Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Attivo BotSink Solution
SERTIT-084 		Check Point VPN-1/FireWall-1© NG on Nokia IPSO
CRP193
name Attivo BotSink Solution Check Point VPN-1/FireWall-1© NG on Nokia IPSO
category Network and Network-Related Devices and Systems Boundary Protection Devices and Systems
scheme NO UK
not_valid_after 13.02.2022 05.03.2013
not_valid_before 13.02.2017 01.09.2003
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/20170201%20S-084%20CRv1.0%20Attivo.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/CRP193.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ST%20Attivo%20Networks%20-%20Botsink%20Solution%20v.1.3%20-%20Final_Release.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/LFA_T193v1-8.pdf
manufacturer Attivo Networks, Inc. Nokia Corporation
manufacturer_web https://attivonetworks.com https://www.nokia.com/
security_level ALC_FLR.1, EAL2+ EAL4
dgst 1bc10dc246304b33 d065eb9ccbe2c14c
heuristics/cert_id SERTIT-084 CRP193
heuristics/extracted_sars ADV_ARC.1, ASE_TSS.1, AGD_OPE.1, ALC_CMC.2, ADV_FSP.2, ASE_REQ.2, AVA_VAN.2, AGD_PRE.1, ASE_CCL.1, ATE_IND.2, ASE_ECD.1, ADV_TDS.1, ALC_DEL.1, ASE_OBJ.2, ALC_FLR.1, ATE_COV.1, ALC_CMS.2, ASE_INT.1, ASE_SPD.1, ATE_FUN.1 ATE_IND.2, ALC_DVS.1, ADV_FSP.2, ATE_FUN.1, ADV_SPM.1, ATE_COV.2, AGD_USR.1, ADV_LLD.1, ADV_RCR.1, AGD_ADM.1, ALC_TAT.1, AVA_MSU.2, ADV_HLD.2, AVA_VLA.2, ALC_LCD.1, ATE_DPT.1, AVA_SOF.1, ADV_IMP.1
heuristics/extracted_versions - 1
heuristics/scheme_data
  • category: Network and Network-Related Devices and Systems
  • certification_date: 13.02.2017
  • developer: Attivo Networks, Inc.
  • enhanced:
    • category: Network and Network-Related Devices and Systems
    • cert_id: SERTIT-084
    • certification_date: 13.02.2017
    • description: The Attivo BOTsink Deception System Deception and Decoy for Inside-the-Network Threat Detection The Attivo BOTsink solution uses dynamic deception techniques and a matrix of distributed decoy systems to turn an entire network into a trap, which is designed to deceive and detect attackers and their automated tools into revealing themselves. Whether the attack vector is zero day, stolen credential, ransomware, phishing or an insider threat, the BOTsink system provides an effective and efficient solution to detect these threats in real-time. Prevention-based detection does not reliably detect signature-less attacks, the use of stolen credentials, and the lateral movement of attacks that have bypassed firewall, anti-virus and other prevention solutions. Not reliant on known attack patterns or signatures, Attivo will instead use deception to deceive the attacker into engaging. Once the attacker engages, an alert is immediately created with the substantiated attack detail required to block the attacker and quarantine the infected device. The attack details can be viewed in the Attivo Threat Intelligence Dashboard, through a variety of reports, and can be automatically uploaded into 3rd party prevention solutions dramatically improving incident response. Elements of the BOTsink - Physical, virtual and cloud engagement servers provide the threat detection engine, a multi-dimensional correlation engine, and the analysis engine that allows the attack sequence to safely play out, allows viewing of lateral movement and can open communications with the Command and Control to better understand the attacker tools, methodologies, and intent. - Decoys based on a wide variety of operating systems and services, which can also be golden image customized to match a customers production environment. - Server and end-point deception lures combined with other deception techniques are used to deceive an attacker into engaging with the BOTsink system for detection. - Central Manager provides global deployment and management of BOTsink devices and the aggregation of threat intelligence for all types of BOTsink devices. Environments supported - User networks, data centers, AWS, VMWare, SCADA - Endpoint deceptions for Mac and PC
    • developer: Attivo Networks, Inc.
    • documents: frozendict({'cert': [frozendict({'href': 'https://sertit.no/getfile.php/135169-1607953178/SERTIT/Sertifikater/2017/84/20170213%20S-084%20C%20Attivo.pdf'})], 'target': [frozendict({'href': 'https://sertit.no/getfile.php/135172-1607953180/SERTIT/Sertifikater/2017/84/ST%20Attivo%20Networks%20-%20Botsink%20Solution%20v.1.3%20-%20Final_Release.pdf'})], 'report': [frozendict({'href': 'https://sertit.no/getfile.php/135175-1607953183/SERTIT/Sertifikater/2017/84/20170201%20S-084%20CRv1.0%20Attivo.pdf'})]})
    • evaluation_facility: Advanced Data Security
    • level: EAL 2, ALC_FLR.1
    • mutual_recognition: CCRA
    • product: BOTsink appliances: Model 3200, Model 5100; vBOTsink for Vmware Version 3.3, ACM appliance Version 200; Software: ACM Version 3.3, BOTsink and Endpoint Version 3.3
  • product: Attivo BotSink Solution
  • url: https://sertit.no/certified-products/product-archive/attivo-botsink-solution
pdf_data/report_filename 20170201 S-084 CRv1.0 Attivo.pdf CRP193.pdf
pdf_data/report_keywords/cc_cert_id
  • NO:
    • SERTIT-084: 16
  • UK:
    • CERTIFICATION REPORT No. P193: 1
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 2: 17
    • EAL 2 augmented: 16
    • EAL1: 1
    • EAL2: 3
    • EAL7: 1
  • EAL:
    • EAL 4: 1
    • EAL1: 1
    • EAL4: 25
    • EAL7: 1
  • ITSEC:
    • ITSEC E3: 1
    • ITSEC E3 Assurance: 1
    • ITSEC E3 Evaluation: 1
    • ITSEC E3 Secure: 1
    • ITSEC E3 and: 3
    • ITSEC E3 evaluation: 1
pdf_data/report_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR: 1
    • ALC_FLR.1: 18
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
pdf_data/report_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 1
    • FAU_GEN.2: 1
  • FCS:
    • FCS_CKM.1: 1
    • FCS_CKM.4: 1
    • FCS_COP.1: 1
  • FDP:
    • FDP_ACC.1: 1
    • FDP_ACF.1: 1
    • FDP_IFC.1: 1
    • FDP_IFF.1: 1
  • FIA:
    • FIA_ATD.1: 1
    • FIA_UAU.1: 1
    • FIA_UID.1: 1
  • FMT:
    • FMT_MSA.1: 1
    • FMT_MSA.3: 1
    • FMT_MTD.1: 1
    • FMT_SMF.1: 1
    • FMT_SMR.2: 1
  • FPT:
    • FPT_ITT.1: 1
    • FPT_PHP.1: 1
    • FPT_STM.1: 1
    • FPT_TST.1: 1
  • FRU:
    • FRU_RSA_EXT.1: 1
  • FTA:
    • FTA_SSL.3: 1
    • FTA_TAB.1: 1
  • FTP:
    • FTP_TRP.1: 1
pdf_data/report_keywords/vendor
  • Microsoft:
    • Microsoft: 2
pdf_data/report_keywords/eval_facility
  • ADS:
    • Advanced Data Security: 1
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 2
  • DES:
    • 3DES:
      • Triple-DES: 1
    • DES:
      • DES: 4
pdf_data/report_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 3
  • SHA:
    • SHA1:
      • SHA-1: 1
pdf_data/report_keywords/crypto_scheme
  • KEX:
    • Key Exchange: 1
pdf_data/report_keywords/crypto_protocol
  • IKE:
    • IKE: 4
  • VPN:
    • VPN: 28
pdf_data/report_keywords/standard_id
  • CC:
    • CCMB-2012-09-001: 1
    • CCMB-2012-09-002: 1
    • CCMB-2012-09-003: 1
    • CCMB-2012-09-004: 1
  • ICAO:
    • ICAO: 1
  • ISO:
    • ISO/IEC 15408: 2
  • CC:
    • CCIMB-99-031: 1
    • CCIMB-99-032: 1
    • CCIMB-99-033: 1
  • FIPS:
    • FIPS 140-1: 2
  • PKCS:
    • PKCS #1: 1
pdf_data/report_metadata
  • /AAPL:Keywords: ['ugradert']
  • /Author: Kjaertan
  • /CreationDate: D:20170213101642Z00'00'
  • /Creator: Microsoft® Word 2010
  • /Keywords: ugradert
  • /ModDate: D:20170213101642Z00'00'
  • /Producer: Mac OS X 10.12.3 Quartz PDFContext
  • /Title: tittel
  • pdf_file_size_bytes: 790748
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 16
  • /Author: racook
  • /CreationDate: D:20031001145710Z
  • /Creator: LFA_T193_P193_CertRep_10 - Microsoft Word
  • /ModDate: D:20131119171437Z
  • /Producer: Acrobat PDFWriter 5.0 for Windows NT
  • /Title: LFA_T193_P193_CertRep_10.DOC
  • pdf_file_size_bytes: 113666
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 30
pdf_data/st_filename ST Attivo Networks - Botsink Solution v.1.3 - Final_Release.pdf LFA_T193v1-8.pdf
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL2: 5
    • EAL2 augmented: 4
  • EAL:
    • EAL4: 56
  • ITSEC:
    • ITSEC E3 Certification: 1
    • ITSEC E3 System: 1
    • ITSEC E3 or: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 2
    • ADV_FSP.2: 2
    • ADV_TDS.1: 2
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 3
    • ALC_CMS.2: 2
    • ALC_DEL.1: 2
    • ALC_FLR.1: 7
  • ASE:
    • ASE_CCL: 2
    • ASE_CCL.1: 1
    • ASE_ECD: 2
    • ASE_ECD.1: 1
    • ASE_INT: 2
    • ASE_INT.1: 1
    • ASE_OBJ: 2
    • ASE_OBJ.2: 1
    • ASE_REQ: 2
    • ASE_REQ.2: 1
    • ASE_SPD: 2
    • ASE_SPD.1: 1
    • ASE_TSS: 2
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 2
    • ATE_IND.2: 2
  • AVA:
    • AVA_VAN.2: 1
  • ACM:
    • ACM_AUT.1: 1
    • ACM_CAP.4: 1
    • ACM_SCP.2: 1
  • ADO:
    • ADO_DEL.2: 1
    • ADO_IGS.1: 1
  • ADV:
    • ADV_FSP.2: 1
    • ADV_HLD.2: 1
    • ADV_IMP.1: 1
    • ADV_LLD.1: 1
    • ADV_RCR.1: 1
    • ADV_SPM.1: 1
  • AGD:
    • AGD_ADM.1: 1
    • AGD_USR.1: 1
  • ALC:
    • ALC_DVS.1: 1
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ATE:
    • ATE_COV.2: 1
    • ATE_DPT.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_MSU.2: 1
    • AVA_SOF.1: 1
    • AVA_VLA.2: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 11
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 6
    • FAU_GEN.2.1: 1
  • FCS:
    • FCS_CKM.1: 14
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 2
    • FCS_CKM.4: 10
    • FCS_CKM.4.1: 1
    • FCS_COP.1: 13
    • FCS_COP.1.1: 1
  • FDP:
    • FDP_ACC.1: 13
    • FDP_ACC.1.1: 1
    • FDP_ACF.1: 8
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_IFC.1: 13
    • FDP_IFC.1.1: 1
    • FDP_IFF.1: 8
    • FDP_IFF.1.1: 2
    • FDP_IFF.1.2: 1
    • FDP_IFF.1.3: 1
    • FDP_IFF.1.4: 1
    • FDP_IFF.1.5: 1
    • FDP_ITC.1: 4
    • FDP_ITC.2: 4
  • FIA:
    • FIA_ATD.1: 10
    • FIA_ATD.1.1: 1
    • FIA_UAU.1: 6
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UID.1: 15
    • FIA_UID.1.1: 1
    • FIA_UID.1.2: 1
  • FMT:
    • FMT_MSA.1: 12
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 11
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_MTD.1: 11
    • FMT_MTD.1.1: 1
    • FMT_SMF.1: 10
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 9
    • FMT_SMR.2: 12
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 1
  • FPT:
    • FPT_ITT.1: 9
    • FPT_ITT.1.1: 1
    • FPT_PHP.1: 6
    • FPT_PHP.1.1: 1
    • FPT_PHP.1.2: 1
    • FPT_STM.1: 12
    • FPT_STM.1.1: 1
    • FPT_TST.1: 6
    • FPT_TST.1.1: 1
    • FPT_TST.1.2: 1
    • FPT_TST.1.3: 1
  • FRU:
    • FRU_RSA_EXT.1: 11
    • FRU_RSA_EXT.1.1: 1
  • FTA:
    • FTA_SSL.3: 9
    • FTA_SSL.3.1: 1
    • FTA_TAB.1: 6
    • FTA_TAB.1.1: 1
  • FTP:
    • FTP_TRP.1: 9
    • FTP_TRP.1.1: 1
    • FTP_TRP.1.2: 1
    • FTP_TRP.1.3: 1
  • FAU:
    • FAU_GEN.1: 8
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_SAA.1: 6
    • FAU_SAA.1.1: 1
    • FAU_SAA.1.2: 1
    • FAU_SAR.1: 13
    • FAU_SAR.1.1: 2
    • FAU_SAR.1.2: 2
    • FAU_SAR.3: 5
    • FAU_SAR.3.1: 1
  • FCS:
    • FCS_CKM.1: 3
    • FCS_CKM.4: 3
    • FCS_COP.1: 9
    • FCS_COP.1.1: 2
  • FDP:
    • FDP_ACC.1: 8
    • FDP_ACC.1.1: 2
    • FDP_ACF.1: 8
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_IFC.1: 36
    • FDP_IFC.1.1: 4
    • FDP_IFF.1: 33
    • FDP_IFF.1.1: 4
    • FDP_IFF.1.2: 4
    • FDP_IFF.1.3: 6
    • FDP_IFF.1.4: 4
    • FDP_IFF.1.5: 4
    • FDP_IFF.1.6: 4
    • FDP_ITT.1: 13
    • FDP_ITT.1.1: 2
  • FIA:
    • FIA_UAU.5: 5
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 3
  • FMT:
    • FMT_MOF.1: 13
    • FMT_MOF.1.1: 2
    • FMT_MSA.1: 27
    • FMT_MSA.1.1: 4
    • FMT_MSA.2: 3
    • FMT_MSA.3: 25
    • FMT_MSA.3.1: 3
    • FMT_MSA.3.2: 3
    • FMT_SMR.1: 10
  • FPT:
    • FPT_STM.1: 6
    • FPT_STM.1.1: 1
  • FTP:
    • FTP_ITC.1: 11
    • FTP_ITC.1.1: 2
    • FTP_ITC.1.2: 2
    • FTP_ITC.1.3: 2
pdf_data/st_keywords/cc_claims
  • A:
    • A.NO_GENERAL_: 1
    • A.NO_GENERAL_PURPOSE: 3
    • A.PHYSICAL: 2
    • A.TRUSTED_ADMIN: 4
  • O:
    • O.ACCESS: 10
    • O.AUDIT: 7
    • O.AUTH_COMM: 6
    • O.CHANGE_: 4
    • O.CHANGE_MANAGEMENT: 1
    • O.CRYPTO-: 2
    • O.CRYPTOGRAPHY: 6
    • O.DISPLAY_: 2
    • O.DISPLAY_BANNER: 2
    • O.MANAGE: 11
    • O.MEDIATE: 5
    • O.NETWORK_: 3
    • O.NETWORK_FILTERING: 2
    • O.REPLAY_: 3
    • O.REPLAY_DETECTION: 2
    • O.RESOURCE: 5
    • O.SELF_: 2
    • O.SELF_PROTECTION: 6
    • O.SOUND_: 2
    • O.SOUND_DESIGN: 3
    • O.THOROUGH_: 4
    • O.THOROUGH_FUNCTIONAL_TESTING: 19
    • O.TIME_: 1
    • O.TIME_STAMPS: 4
    • O.VERIFIABLE_: 2
    • O.VERIFIABLE_UPD: 1
    • O.VERIFIABLE_UPDATES: 1
  • OE:
    • OE.CRYPT-: 1
    • OE.CRYPTANALYTIC: 2
    • OE.NO_: 1
    • OE.NO_GENERAL_PURPOSE: 2
    • OE.PHYSICAL: 4
    • OE.TRUSTED_: 1
    • OE.TRUSTED_ADMIN: 8
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 3
  • DES:
    • 3DES:
      • 3DES: 2
  • constructions:
    • MAC:
      • HMAC: 2
      • HMAC-SHA-256: 2
      • HMAC-SHA-384: 2
      • HMAC-SHA-512: 2
  • AES_competition:
    • AES:
      • AES: 1
  • DES:
    • 3DES:
      • 3-DES: 2
    • DES:
      • DES: 2
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECDH:
      • ECDH: 2
    • ECDSA:
      • ECDSA: 2
  • FF:
    • DH:
      • DH: 2
    • DSA:
      • DSA: 2
  • RSA:
    • RSA 2048: 3
  • FF:
    • DH:
      • Diffie-Hellman: 1
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 2
    • SHA2:
      • SHA-256: 2
      • SHA-384: 2
      • SHA-512: 2
  • MD:
    • MD5:
      • MD5: 1
pdf_data/st_keywords/crypto_scheme
  • KA:
    • Key Agreement: 3
  • MAC:
    • MAC: 2
pdf_data/st_keywords/crypto_protocol
  • SSH:
    • SSH: 15
  • TLS:
    • TLS:
      • TLS: 13
      • TLS 1.2: 2
  • IKE:
    • IKE: 2
  • TLS:
    • TLS:
      • TLS: 6
  • VPN:
    • VPN: 28
pdf_data/st_keywords/side_channel_analysis
  • FI:
    • physical tampering: 4
pdf_data/st_keywords/tee_name
  • other:
    • T6: 4
pdf_data/st_keywords/standard_id
  • FIPS:
    • FIPS 140-2: 7
    • FIPS PUB 140-2: 2
    • FIPS PUB 180-4: 2
    • FIPS PUB 186-4: 10
    • FIPS PUB 197: 2
    • FIPS PUB 198-1: 2
    • FIPS PUB 46-3: 2
  • NIST:
    • NIST SP 800-135: 4
    • NIST SP 800-90A: 6
    • SP 800-135: 2
  • FIPS:
    • FIPS PUB 180-1: 1
    • FIPS PUB 197: 1
    • FIPS PUB 46-2: 4
  • PKCS:
    • PKCS #3: 1
    • PKCS#1: 2
  • RFC:
    • RFC 1321: 2
    • RFC 1777: 1
    • RFC 1778: 1
    • RFC 2104: 2
    • RFC 2246: 1
    • RFC 2404: 1
    • RFC 2405: 1
    • RFC 2409: 1
  • X509:
    • X.509: 2
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • out of scope: 1
    • these dependencies are addressed by the correct implementation of the standard protocols, which is out of scope of the evaluation Common Criteria EAL4 Evaluation VPN-1/Firewall-1 Next Generation (Feature Pack 2: 1
pdf_data/st_metadata
  • /Author: Admin
  • /CreationDate: D:20170212153216-08'00'
  • /Creator: PScript5.dll Version 5.2.2
  • /ModDate: D:20170212153216-08'00'
  • /Producer: GPL Ghostscript 8.64
  • /Title: Microsoft Word - ST Attivo Networks - Botsink Solution v.1.3 - Final_Release.docx
  • pdf_file_size_bytes: 792275
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 43
  • /Author: ingber
  • /CreationDate: D:20030717214842Z
  • /Creator: ADOBEPS4.DRV Version 4.52
  • /ModDate: D:20031001150027+02'00'
  • /Producer: Acrobat Distiller 5.0.5 (Windows)
  • /Title: Microsoft Word - CC_Security_Target_NG_FP2 v1.8 for Nokia.doc
  • pdf_file_size_bytes: 274699
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 47
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different