OS GSO ISO/IEC TR 20004:2017
ISO/IEC TR 20004:2015
Omani Standard
Current Edition
·
Approved on
03 October 2017
Information technology -- Security techniques -- Refining software vulnerability analysis under ISO/IEC 15408 and ISO/IEC 18045
OS GSO ISO/IEC TR 20004:2017 Files
English
17 Pages
Current Edition
Reference Language
Obtaining this standard through the store is currently unavailable. You can acquire it directly from its source.
OS GSO ISO/IEC TR 20004:2017 Scope
This Technical Report refines the AVA_VAN assurance family activities defined in ISO/IEC 18045:2008 and provides more specific guidance on the identification, selection and assessment of relevant potential vulnerabilities in order to conduct an ISO/IEC 15408 evaluation of a software target of evaluation. This Technical Report leverages the Common Weakness Enumeration (CWE) and the Common Attack Pattern Enumeration and Classification (CAPEC) to support the method of scoping and implementing ISO/IEC 18045:2008 vulnerability analysis activities.
This Technical Report does not define evaluator actions for certain high assurance ISO/IEC 15408 components, where there is as yet no generally agreed guidance.
Best Sellers From Information Sector
OS GSO ISO/TR 18492:2017
ISO/TR 18492:2005
Omani Standard
Long-term preservation of electronic document-based information
GSO ISO/TR 18492:2017
ISO/TR 18492:2005
Gulf Standard
Long-term preservation of electronic document-based information
GSO ISO/TS 23635:2024
ISO/TS 23635:2022
Gulf Standard
Blockchain and distributed ledger technologies — Guidelines for governance
GSO ISO/IEC 15773:2013
ISO/IEC 15773:1998
Gulf Standard
Information technology -- Telecommunications and information exchange between systems -- Broadband Private Integrated Services Network -- Inter-exchange signalling protocol -- Transit counter additional network feature
Recently Published from Information Sector
OS GSO IEC SRD 63476-1:2026
IEC SRD 63476-1:2024
Omani Standard
Smart city system ontology - Part 1: Gap analysis
OS GSO ISO/IEC TS 33060:2026
ISO/IEC TS 33060:2025
Omani Standard
Information technology — Process assessment — Process assessment model for system life cycle processes
OS GSO ISO/IEC 21794-6:2026
ISO/IEC 21794-6:2025
Omani Standard
Information technology — Plenoptic image coding system (JPEG Pleno) — Part 6: Learning-based point cloud coding
OS GSO ISO/IEC TR 16088:2026
ISO/IEC TR 16088:2025
Omani Standard
Information technology — Computer graphics, image processing and environmental representation — Constructs for visual positioning systems in mixed and augmented reality (MAR)