Chain of trust: Unraveling the references among Common Criteria certified products

arXiv:2404.14246v1 Announce Type: new
Abstract: With 5394 security certificates of IT products and systems, the Common Criteria for Information Technology Security Evaluation have bred an ecosystem entangled with various kind of relations between the certified products. Yet, the prevalence and nature of dependencies among Common Criteria certified products remains largely unexplored. This study devises a novel method for building the graph of references among the Common Criteria certified products, determining the different contexts of references with a supervised machine-learning algorithm, …

arxiv certificates certified cs.cr dependencies ecosystem entangled evaluation information information technology kind nature products security security certificates systems technology trust