logo

Standards Manage Your Business

We Manage Your Standards

IEC

ISO/IEC TR 20004:2012

Information technology -- Security techniques -- Refining software vulnerability analysis under ISO/IEC 15408 and ISO/IEC 18045

Standard Details

ISO/IEC TR 20004:2012 refines the AVA_VAN assurance family activities defined in ISO/IEC 18045:2008 and provides more specific guidance on the identification, selection and assessment of relevant potential vulnerabilities in order to conduct an ISO/IEC 15408 evaluation of a software target of evaluation.


ISO/IEC TR 20004:2012 leverages the Common Weakness Enumeration (CWE) and the Common Attack Pattern Enumeration and Classification (CAPEC) to support the method of scoping and implementing ISO/IEC 18045:2008(E) vulnerability analysis activities.


ISO/IEC TR 20004:2012 does not define evaluator actions for certain high assurance ISO/IEC 15408 components, where there is as yet no generally agreed guidance.

General Information

Status : WITHDRAWN
Standard Type: Main
Document No: ISO/IEC TR 20004:2012
Document Year: 2012
Pages: 17
Edition: 1.0
  • ICS:
  • 35.030 IT Security *Including encryption

Life Cycle

Currently Viewing

WITHDRAWN
ISO/IEC TR 20004:2012
Knowledge Corner

Expand Your Knowledge and Unlock Your Learning Potential - Your One-Stop Source for Information!

© Copyright 2024 BSB Edge Private Limited.

Enquire now +