Class Ava: Vulnerability Assessment - Samsung X4220 Instruction Manual

Samsung Multifunction MultiXpress X4220, X4250, X4300, X401, K4250, K4300, K4350, K401 Series
ATE_IND.2.3E

6.2.6 Class AVA: Vulnerability assessment

6.2.6.1 AVA_VAN.2 Vulnerability analysis
Dependencies:
Developer action elements:
AVA_VAN.2.1D
Content and presentation elements:
AVA_VAN.2.1C
Evaluator action elements:
AVA_VAN.2.1E
AVA_VAN.2.2E
AVA_VAN.2.3E
AVA_VAN.2.4E
Copyright
The evaluator shall test a subset of the TSF to confirm that the TSF
operates as specified.
ADV_ARC.1 Security architecture description
ADV_FSP.2 Security-enforcing functional specification
ADV_TDS.1 Basic design
AGD_OPE.1 Operational user guidance
AGD_PRE.1 Preparative procedures.
The developer shall provide the TOE for testing.
The TOE shall be suitable for testing.
The evaluator shall confirm that the information provided meets all
requirements for content and presentation of evidence.
The evaluator shall perform a search of public domain sources to
identify potential vulnerabilities in the TOE.
The evaluator shall perform an independent vulnerability analysis of
the TOE using the guidance documentation, functional specification,
TOE design and security architecture description to identify potential
vulnerabilities in the TOE.
The evaluator shall conduct penetration testing, based on the
identified potential vulnerabilities, to determine that the TOE is
resistant to attacks performed by an attacker possessing Basic attack
potential.

2014 SAMSUNG ELECTRONICS Co., Ltd., All rights reserved
78