On September 9-11 the annual International Common Criteria Conference (ICCC 2014) will take place in New Delhi, India. Director of the certification and testing department of Echelon Company, Ph.D., CISSP, CSSLP Alexander Barabanov will participate in the conference with the original report: “Russian IT Security Certification Scheme: Steps Toward Common Criteria Approach” (September 10, 12.00 (noon).

The presentation will be focused on the urgent trends of the Russian system of certification information security tools (IST) through the methodology of Common Criteria. This report presents the main features of the Russian certification system for requirements of information security, represents the results of the comparative analysis of Russian and Western systems of certification through the Common Criteria, and analyzes the difficulties faced by Russian developers of IST and by accredited testing laboratories in case of certification by Common Criteria.

Echelon Company is leading certification testing laboratory which is accredited by the Federal Service for Technical and Export Control of Russia (FSTEC), the Russian Ministry of Defense and Federal Security Service of Russia. We have extensive experience in using the Common Criteria on practice within the certification software products of different types.

The last two years were marked by the release of new regulatory acts of FSTEC of Russia based on the methodology of Common Criteria.  Common Criteria Competency Center was formed on basis of Echelon Company.

The following certifications were already conducted according to new rules.

• tests of the software McAfee Network Security Platform (version 7.1) in accordance with the requirements of FSTEC of Russia document Requirements for Intrusion Detection Systems (network protection level 5);

• tests of the hardware and software encryption complex Continent in compliance with the FSTEC of Russia document Requirements for Intrusion Detection Systems (network protection level 3);

• tests of the software McAfee Web Gateway (version 7.4) in accordance with the requirements of FSTEC of Russia document Requirements for anti-virus protection (type B, protection level 5).

Specialists of our Center are involved in certification projects not only as experts of testing laboratories, but also as experts of certification body of FSTEC of Russia.

The Center provides a wide range of services for software developers and testing laboratories, including the unique courses of software certification for information security requirements.  To see a full list of services please visit the Competence Center website: www.commoncriteria.ru.