Microsoft Windows Platform Products Awarded Common Criteria EAL 4 Certification

Microsoft Corp. today announced that a wide range of Microsoft Windows platform products have been awarded Common Criteria (CC) Evaluation Assurance Level 4 + Augmented with ALC_FLR.3 certification.

Issued by the National Information Assurance Partnership, CC certification is an international standard for ensuring that IT products conform to stringent security requirements. Microsoft representatives Steve Lipner, senior director of security engineering strategy, and David Cross, director of program management of Windows security, accepted CC certification awards for six Windows products during Microsoft's Security Summit East in Washington, D.C.

"CC certification of these Windows platform products, which includes evaluation of the broadest set of real-world scenarios of any operating system platform today, underscores our deep and ongoing commitment to the Common Criteria process, " Lipner said. "This milestone complements our ongoing advances in software quality through the Security Development Lifecycle process, ultimately benefiting any IT organization that is serious about security."

The following products have earned CC EAL 4 + Augmented with ALC_FLR.3 certification from NIAP:

- Microsoft Windows Server 2003, Standard Edition (32-bit version) with Service Pack 1
- Microsoft Windows Server 2003, Enterprise Edition (32-bit and 64-bit versions) with Service Pack 1
- Microsoft Windows Server 2003, Datacenter Edition (32-bit and 64-bit versions) with Service Pack 1
- Microsoft Windows Server 2003 Certificate Server, Certificate Issuing and Management Components (Security Level 3 Protection Profile, Version 1.0)
- Microsoft Windows XP Professional with Service Pack 2
- Microsoft Windows XP Embedded with Service Pack 2

In November 2005, Microsoft launched new versions of three key products - Microsoft Visual Studio 2005, Microsoft SQL Server 2005, and Microsoft BizTalk Server 2006 Beta 2 - that became the first Microsoft products to have undergone the complete SDL process from inception to release. Microsoft's work on SDL also produced new security-focused code analysis and debugging tools - PREfast and FxCop, among others - as part of Visual Studio 2005.

write your comments about the article :: 2005 Computing News :: home page