Francois J. N. Cosquer

SECURITY THROUGH INTEGRATION: TOWARDS A COMPREHENSIVE FRAMEWORK FOR DEVELOPMENT AND CERTIFICATION

Today secured infrastructures are more and more being built by integration of both in-house components and policies, and off-the-shelf products. This poses several difficulties for developers. Despite, or because, the numerous choice of security products, it is difficult to build, in a coherent way, a comprehensive set of security features within distributed applications without severely increasing complexity and decreasing scalability of globally secured applications. Another difficulty appears when security certification needs to be achieved for such an integrated security architecture. In this paper we propose an alternative approach to building secured applications through integration which will additionally guarantee a means to achieve security certification, such as ISO 15408 (Common Criteria) [4].