MQAssure™/AppShield v1.2_CR6 Integrated with MQAssure™/IAM v1.0_CR6

CSV information ?

Status archived
Valid from 11.04.2011
Valid until 11.04.2016
Scheme 🇲🇾 MY
Manufacturer MagnaQuest Solutions Sdn Bhd
Category Access Control Devices and Systems
Security level EAL4

Heuristics summary ?

Certificate ID: ISCB-5-RPT-C005-CR-v1a

Certificate ?

Certification report ?

Extracted keywords

Hash functions
MD5
Protocols
SSL

Security level
EAL4
Certificates
ISCB-5-RPT-C005-CR-v1a

Standards
RFC 1321, ISO/IEC15408, ISO/IEC 18045

File metadata

Title C005 Certification Report
Subject MQAssure™/AppShield v1.2_CR6 integrated with MQAssure™/IAM v1.0_CR6
Keywords MyCB_TMP_011
Author ISCB Department
Creation date D:20110414172127+08'00'
Modification date D:20110414172137+08'00'
Pages 33
Creator Acrobat PDFMaker 8.1 for Word
Producer Acrobat Distiller 8.1.0 (Windows)

Security target ?

Extracted keywords

Security level
EAL4
Claims
O.ACC_CONTROL, O.LOCKOUT, O.RESTRICT_AUTH, O.AUTH_MECH, O.AUDIT, O.SECURE_CONFIG, O.ALERT, O.FILTER, T.WEAK_PASS, T.DATA_ACCESS, T.WEB_ATTACK, T.USER_PARAM, T.RECONFIG, A, A.NO_EVIL, A.PHYS_SEC, A.TIME_STAMP, A.MAIL_SERVER, A.IAM_PROTECT, A.TRANS_PROTECT, A.IAM_DATA, A.FIREWALL, OE.NO_EVIL, OE.PHYS_SEC, OE.TIME_STAMP, OE.MAIL_SERVER, OE.IAM_PROTECT, OE.TRANS_PROTECT, OE.IAM_DATA, OE.FIREWALL
Security Assurance Requirements (SAR)
ADV_ARC.1, ADV_FSP.4, ADV_IMP.1, ADV_TDS.3, AGD_OPE.1, AGD_PRE.1, ALC_CMC.4, ALC_CMS.4, ALC_DEL.1, ALC_DVS.1, ALC_LCD.1, ALC_TAT.1, ATE_COV.2, ATE_DPT.2, ATE_FUN.1, ATE_IND.2, AVA_VAN.3, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1
Security Functional Requirements (SFR)
FAU_SAA.1, FAU_ARP.1, FAU_GEN.1, FAU_GEN.2, FAU_SAR.1, FAU_SAR.2, FAU_SAA.1.1, FAU_SAA.1.2, FAU_ARP.1.1, FAU_GEN.1.1, FAU_GEN.1.2, FAU_GEN.2.1, FAU_SAR.1.1, FAU_SAR.1.2, FAU_SAR.2.1, FDP_ACC.1, FDP_ACF.1, FDP_ACC.1.1, FDP_ACF.1.1, FDP_ACF.1.2, FDP_ACF.1.3, FDP_ACF.1.4, FIA_AFL.1, FIA_ATD.1, FIA_SOS.1, FIA_UAU.2, FIA_UAU.5, FIA_UAU.6, FIA_UID.2, FIA_UID.1, FIA_AFL.1.1, FIA_AFL.1.2, FIA_UAU.1, FIA_ATD.1.1, FIA_SOS.1.1, FIA_UAU.2.1, FIA_UAU.5.1, FIA_UAU.5.2, FIA_UAU.6.1, FIA_UID.2.1, FMT_MSA.1, FMT_MSA.3, FMT_SMF.1, FMT_SMR.1, FMT_SAE.1, FMT_MSA.1.1, FMT_MSA.3.1, FMT_MSA.3.2, FMT_SMF.1.1, FMT_SMR.1.1, FMT_SMR.1.2, FMT_SAE.1.1, FMT_SAE.1.2, FPT_STM.1, FTA_MCS.1, FTA_SSL.3, FTA_TAH.1, FTA_TSE.1, FTA_MCS.1.1, FTA_MCS.1.2, FTA_SSL.3.1, FTA_TAH.1.1, FTA_TAH.1.2, FTA_TAH.1.3, FTA_TSE.1.1

File metadata

Author zarina
Creation date D:20110414172302+08'00'
Modification date D:20110414172319+08'00'
Pages 43
Creator Acrobat PDFMaker 8.1 for Word
Producer Acrobat Distiller 8.1.0 (Windows)

Heuristics ?

Certificate ID: ISCB-5-RPT-C005-CR-v1a

Extracted SARs

ADV_ARC.1, ADV_FSP.4, ADV_IMP.1, ADV_TDS.3, AGD_OPE.1, AGD_PRE.1, ALC_CMC.4, ALC_CMS.4, ALC_DEL.1, ALC_DVS.1, ALC_LCD.1, ALC_TAT.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.2, ASE_REQ.2, ASE_SPD.1, ASE_TSS.1, ATE_COV.2, ATE_DPT.2, ATE_FUN.1, ATE_IND.2, AVA_VAN.3

Scheme data ?

Cert No 2011-007-C005
Developer MagnaQuest Solutions Sdn. Bhd
Level EAL4
Product MQAssureTM/AppShield v1.2_CR6 integrated with MQAssureTM/IAM v1.0_CR6
Certification Date 11.04.2011
Expiration Date 11.04.2016
Recognition CCRA
Url https://iscb.cybersecurity.my/index.php/certification/product-certification/mycc/archived-certified-products-and-systems/submission-view/71
Enhanced
Cert Id C005
Product MQAssureTM/AppShield v1.2_CR6 integrated with MQAssureTM/IAM v1.0_CR6
Developer Ramdas Nemani A-2-07 & A-2-09SME Technopreneur Centre1,2270 Jalan Usahawan 2,63000 Cyberjaya, Selangor DE,MALAYSIA URL: http://www.magnaquest.comEmail: [email protected]: +60 (3) 8318 2964Fax: +60 (3) 8319 2534
Category Access Control Devices and System
Type Access Control Software for Web Applications
Scope The Target of Evaluation (TOE) is a software product, which comprises of MQAssure™/AppShield v1.2_CR6 integrated with MQAssure™/IAM v1.0_CR6. The MQAssureTM/AppShield v1.2_CR6 (hereafter referred as Appshield) combined with MQAssureTM/IAM v1.0_CR6 (hereafter referred as IAM) is an access control software for web applications. The TOE controls access to web filtering applications by enforcing authentication and authorisation using multifactor authentication schemes. It is also capable of session control, and request validation based on its core engine policy and rules. IAM or Identity and Access Management is the core engine of the TOE. It is a centralised identity and access management platform that provides the back bone for the AppShield security functionality. In the overall infrastructure, AppShield acts as a policy enforcement agent for the web applications. The security features within the scope of the evaluation for IAM includes: Multifactor User Authentication which includes MyKad-Biometric, iKey-PIN or password. TOE Administration which provides a web based GUI console for the administrator to configure and manage the TOE. Security Audit which generates audit records for relevant authentication events and access events to various objects. The security features within the scope of the evaluation for AppShield includes: Access Control which enforces access control policy decision made by the IAM. HTTP request validation which protects the web applications from common input tampering attacks.
Assurance Level EAL4
Certification Date 11.04.2011
Expiration Date 11.04.2016
Mutual Recognition CCRA
Target Link https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C005/MQAssure_AppShield_1.2_Security_Target_EAL4_1.21.pdf
Report Link https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C005/ISCB-5-RPT-C005-CR-v1a.pdf
Status Archive

References ?

No references are available for this certificate.

Updates ?

  • 21.11.2024 The certificate data changed.
    Certificate changed

    The computed heuristics were updated.

    • The following values were inserted: {'prev_certificates': [], 'next_certificates': []}.
  • 09.11.2024 The certificate data changed.
    Certificate changed

    The computed heuristics were updated.

    • The scheme_data property was updated, with the {'certification_date': '2011-04-11', 'expiration_date': '2016-04-11', 'enhanced': {'__update__': {'developer': 'Ramdas Nemani A-2-07 & A-2-09SME Technopreneur Centre1,2270 Jalan Usahawan 2,63000 Cyberjaya, Selangor DE,MALAYSIA URL: http://www.magnaquest.comEmail: [email protected]: +60 (3) 8318 2964Fax: +60 (3) 8319 2534', 'scope': 'The Target of Evaluation (TOE) is a software product, which comprises of MQAssure™/AppShield v1.2_CR6 integrated with MQAssure™/IAM v1.0_CR6. The MQAssureTM/AppShield v1.2_CR6 (hereafter referred as Appshield) combined with MQAssureTM/IAM v1.0_CR6 (hereafter referred as IAM) is an access control software for web applications. The TOE controls access to web filtering applications by enforcing authentication and authorisation using multifactor authentication schemes. It is also capable of session control, and request validation based on its core engine policy and rules. IAM or Identity and Access Management is the core engine of the TOE. It is a centralised identity and access management platform that provides the back bone for the AppShield security functionality. In the overall infrastructure, AppShield acts as a policy enforcement agent for the web applications. The security features within the scope of the evaluation for IAM includes: Multifactor User Authentication which includes MyKad-Biometric, iKey-PIN or password. TOE Administration which provides a web based GUI console for the administrator to configure and manage the TOE. Security Audit which generates audit records for relevant authentication events and access events to various objects. The security features within the scope of the evaluation for AppShield includes: Access Control which enforces access control policy decision made by the IAM. HTTP request validation which protects the web applications from common input tampering attacks.', 'certification_date': '2011-04-11', 'expiration_date': '2016-04-11'}}} data.
  • 22.08.2024 The certificate data changed.
    Certificate changed

    The state of the certificate object was updated.

    • The report property was updated, with the {'download_ok': True, 'convert_ok': True, 'extract_ok': True, 'pdf_hash': '1bdf1983172857f44cc10b0c72dc883567466ad3d3cd7fdf197077e25f1b3370', 'txt_hash': 'e9b373ce3053bc490b7f42396bf94120a4119e009315c6099b81f6389b21bbec'} data.
    • The st property was updated, with the {'download_ok': True, 'convert_ok': True, 'extract_ok': True, 'pdf_hash': '6b2a7d6af845701a54373e4a86f7c2b52a6979b94169354508c1b464abd4d4da', 'txt_hash': '1fedfb70601a657a5567826b64ec41ef0b86202d1d9f5d5efda89c2ac4cfbbe9'} data.

    The PDF extraction data was updated.

    • The report_metadata property was set to {'pdf_file_size_bytes': 596718, 'pdf_is_encrypted': True, 'pdf_number_of_pages': 33, '/Author': 'ISCB Department', '/Category': 'PUBLIC', '/Caveat': 'FINAL', '/Classification': 'PUBLIC', '/Company': 'CyberSecurity Malaysia', '/CreationDate': "D:20110414172127+08'00'", '/Creator': 'Acrobat PDFMaker 8.1 for Word', '/Developer': 'MagnaQuest Solutions Sdn Bhd', '/Document Type': 'REPORT', '/Identifier': 'ISCB-5-RPT-C005-CR-v1a', '/Index': 'MyCB_TMP_011', '/Keywords': 'MyCB_TMP_011', '/ModDate': "D:20110414172137+08'00'", '/Phase': 'Released', '/Producer': 'Acrobat Distiller 8.1.0 (Windows)', '/Project Code': 'C005', '/Released': '11 April 2011', '/ST Title': 'Security Target for the MQAssureTM/AppShield v1.2 Integrated with MQAssureTM/IAM v1.0', '/ST Version': 'v1.21', '/SourceModified': 'D:20110414092101', '/Sponsor': 'MagnaQuest Solutions Sdn Bhd', '/Subject': 'MQAssure™/AppShield v1.2_CR6 integrated with MQAssure™/IAM v1.0_CR6', '/TOE Name & Version': 'MQAssure™/AppShield v1.2_CR6 integrated with MQAssure™/IAM v1.0_CR6', '/Title': 'C005 Certification Report', '/Version': 'v1a', 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['http://www.cybersecurity.my/mycc', 'mailto:[email protected]']}}.
    • The st_metadata property was set to {'pdf_file_size_bytes': 622066, 'pdf_is_encrypted': True, 'pdf_number_of_pages': 43, '/Author': 'zarina', '/Company': 'Microsoft', '/CreationDate': "D:20110414172302+08'00'", '/Creator': 'Acrobat PDFMaker 8.1 for Word', '/ModDate': "D:20110414172319+08'00'", '/Producer': 'Acrobat Distiller 8.1.0 (Windows)', '/SourceModified': 'D:20110330044814', '/Title': '', 'pdf_hyperlinks': {'_type': 'Set', 'elements': []}}.
    • The report_frontpage property was set to {}.
    • The report_keywords property was set to {'cc_cert_id': {'MY': {'ISCB-5-RPT-C005-CR-v1a': 33}}, 'cc_protection_profile_id': {}, 'cc_security_level': {'EAL': {'EAL4': 9}}, 'cc_sar': {}, 'cc_sfr': {}, 'cc_claims': {}, 'vendor': {}, 'eval_facility': {}, 'symmetric_crypto': {}, 'asymmetric_crypto': {}, 'pq_crypto': {}, 'hash_function': {'MD': {'MD5': {'MD5': 1}}}, 'crypto_scheme': {}, 'crypto_protocol': {'TLS': {'SSL': {'SSL': 1}}}, 'randomness': {}, 'cipher_mode': {}, 'ecc_curve': {}, 'crypto_engine': {}, 'tls_cipher_suite': {}, 'crypto_library': {}, 'vulnerability': {}, 'side_channel_analysis': {}, 'technical_report_id': {}, 'device_model': {}, 'tee_name': {}, 'os_name': {}, 'cplc_data': {}, 'ic_data_group': {}, 'standard_id': {'RFC': {'RFC 1321': 1}, 'ISO': {'ISO/IEC15408': 2, 'ISO/IEC 18045': 2}}, 'javacard_version': {}, 'javacard_api_const': {}, 'javacard_packages': {}, 'certification_process': {}}.
    • The st_keywords property was set to {'cc_cert_id': {}, 'cc_protection_profile_id': {}, 'cc_security_level': {'EAL': {'EAL4': 4}}, 'cc_sar': {'ADV': {'ADV_ARC.1': 1, 'ADV_FSP.4': 1, 'ADV_IMP.1': 1, 'ADV_TDS.3': 1}, 'AGD': {'AGD_OPE.1': 1, 'AGD_PRE.1': 1}, 'ALC': {'ALC_CMC.4': 1, 'ALC_CMS.4': 1, 'ALC_DEL.1': 1, 'ALC_DVS.1': 1, 'ALC_LCD.1': 1, 'ALC_TAT.1': 1}, 'ATE': {'ATE_COV.2': 1, 'ATE_DPT.2': 1, 'ATE_FUN.1': 1, 'ATE_IND.2': 1}, 'AVA': {'AVA_VAN.3': 1}, 'ASE': {'ASE_CCL.1': 1, 'ASE_ECD.1': 1, 'ASE_INT.1': 1, 'ASE_OBJ.2': 1, 'ASE_REQ.2': 1, 'ASE_SPD.1': 1, 'ASE_TSS.1': 1}}, 'cc_sfr': {'FAU': {'FAU_SAA.1': 6, 'FAU_ARP.1': 7, 'FAU_GEN.1': 9, 'FAU_GEN.2': 4, 'FAU_SAR.1': 6, 'FAU_SAR.2': 4, 'FAU_SAA.1.1': 1, 'FAU_SAA.1.2': 1, 'FAU_ARP.1.1': 1, 'FAU_GEN.1.1': 1, 'FAU_GEN.1.2': 1, 'FAU_GEN.2.1': 1, 'FAU_SAR.1.1': 1, 'FAU_SAR.1.2': 1, 'FAU_SAR.2.1': 1}, 'FDP': {'FDP_ACC.1': 7, 'FDP_ACF.1': 5, 'FDP_ACC.1.1': 1, 'FDP_ACF.1.1': 1, 'FDP_ACF.1.2': 1, 'FDP_ACF.1.3': 1, 'FDP_ACF.1.4': 1}, 'FIA': {'FIA_AFL.1': 5, 'FIA_ATD.1': 7, 'FIA_SOS.1': 4, 'FIA_UAU.2': 4, 'FIA_UAU.5': 6, 'FIA_UAU.6': 5, 'FIA_UID.2': 8, 'FIA_UID.1': 5, 'FIA_AFL.1.1': 1, 'FIA_AFL.1.2': 2, 'FIA_UAU.1': 2, 'FIA_ATD.1.1': 1, 'FIA_SOS.1.1': 1, 'FIA_UAU.2.1': 1, 'FIA_UAU.5.1': 1, 'FIA_UAU.5.2': 1, 'FIA_UAU.6.1': 1, 'FIA_UID.2.1': 1}, 'FMT': {'FMT_MSA.1': 6, 'FMT_MSA.3': 5, 'FMT_SMF.1': 6, 'FMT_SMR.1': 8, 'FMT_SAE.1': 5, 'FMT_MSA.1.1': 1, 'FMT_MSA.3.1': 1, 'FMT_MSA.3.2': 1, 'FMT_SMF.1.1': 1, 'FMT_SMR.1.1': 1, 'FMT_SMR.1.2': 1, 'FMT_SAE.1.1': 1, 'FMT_SAE.1.2': 1}, 'FPT': {'FPT_STM.1': 3}, 'FTA': {'FTA_MCS.1': 3, 'FTA_SSL.3': 6, 'FTA_TAH.1': 5, 'FTA_TSE.1': 7, 'FTA_MCS.1.1': 1, 'FTA_MCS.1.2': 1, 'FTA_SSL.3.1': 1, 'FTA_TAH.1.1': 1, 'FTA_TAH.1.2': 1, 'FTA_TAH.1.3': 1, 'FTA_TSE.1.1': 1}}, 'cc_claims': {'O': {'O.ACC_CONTROL': 6, 'O.LOCKOUT': 5, 'O.RESTRICT_AUTH': 5, 'O.AUTH_MECH': 5, 'O.AUDIT': 6, 'O.SECURE_CONFIG': 5, 'O.ALERT': 4, 'O.FILTER': 7}, 'T': {'T.WEAK_PASS': 2, 'T.DATA_ACCESS': 2, 'T.WEB_ATTACK': 2, 'T.USER_PARAM': 2, 'T.RECONFIG': 2}, 'A': {'A': 1, 'A.NO_EVIL': 2, 'A.PHYS_SEC': 2, 'A.TIME_STAMP': 2, 'A.MAIL_SERVER': 2, 'A.IAM_PROTECT': 2, 'A.TRANS_PROTECT': 2, 'A.IAM_DATA': 2, 'A.FIREWALL': 2}, 'OE': {'OE.NO_EVIL': 2, 'OE.PHYS_SEC': 2, 'OE.TIME_STAMP': 2, 'OE.MAIL_SERVER': 2, 'OE.IAM_PROTECT': 2, 'OE.TRANS_PROTECT': 2, 'OE.IAM_DATA': 2, 'OE.FIREWALL': 2}}, 'vendor': {}, 'eval_facility': {}, 'symmetric_crypto': {}, 'asymmetric_crypto': {}, 'pq_crypto': {}, 'hash_function': {}, 'crypto_scheme': {}, 'crypto_protocol': {}, 'randomness': {}, 'cipher_mode': {}, 'ecc_curve': {}, 'crypto_engine': {}, 'tls_cipher_suite': {}, 'crypto_library': {}, 'vulnerability': {}, 'side_channel_analysis': {}, 'technical_report_id': {}, 'device_model': {}, 'tee_name': {}, 'os_name': {}, 'cplc_data': {}, 'ic_data_group': {}, 'standard_id': {}, 'javacard_version': {}, 'javacard_api_const': {}, 'javacard_packages': {}, 'certification_process': {}}.
    • The report_filename property was set to ISCB-5-RPT-C005-CR-v1a.pdf.
    • The st_filename property was set to MQAssure_AppShield_1.2_Security_Target_EAL4_1.21.pdf.

    The computed heuristics were updated.

    • The cert_id property was set to ISCB-5-RPT-C005-CR-v1a.
    • The extracted_sars property was set to {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_INT', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_TAT', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ATE_FUN', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_DVS', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ADV_IMP', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_TSS', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'AGD_PRE', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_CCL', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_CMS', 'level': 4}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ATE_IND', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ATE_DPT', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_SPD', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_OBJ', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ADV_FSP', 'level': 4}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ATE_COV', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_REQ', 'level': 2}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_CMC', 'level': 4}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ADV_ARC', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_DEL', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'AVA_VAN', 'level': 3}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'AGD_OPE', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ALC_LCD', 'level': 1}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ADV_TDS', 'level': 3}, {'_type': 'sec_certs.sample.sar.SAR', 'family': 'ASE_ECD', 'level': 1}]}.
  • 17.08.2024 The certificate data changed.
    Certificate changed

    The report_link was updated.

    • The new value is https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ISCB-5-RPT-C005-CR-v1a.pdf.

    The st_link was updated.

    • The new value is https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/MQAssure_AppShield_1.2_Security_Target_EAL4_1.21.pdf.

    The state of the certificate object was updated.

    • The report property was updated, with the {'download_ok': False, 'convert_ok': False, 'extract_ok': False, 'pdf_hash': None, 'txt_hash': None} data.
    • The st property was updated, with the {'download_ok': False, 'convert_ok': False, 'extract_ok': False, 'pdf_hash': None, 'txt_hash': None} data.

    The PDF extraction data was updated.

    • The report_metadata property was set to None.
    • The st_metadata property was set to None.
    • The report_frontpage property was set to None.
    • The report_keywords property was set to None.
    • The st_keywords property was set to None.
    • The report_filename property was set to None.
    • The st_filename property was set to None.

    The computed heuristics were updated.

    • The cert_id property was set to None.
    • The extracted_sars property was set to None.
  • 23.07.2024 The certificate was first processed.
    New certificate

    A new Common Criteria certificate with the product name MQAssure™/AppShield v1.2_CR6 Integrated with MQAssure™/IAM v1.0_CR6 was processed.

Raw data

{
  "_type": "sec_certs.sample.cc.CCCertificate",
  "category": "Access Control Devices and Systems",
  "cert_link": null,
  "dgst": "7080fd6cdf564f88",
  "heuristics": {
    "_type": "sec_certs.sample.cc.CCCertificate.Heuristics",
    "annotated_references": null,
    "cert_id": "ISCB-5-RPT-C005-CR-v1a",
    "cert_lab": null,
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_sars": {
      "_type": "Set",
      "elements": [
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_CMC",
          "level": 4
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_INT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_ARC",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_FUN",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_TAT",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_OBJ",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_REQ",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_PRE",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_DEL",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_LCD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_ECD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_SPD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_FSP",
          "level": 4
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_CCL",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_TDS",
          "level": 3
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_DVS",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_COV",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AVA_VAN",
          "level": 3
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ASE_TSS",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_IND",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_CMS",
          "level": 4
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_IMP",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_DPT",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_OPE",
          "level": 1
        }
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.0",
        "1.2"
      ]
    },
    "indirect_transitive_cves": null,
    "next_certificates": [],
    "prev_certificates": [],
    "related_cves": null,
    "report_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "scheme_data": {
      "cert_no": "2011-007-C005",
      "certification_date": "2011-04-11",
      "developer": "MagnaQuest Solutions Sdn. Bhd",
      "enhanced": {
        "assurance_level": "EAL4",
        "category": "Access Control Devices and System",
        "cert_id": "C005",
        "certification_date": "2011-04-11",
        "developer": "Ramdas Nemani A-2-07 \u0026 A-2-09SME Technopreneur Centre1,2270 Jalan Usahawan 2,63000 Cyberjaya, Selangor DE,MALAYSIA URL: http://www.magnaquest.comEmail: [email protected]: +60 (3) 8318 2964Fax: +60 (3) 8319 2534",
        "expiration_date": "2016-04-11",
        "mutual_recognition": "CCRA",
        "product": "MQAssureTM/AppShield v1.2_CR6 integrated with MQAssureTM/IAM v1.0_CR6",
        "report_link": "https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C005/ISCB-5-RPT-C005-CR-v1a.pdf",
        "scope": "The Target of Evaluation (TOE) is a software product, which comprises of MQAssure\u2122/AppShield v1.2_CR6 integrated with MQAssure\u2122/IAM v1.0_CR6. The MQAssureTM/AppShield v1.2_CR6 (hereafter referred as Appshield) combined with MQAssureTM/IAM v1.0_CR6 (hereafter referred as IAM) is an access control software for web applications. The TOE controls access to web filtering applications by enforcing authentication and authorisation using multifactor authentication schemes. It is also capable of session control, and request validation based on its core engine policy and rules. IAM or Identity and Access Management is the core engine of the TOE. It is a centralised identity and access management platform that provides the back bone for the AppShield security functionality. In the overall infrastructure, AppShield acts as a policy enforcement agent for the web applications. The security features within the scope of the evaluation for IAM includes: Multifactor User Authentication which includes MyKad-Biometric, iKey-PIN or password. TOE Administration which provides a web based GUI console for the administrator to configure and manage the TOE. Security Audit which generates audit records for relevant authentication events and access events to various objects. The security features within the scope of the evaluation for AppShield includes: Access Control which enforces access control policy decision made by the IAM. HTTP request validation which protects the web applications from common input tampering attacks.",
        "status": "Archive",
        "target_link": "https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C005/MQAssure_AppShield_1.2_Security_Target_EAL4_1.21.pdf",
        "type": "Access Control Software for Web Applications"
      },
      "expiration_date": "2016-04-11",
      "level": "EAL4",
      "product": "MQAssureTM/AppShield v1.2_CR6 integrated with MQAssureTM/IAM v1.0_CR6",
      "recognition": "CCRA",
      "url": "https://iscb.cybersecurity.my/index.php/certification/product-certification/mycc/archived-certified-products-and-systems/submission-view/71"
    },
    "st_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "verified_cpe_matches": null
  },
  "maintenance_updates": {
    "_type": "Set",
    "elements": []
  },
  "manufacturer": "MagnaQuest Solutions Sdn Bhd",
  "manufacturer_web": "https://www.magnaquest.com",
  "name": "MQAssure\u2122/AppShield v1.2_CR6 Integrated with MQAssure\u2122/IAM v1.0_CR6",
  "not_valid_after": "2016-04-11",
  "not_valid_before": "2011-04-11",
  "pdf_data": {
    "_type": "sec_certs.sample.cc.CCCertificate.PdfData",
    "cert_filename": null,
    "cert_frontpage": null,
    "cert_keywords": null,
    "cert_metadata": null,
    "report_filename": "ISCB-5-RPT-C005-CR-v1a.pdf",
    "report_frontpage": {},
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {
        "MY": {
          "ISCB-5-RPT-C005-CR-v1a": 33
        }
      },
      "cc_claims": {},
      "cc_protection_profile_id": {},
      "cc_sar": {},
      "cc_security_level": {
        "EAL": {
          "EAL4": 9
        }
      },
      "cc_sfr": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 1
          }
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "ISO": {
          "ISO/IEC 18045": 2,
          "ISO/IEC15408": 2
        },
        "RFC": {
          "RFC 1321": 1
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "ISCB Department",
      "/Category": "PUBLIC",
      "/Caveat": "FINAL",
      "/Classification": "PUBLIC",
      "/Company": "CyberSecurity Malaysia",
      "/CreationDate": "D:20110414172127+08\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 8.1 for Word",
      "/Developer": "MagnaQuest Solutions Sdn Bhd",
      "/Document Type": "REPORT",
      "/Identifier": "ISCB-5-RPT-C005-CR-v1a",
      "/Index": "MyCB_TMP_011",
      "/Keywords": "MyCB_TMP_011",
      "/ModDate": "D:20110414172137+08\u002700\u0027",
      "/Phase": "Released",
      "/Producer": "Acrobat Distiller 8.1.0 (Windows)",
      "/Project Code": "C005",
      "/Released": "11 April 2011",
      "/ST Title": "Security Target for the MQAssureTM/AppShield v1.2 Integrated with MQAssureTM/IAM v1.0",
      "/ST Version": "v1.21",
      "/SourceModified": "D:20110414092101",
      "/Sponsor": "MagnaQuest Solutions Sdn Bhd",
      "/Subject": "MQAssure\u2122/AppShield v1.2_CR6 integrated with MQAssure\u2122/IAM v1.0_CR6",
      "/TOE Name \u0026 Version": "MQAssure\u2122/AppShield v1.2_CR6 integrated with MQAssure\u2122/IAM v1.0_CR6",
      "/Title": "C005 Certification Report",
      "/Version": "v1a",
      "pdf_file_size_bytes": 596718,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.cybersecurity.my/mycc",
          "mailto:[email protected]"
        ]
      },
      "pdf_is_encrypted": true,
      "pdf_number_of_pages": 33
    },
    "st_filename": "MQAssure_AppShield_1.2_Security_Target_EAL4_1.21.pdf",
    "st_frontpage": null,
    "st_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A": 1,
          "A.FIREWALL": 2,
          "A.IAM_DATA": 2,
          "A.IAM_PROTECT": 2,
          "A.MAIL_SERVER": 2,
          "A.NO_EVIL": 2,
          "A.PHYS_SEC": 2,
          "A.TIME_STAMP": 2,
          "A.TRANS_PROTECT": 2
        },
        "O": {
          "O.ACC_CONTROL": 6,
          "O.ALERT": 4,
          "O.AUDIT": 6,
          "O.AUTH_MECH": 5,
          "O.FILTER": 7,
          "O.LOCKOUT": 5,
          "O.RESTRICT_AUTH": 5,
          "O.SECURE_CONFIG": 5
        },
        "OE": {
          "OE.FIREWALL": 2,
          "OE.IAM_DATA": 2,
          "OE.IAM_PROTECT": 2,
          "OE.MAIL_SERVER": 2,
          "OE.NO_EVIL": 2,
          "OE.PHYS_SEC": 2,
          "OE.TIME_STAMP": 2,
          "OE.TRANS_PROTECT": 2
        },
        "T": {
          "T.DATA_ACCESS": 2,
          "T.RECONFIG": 2,
          "T.USER_PARAM": 2,
          "T.WEAK_PASS": 2,
          "T.WEB_ATTACK": 2
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_ARC.1": 1,
          "ADV_FSP.4": 1,
          "ADV_IMP.1": 1,
          "ADV_TDS.3": 1
        },
        "AGD": {
          "AGD_OPE.1": 1,
          "AGD_PRE.1": 1
        },
        "ALC": {
          "ALC_CMC.4": 1,
          "ALC_CMS.4": 1,
          "ALC_DEL.1": 1,
          "ALC_DVS.1": 1,
          "ALC_LCD.1": 1,
          "ALC_TAT.1": 1
        },
        "ASE": {
          "ASE_CCL.1": 1,
          "ASE_ECD.1": 1,
          "ASE_INT.1": 1,
          "ASE_OBJ.2": 1,
          "ASE_REQ.2": 1,
          "ASE_SPD.1": 1,
          "ASE_TSS.1": 1
        },
        "ATE": {
          "ATE_COV.2": 1,
          "ATE_DPT.2": 1,
          "ATE_FUN.1": 1,
          "ATE_IND.2": 1
        },
        "AVA": {
          "AVA_VAN.3": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL4": 4
        }
      },
      "cc_sfr": {
        "FAU": {
          "FAU_ARP.1": 7,
          "FAU_ARP.1.1": 1,
          "FAU_GEN.1": 9,
          "FAU_GEN.1.1": 1,
          "FAU_GEN.1.2": 1,
          "FAU_GEN.2": 4,
          "FAU_GEN.2.1": 1,
          "FAU_SAA.1": 6,
          "FAU_SAA.1.1": 1,
          "FAU_SAA.1.2": 1,
          "FAU_SAR.1": 6,
          "FAU_SAR.1.1": 1,
          "FAU_SAR.1.2": 1,
          "FAU_SAR.2": 4,
          "FAU_SAR.2.1": 1
        },
        "FDP": {
          "FDP_ACC.1": 7,
          "FDP_ACC.1.1": 1,
          "FDP_ACF.1": 5,
          "FDP_ACF.1.1": 1,
          "FDP_ACF.1.2": 1,
          "FDP_ACF.1.3": 1,
          "FDP_ACF.1.4": 1
        },
        "FIA": {
          "FIA_AFL.1": 5,
          "FIA_AFL.1.1": 1,
          "FIA_AFL.1.2": 2,
          "FIA_ATD.1": 7,
          "FIA_ATD.1.1": 1,
          "FIA_SOS.1": 4,
          "FIA_SOS.1.1": 1,
          "FIA_UAU.1": 2,
          "FIA_UAU.2": 4,
          "FIA_UAU.2.1": 1,
          "FIA_UAU.5": 6,
          "FIA_UAU.5.1": 1,
          "FIA_UAU.5.2": 1,
          "FIA_UAU.6": 5,
          "FIA_UAU.6.1": 1,
          "FIA_UID.1": 5,
          "FIA_UID.2": 8,
          "FIA_UID.2.1": 1
        },
        "FMT": {
          "FMT_MSA.1": 6,
          "FMT_MSA.1.1": 1,
          "FMT_MSA.3": 5,
          "FMT_MSA.3.1": 1,
          "FMT_MSA.3.2": 1,
          "FMT_SAE.1": 5,
          "FMT_SAE.1.1": 1,
          "FMT_SAE.1.2": 1,
          "FMT_SMF.1": 6,
          "FMT_SMF.1.1": 1,
          "FMT_SMR.1": 8,
          "FMT_SMR.1.1": 1,
          "FMT_SMR.1.2": 1
        },
        "FPT": {
          "FPT_STM.1": 3
        },
        "FTA": {
          "FTA_MCS.1": 3,
          "FTA_MCS.1.1": 1,
          "FTA_MCS.1.2": 1,
          "FTA_SSL.3": 6,
          "FTA_SSL.3.1": 1,
          "FTA_TAH.1": 5,
          "FTA_TAH.1.1": 1,
          "FTA_TAH.1.2": 1,
          "FTA_TAH.1.3": 1,
          "FTA_TSE.1": 7,
          "FTA_TSE.1.1": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {},
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "st_metadata": {
      "/Author": "zarina",
      "/Company": "Microsoft",
      "/CreationDate": "D:20110414172302+08\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 8.1 for Word",
      "/ModDate": "D:20110414172319+08\u002700\u0027",
      "/Producer": "Acrobat Distiller 8.1.0 (Windows)",
      "/SourceModified": "D:20110330044814",
      "/Title": "",
      "pdf_file_size_bytes": 622066,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": true,
      "pdf_number_of_pages": 43
    }
  },
  "protection_profiles": {
    "_type": "Set",
    "elements": []
  },
  "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ISCB-5-RPT-C005-CR-v1a.pdf",
  "scheme": "MY",
  "security_level": {
    "_type": "Set",
    "elements": [
      "EAL4"
    ]
  },
  "st_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/MQAssure_AppShield_1.2_Security_Target_EAL4_1.21.pdf",
  "state": {
    "_type": "sec_certs.sample.cc.CCCertificate.InternalState",
    "cert": {
      "_type": "sec_certs.sample.cc.CCCertificate.DocumentState",
      "convert_garbage": false,
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "pdf_hash": null,
      "txt_hash": null
    },
    "report": {
      "_type": "sec_certs.sample.cc.CCCertificate.DocumentState",
      "convert_garbage": false,
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "pdf_hash": "1bdf1983172857f44cc10b0c72dc883567466ad3d3cd7fdf197077e25f1b3370",
      "txt_hash": "e9b373ce3053bc490b7f42396bf94120a4119e009315c6099b81f6389b21bbec"
    },
    "st": {
      "_type": "sec_certs.sample.cc.CCCertificate.DocumentState",
      "convert_garbage": false,
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "pdf_hash": "6b2a7d6af845701a54373e4a86f7c2b52a6979b94169354508c1b464abd4d4da",
      "txt_hash": "1fedfb70601a657a5567826b64ec41ef0b86202d1d9f5d5efda89c2ac4cfbbe9"
    }
  },
  "status": "archived"
}