The information technology security evaluation criteria

The author presents the technical approach adopted for the information technology security evaluation criteria (ITSEC). The ITSEC are the result of harmonizing the security evaluation criteria of France, Germany, the Netherlands and the United Kingdom. Various background information which led to the development of the ITSEC in their current form with respect to structure, underlying evaluation philosophy, software engineering practice and external influence is presented. A wider field of applicability than previously developed security criteria was one of ITSEC´s goals. By drawing from the best features of existing national criteria and harmonizing where possible and innovating only where necessary, it is expected that this goal has been achieved