Talk:Evaluation Assurance Level

From Wikipedia, the free encyclopedia

Does anyone know if EAL certifications are transferrable to subsequent versions of the same software? IE - if version 1.0 of something holds an EAL 4 certification, does that mean that version 2.0 will hold the same certification or does 2.0 have EAL 0 until it's evaluated?

216.54.146.100 19:07, 27 February 2006 (UTC)No, it won't apply. It's for that configuration only, any changes will need to be recertified. Why windows 2000 only has EAL 4 for SP3

What is EAL4+?? Seems most devices are trying for EAL4+ these days instead of EAL4

It might be worth noting that one company is currently seeking an eal 6+ certification for an operating system. I'm not sure if its relevant until they actually get (or don't get) the certification, but some readers may be interested. The press release is here: http://www.ghs.com/news/20050419_SAIC.html

I am removing the link to this document in the top of the page: http://web.archive.org/web/20060527063317/http://eros.cs.jhu.edu/~shap/NT-EAL4.html but leving it near the bottom where it's relevant. The issues with this is that it's not a technical paper, and the way it was used is misleading, much mroe so considering that it's out dated and relays the idea that ALL windows needs to be configured with a profile of no networking for EAL 4, while 2K3 has reached EAL 4 with many more profiles than it's 2K brother. And it also ponts out, but in a single line few people see, that Unix and Linux were in the same boat (This isn't actualy true, most unix flavors could never have gotten this ranking at the time, and Linux was still just to early back then) But the biggest issue is that this paper was actualy just propraganda about the writers own OS, EROS. At the time he wrote it, he had just taken his new job at standford, and was pushing EROS as the way to go, as in the paper he said "It is possible to do much better. EROS, a research operating system that we are working on here in the Systems Research Laboratory at Johns Hopkins University, should eventually achieve an EAL7 evaluation rating...", never mentioning what the EAL7 evaluation would be on, in other words, performing the same act he was complaining about before! And he made EAL 4 sound like anyone could get it if you had someone check your paperwork, but that isn't true. If it was, *WHAT* would they be checking in the paperwork? 4.160.246.146 21:40, 28 June 2007 (UTC) (Why the hell did I type all that just to remove one link...)