cycle-Flaw Remediation, which means the products have been tested for the developer's ability to track and correct security flaws. While EAL 7 is the highest assurance level, Lipner said EAL 4 'is as high as you're going to get with a high-volume, commercially viable system.' In the past, Microsoft earned EAL 4 for Exchange Server 2003, Internet Security and Acceleration Server 2004, Microsoft Windows 2000 Professional and Microsoft Windows 2000 Server and Advanced Server.

Reader Comments

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above