Scientific Programme

Other Topics

---

Development of a Protection
Profile for Biometric Systems
Following ISO/IEC TR 15446

Fernandez S. Belen,
Univ. Carlos III of Madrid

E-ID

---

The e-ID Card Project in
Germany

Bernd Kowalski, Federal Office
of Information Security

The Next Generation of CC

---

CCDB Report and overview
of CC v.4 work areas

David Martin, CESG, UK

Experiences gained from the
first Site Certification
Projects

Christian Krause, BSI

Strong Authentication based
on German ID Card

Klaus Lüttich,
Bremen Online Sevices

Detailed Report

---

Meaningful Reports
Working Group – Status update

Bob Morey,
Program Manager for the
Canadian CC Scheme,
Comm.Security Establishment

Dedicated EAL: The payment
terminal experience

Carolina Lavatelli,
Trusted Labs

Smart Card

---

Stepping into CC v.3.1 –
Supporting efficiently
ADV_ARC in the smart card
industry

Laurent Di Russo, NLNCSA

Predictive Assurance

---

Update on Lead Nation Project

Irmela Ruhrmann, BSI

Fine tuning a CC evaluation
in concurrence with a FIPS
140-3 validation

Javier J. Tallon, Epoche & Espri

Site Certification – 1st trial:
Good news and Guidelines

Hans Gerd Albertsen,
NXP Semiconductors Germany

Tools Support

---

Tools to verify
Match-on Card Fingerprint Verification
implementation

David Cerezo, CCN

New Crypto-Kid on the block

Sunil Trivedi, The MITRE Corp

Monitoring CC for Smart
Security Devices

Françoise Forge, ISCI

Skills and Interaction

---

Low Cost Certification
Roadmap

Miguel Bañón, Epoche & Espri

Composite evaluation of
(U)SIM Applications

Carolina Lavatelli, Trusted Labs

Vulnerability Analysis:
Simplicity is the ultimate sophistication

Wouter Slegers,
Your Creative Solutions

Scheme Update

---

Update on UK Scheme
David Martin, CESG, UK

Tools, Techniques
and Experience

---

Formal security policy model
for a system with dynamic
information flow

Jens H.Rypestøl,
Applica Consulting

The Next Generation of CC

---

Challenges and Solutions of
Distributed Systems Composition

Tsun-Te Tsui, Telecom Technology
Center

Update on Italian Scheme
Massimiliano Orazi, FUB

Update on US Scheme
Carol Houck, NIAP, US

Evaluation Methodology for
Random Number Generator -
Update of German Scheme Doc.

Wolfgang Killmann,
T-Systems GEI

Unofficial Part 4 of the CC

Lisa Vincent,
SAIC Acc. Testing & Eval. Lab.

Update on US Scheme

Carol Houck, NIAP, US

Effective evaluations outside the EAL frameowrk: Vertical
Assurance Packages & -Profiles

Jose E. Rico, Epoche & Espri

An Attack Surface based Approach to Evaluation

Helmut Kurth,
atsec info.sec.corp.

CC in the 21st Century

---

Appropriate Assurance:
Fitting like a Glove, Not a Tent

Tony Boswell, SiVenture

Design and Development of a
Knowledge-based Tool to
support ST Developers on
acquisition of Cryptographic
Requirements

Gillermo H.R.Caceres,
Grad School of Engineering,
Soka University

How the CC intersects and compares
with other security evaluation
programs and what it means for the
rest of us

Lachlan Turner,
DOMUS IT Security Laboratory

CC vs. ISO/IEC 27001:2005:
How to use an
ISO/IEC 27001:2005
Certified Information Security
Management System (ISMS)
in a CC Evaluation.

Jean-Yves Bernard,
Thales ITSEF

EAL6 Evaluation – Challenges
in Consistency Verification
between Security Policy Model
and other ADV classes
documents

Sun-Mi Kim, Korea Info Sec Agency

Enterprise Security Management
Protection Profiles:
An Implementation Plan

Brickman Joshua, CA Inc. and
Eric Winterton, Booz | Allen

OSPP: A Flexible Approach to
Operating Systems Security

Miriam Serowy, BSI

Developer Tools and
Techniques, Part I:
ALC_TAT reformulation

Miguel Bañòn, Epoche & Espri

Lessons learned while Evaluating
Windows Vista and Server 2008 using
the CC and alternative approaches

Michael Grimm, Microsoft Corp.

The public domain and the CEM Attack Potential mismatch

Jose F. Ruiz, Epoche & Espri

Developer Tools and
Techniques, Part II. Application
to SW: CAPEC

Robert Martin ,
MITRE Corporation

Common Criteria Development
Lessons from the ISMS World

Mike Nash, Gamma Secure
Systems.Limited

CC in the 21st Century

---

Walking by the Physical
borderline: Vulnerability
Analysis of Hardware TOE’s with Security Boxes

Marino Tapiador, CCN

Tools, Techniques and Experience

---

Optimizing ADV/AGD
evidence for CC 3.1

Peter van Swieten,
Brightsight BV

The Next Generation of CC

---

Making a Better PP

James Arnold, SAIC

Public verifiability challenges CC paradigm in the context of e-voting and beyond

Roland Vogt, DFKI

Policies vs. Threats: clarifying
the Security Target

Albert Dorofeev, Sony SCE

Incorporating user-oriented
Security into CC

Robin Sharp,
Technical University of Denmark

Physical protection:
Anti-tamper mechanisms
in CC security evaluations

Chamorro Alvaro,
Epoche & Espri

Taking White Hats to
the Laundry: How to
Strengthen Testing in CC

Apostol Vasilev,
atsec info. sec. corp.

Vulnerability Analysis Taxonomy:
Achieving completeness in
a systematic way

Javier Jesús Tallon,
Epoche & Espri, S.L

CC Schemes Around the
World: Some Lab Perspectives

Eve Pierre, SAIC

Why source code when having
binaries? Applying reverse
engineering in Common
Criteria evaluations below
EAL4.

Trifon Giménez,
Epoche & Espri, S.L

Protection of
Critical Infrastructure

---

CC and EU

---

CC within the context of the EU Privacy Seal (EuroPriSe)

Wolfgang Peter, TÜViT

Taming the Complexity
of the CC

Wouter Slegers,
Your Creative Solutions

CC and EU

---

Building successful
communities to interpret
and apply CC

Tony Boswell, SiVenture

Vendors and CC

---

Sony FeliCa: Smartcard CC Evaluation Experience with Five Schemes

Hiroaki Hamada,
Sony Corp.

Evidence based Evaluations

---

Semantic Techniques for the CC

Erin Connor,
EWA Canada

E-Health and
Trustworthy IT

---

The use of CC within the
German health system

Markus Mackenbrock,
BSI Germany

Secure Software Development
for Higher CC Evaluation
Assurance Levels

Shanai Ardi, Dept. of Computer
and Info.science, Linkøping Univ.

Evaluation and Certification results and vulnerability analysis in USB Storage Drive Management System

Hyeon Mee Pak, KISA

An innovative Composition
Approach by the German
Health Care market

Hans-Werner Blissenbach, TÜVIT and Mr. Marcel Weinand of BSI

How much!! The cost impact
of different approaches to
generating deliverables

Adam O’Brien, Oracle Corp.

A Comparison of Security Standards

Marcus Streets, Thales nCipher