XML database server up for Common Criteria certification
- By Joab Jackson
- Apr 15, 2008
Mark Logic Corp. has submitted its Extensible Markup Language (XML) database server for Common Criteria certification.
Version 4.0 of MarkLogic Server Enterprise Edition will be tested at Evaluation Assurance Level 3. In a addition, the certification will be augmented with ALC_FLR.3, an assurance on the part of the vendor that it has a process in place to track and fix flaws found in the software found after the certification is issued.
Overseen in the U.S. by the National Information Assurance Partnership (NIAP
), Common Criteria is a set of security requirements set by government agencies and private companies. To get their products certified, vendors provide a set of security attributes for each product, which are verified by an independent laboratory.
The Defense Department uses the Common Criteria as a baseline for purchasing IT products for secure networks. NIAP is a partnership between the National Institute of Standards and Technology and the National Security Agency.
'Reaching the evaluation phase of the Common Criteria security certification is a significant milestone for us,' said Christopher Lindblad, founder and chief architect at Mark Logic, in a statement. MarkLogic Server
is database server software for handling XML data, one that uses the XQuery and XPath standards. To date, no other XML databases have achieved Common Criteria certification, though the latest releases of some widely-used relational databases such as Oracle and IBM DB2 do support XML parsing.
Joab Jackson is the senior technology editor for Government Computer News.