Windows and Common Criteria...

Microsoft Corp. recently earned EAL 4+ certification for a fistful of operating-systems software, including Windows Server 2003 SP1 Enterprise, Server and Datacenter Editions, Windows XP Professional SP2 and Embedded XP SP2. Steve Lipner, Microsoft's director of security engineering strategy, told GCN the certifications include Assurance Life Cycle-Flaw Remediation, which means the products have been tested for the developer's ability to track and correct security flaws. While EAL 7 is the highest assurance level, Lipner said EAL 4 'is as high as you're going to get with a high-volume, commercially viable system.' In the past, Microsoft earned EAL 4 for Exchange Server 2003, Internet Security and Acceleration Server 2004, Microsoft Windows 2000 Professional and Microsoft Windows 2000 Server and Advanced Server.

Stay Connected

Sign up for our newsletter.

I agree to this site's Privacy Policy.