Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
AssetCentral 4.0.0 consist of AssetXplorer (v5.0) and AssetCentral Server (v4.0)
ISCB-5-RPT-C023-CR-v1a 		RSA Security Analytics v10.4
ISCB-5-RPT-C060-CR-v1
name AssetCentral 4.0.0 consist of AssetXplorer (v5.0) and AssetCentral Server (v4.0) RSA Security Analytics v10.4
category Other Devices and Systems Network and Network-Related Devices and Systems
not_valid_after 01.09.2019 04.08.2020
not_valid_before 16.01.2012 04.08.2015
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ISCB-5-RPT-C023-CR-v1a.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ISCB-5-RPT-C060-CR-v1.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Authentic%20Venture%20EAL1%20Security%20Target%20(AssetCentral)%20v1.1.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/RSA%20SA%20v10%204%20ST%20v0%203.pdf
manufacturer Authentic Venture Sdn Bhd RSA, The Security Division of EMC
manufacturer_web https://www.ventures.com.my https://www.rsa.com/
security_level EAL1 EAL2+, ALC_FLR.1
dgst b7e122dade348c21 4239e28cdf312d25
heuristics/cert_id ISCB-5-RPT-C023-CR-v1a ISCB-5-RPT-C060-CR-v1
heuristics/extracted_sars ASE_CCL.1, AGD_PRE.1, ALC_CMC.1, AGD_OPE.1, ATE_IND.1, ASE_INT.1, ASE_ECD.1, ASE_OBJ.1, ASE_REQ.1, ALC_CMS.1, ASE_TSS.1, AVA_VAN.1, ADV_FSP.1 ASE_CCL.1, ATE_FUN.1, ASE_OBJ.2, ALC_CMS.2, ASE_INT.1, ASE_REQ.2, AGD_PRE.1, ATE_IND.2, ASE_ECD.1, AVA_VAN.2, ALC_FLR.1, ADV_TDS.1, ASE_SPD.1, ALC_CMC.2, ADV_FSP.2, ATE_COV.1, AGD_OPE.1, ALC_DEL.1, ASE_TSS.1, ADV_ARC.1
heuristics/extracted_versions 4.0.0, 5.0, 4.0 10.4
heuristics/scheme_data
  • cert_no: 2012-001-C023
  • certification_date: 16.01.2012
  • developer: Authentic Venture Sdn Bhd
  • enhanced:
    • assurance_level: EAL1
    • category: Other Devices and Systems
    • cert_id: C023
    • certification_date: 16.01.2012
    • developer: Khairun Nisa Aziz Block U, UPM-MTDC,Incubation Center One,University Putra Malaysia,43400 Serdang,Selangor MALAYSIA URL: http://www.ventures.com.myEmail: info@ventures.com.myPhone:+ 603 8941 2739Fax:+ 603 8941 8651
    • expiration_date: 16.01.2017
    • mutual_recognition: CCRA
    • product: AssetCentral 4.0.0 consist of AssetXplorer (v5.0) and AssetCentral Server (v4.0)
    • report_link: https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C023/ISCB-5-RPT-C023-CR-v1a.pdf
    • scope: AssetCentral 4.0.0 is an automated asset management system. It automates the protection of managed systems against unauthorized software or hardware installations and removal, and having unlicensed software-related vulnerabilities. It allows users to monitor compliance throughout an organisation for their IT asset. AssetCentral comprises a server component and agents, known as AssetXplorer agents, which are deployed on computers throughout the enterprise. AssetXplorer agents send information about each computer to AssetCentral Server. AssetCentral Server consolidates all the information and allows administrators and custom-role users to view them through a web interface. AssetXplorer is part of the TOE. The security features within the scope of the evaluation includes: Auditing – provides auditing capabilities. Identification and Authentication – provides identification and authentication of human users of the TOE. It also provides identification of AssetXplorer that are installed in managed devices. Security Management - provides security management through the use of the Web Administration Interface. Through the enforcement of the AssetCentral Access Control Policy, the ability to manage various security attributes is controlled. User Data Protection - provides its own access control between subjects and objects covered by the AssetCentral Access Control Policy. Secure Communications - able to protect the user data from disclosure and modification when the scanned data is sent from AssetXplorer to AssetCentral Server.
    • status: Archive
    • target_link: https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C023/Authentic%20Venture%20EAL1%20Security%20Target%20(AssetCentral)%20v1.1.pdf
    • type: Automated asset management system
  • expiration_date: 16.01.2017
  • level: EAL1
  • product: AssetCentral 4.0.0 consist of AssetXplorer (v5.0) and AssetCentral Server (v4.0)
  • recognition: CCRA
  • url: https://iscb.cybersecurity.my/index.php/certification/product-certification/mycc/archived-certified-products-and-systems/submission-view/154
  • cert_no: 2015-005-C060
  • certification_date: 04.08.2015
  • developer: RSA, The Security Division of EMC2
  • enhanced:
    • assurance_level: EAL2+ ALC_FLR.1
    • category: Network and Network-Related Devices and Systems
    • cert_id: C060
    • certification_date: 04.08.2015
    • developer: Jon L. GoodwinManager, Federal ProgramsRSA Security LLC10700 Parkridge Blvd.Suite 600Reston, VA 20191 URL:www.rsa.comEmail: [email protected]: 469-855-5658
    • expiration_date: 04.08.2020
    • mutual_recognition: CCRA
    • product: RSA Security Analytics v10.4
    • report_link: https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C060/ISCB-5-RPT-C060-CR-v1.pdf
    • scope: The TOE provides real-time visibility into the monitored network and long-term network data storage to provide detection, investigation, analysis, forensics, and compliance reporting. The TOE primary features include: Generates audit records of security relevant events that include at least date and time of the event, subject identity and outcome for security events; Provides protection of the communications surrounding the remote administrative sessions from disclosure and from modification, Allows the users to acknowledge end-user license agreements and view warning banners prior to providing identification and authentication data, Identify potential misuse or intrusions and send an alarm to incident management SA views; Allows only authorized administrators to manage the security functions and TSF data of the TOE via a web-based User Interface; Provides protection mechanisms for its security functions through authentication and appropriate permissions before any administrative operations or access to TOE data and resources can be performed on the TSF; Terminates interactive sessions after administrative configured period of time; and Requires remote users to initiate a trusted communication path using TLS for initial user authentication.
    • status: Archive
    • target_link: https://iscb.cybersecurity.my/resources/document/mycc/mycpr/C060/RSA%20SA%20v10%204%20ST%20v0%203.pdf
    • type: A collection of appliances that form a security infrastructure for an enterprise network
  • expiration_date: 04.08.2020
  • level: EAL2+ ALC_FLR.1
  • product: RSA Security Analytics v10.4
  • recognition: CCRA
  • url: https://iscb.cybersecurity.my/index.php/certification/product-certification/mycc/archived-certified-products-and-systems/submission-view/121
maintenance_updates
pdf_data/report_filename ISCB-5-RPT-C023-CR-v1a.pdf ISCB-5-RPT-C060-CR-v1.pdf
pdf_data/report_keywords/cc_cert_id
  • MY:
    • ISCB-5-RPT-C023-CR-v1a: 29
  • MY:
    • ISCB-5-RPT-C060-CR-v1: 32
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 1
    • EAL1: 16
  • EAL:
    • EAL2: 5
    • EAL2+: 4
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_DEL: 1
  • ALC:
    • ALC_FLR.1: 9
pdf_data/report_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 1
    • FAU_GEN.2: 1
    • FAU_SAR.1: 1
    • FAU_SAR.2: 1
  • FDP:
    • FDP_ACC.1: 1
    • FDP_ACF.1: 1
  • FIA:
    • FIA_ATD.1: 1
    • FIA_UAU.2: 1
    • FIA_UID.2: 1
  • FMT:
    • FMT_MOF.1: 1
    • FMT_MSA.1: 1
    • FMT_MSA.3: 1
    • FMT_SMF.1: 1
    • FMT_SMR.1: 1
  • FPT:
    • FPT_ITT.1: 1
  • FAU:
    • FAU_GEN.1.2: 1
    • FAU_GEN.2.1: 1
    • FAU_SAR.1: 1
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
  • FCS:
    • FCS_SSH_EXT.1: 1
  • FIA:
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_ATD.1.1: 2
    • FIA_UAU.1: 1
    • FIA_UAU.1.1: 1
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
    • FIA_UID.1.1: 1
    • FIA_UID.1.2: 1
  • FMT:
    • FMT_MOF.1: 2
    • FMT_MTD.1: 1
    • FMT_SMF.1: 1
    • FMT_SMR.1: 1
  • FPT:
    • FPT_ITT.1: 1
  • FTA:
    • FTA_SSL.3: 1
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 1
    • FTA_TAB.1: 1
  • FTP:
    • FTP_TRP.1: 1
pdf_data/report_keywords/vendor
  • Microsoft:
    • Microsoft: 3
pdf_data/report_keywords/crypto_protocol
  • SSH:
    • SSH: 5
  • TLS:
    • TLS:
      • TLS: 8
      • TLS 1.2: 1
pdf_data/report_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 1
pdf_data/report_keywords/standard_id
  • ISO:
    • ISO/IEC 18045: 2
    • ISO/IEC15408: 2
  • FIPS:
    • FIPS 140-2: 2
  • ISO:
    • ISO/IEC 18045: 2
    • ISO/IEC15408: 2
pdf_data/report_metadata
  • /Author: ISCB Department
  • /CreationDate: D:20150804175916+08'00'
  • /Creator: Microsoft® Word 2013
  • /Keywords: RSA Security Analytics v10.4
  • /ModDate: D:20150810104922+08'00'
  • /Producer: Microsoft® Word 2013
  • /Subject: RSA Security Analytics v10.4
  • /Title: C060 Certification Report
  • pdf_file_size_bytes: 676943
  • pdf_hyperlinks: mailto:[email protected], http://www.commoncriteriaportal.org/, http://www.cybersecurity.my/mycc
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 33
pdf_data/st_filename Authentic Venture EAL1 Security Target (AssetCentral) v1.1.pdf RSA SA v10 4 ST v0 3.pdf
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL1: 10
  • EAL:
    • EAL 2: 5
    • EAL 2 augmented: 5
    • EAL2: 4
    • EAL2 augmented: 1
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 2
  • AGD:
    • AGD_OPE.1: 2
    • AGD_PRE.1: 2
  • ALC:
    • ALC_CMC.1: 2
    • ALC_CMS.1: 2
  • ASE:
    • ASE_CCL: 2
    • ASE_CCL.1: 2
    • ASE_ECD.1: 2
    • ASE_INT: 2
    • ASE_INT.1: 2
    • ASE_OBJ: 2
    • ASE_OBJ.1: 2
    • ASE_REQ: 2
    • ASE_REQ.1: 2
    • ASE_TSS: 2
    • ASE_TSS.1: 2
  • ATE:
    • ATE_IND.1: 2
  • AVA:
    • AVA_VAN.1: 2
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 12
    • ADV_FSP: 1
    • ADV_FSP.1: 2
    • ADV_FSP.2: 17
    • ADV_TDS: 1
    • ADV_TDS.1: 13
  • AGD:
    • AGD_OPE: 1
    • AGD_OPE.1: 15
    • AGD_PRE: 1
    • AGD_PRE.1: 11
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.1: 1
    • ALC_CMC.2: 8
    • ALC_CMS.1: 1
    • ALC_CMS.2: 7
    • ALC_DEL: 1
    • ALC_DEL.1: 5
    • ALC_FLR: 1
    • ALC_FLR.1: 17
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV: 1
    • ATE_COV.1: 8
    • ATE_FUN: 1
    • ATE_FUN.1: 12
    • ATE_IND: 1
    • ATE_IND.2: 8
  • AVA:
    • AVA_VAN.2: 9
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 8
    • FAU_GEN.1.1: 3
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 4
    • FAU_GEN.2.1: 1
    • FAU_SAR.1: 7
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_SAR.2: 3
    • FAU_SAR.2.1: 1
  • FDP:
    • FDP_ACC: 1
    • FDP_ACC.1: 10
    • FDP_ACF.1: 5
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_IFC.1: 2
    • FDP_IFF: 2
  • FIA:
    • FIA_ATD.1: 5
    • FIA_ATD.1.1: 1
    • FIA_UAU: 1
    • FIA_UAU.1: 1
    • FIA_UAU.2: 3
    • FIA_UAU.2.1: 1
    • FIA_UID: 1
    • FIA_UID.1: 6
    • FIA_UID.2: 5
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MOF.1: 5
    • FMT_MOF.1.1: 1
    • FMT_MSA.1: 7
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 7
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_SMF.1: 10
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 10
    • FMT_SMR.1.1: 1
  • FPT:
    • FPT_ITT.1: 3
    • FPT_ITT.1.1: 1
    • FPT_STM.1: 2
  • FTP:
    • FTP_ITT.1: 2
  • FAU:
    • FAU_GEN: 8
    • FAU_GEN.1: 8
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 4
    • FAU_GEN.2.1: 1
    • FAU_SAR: 6
    • FAU_SAR.1: 5
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_SAR.2: 3
    • FAU_SAR.2.1: 1
    • FAU_STG: 3
    • FAU_STG.1: 5
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
  • FCS:
    • FCS_CKM: 1
    • FCS_CKM.1: 1
    • FCS_COP.1: 2
    • FCS_COP.1.1: 1
    • FCS_SSH: 2
    • FCS_SSH_EXT: 2
    • FCS_SSH_EXT.1: 8
    • FCS_SSH_EXT.1.1: 2
    • FCS_SSH_EXT.1.2: 2
    • FCS_SSH_EXT.1.3: 2
    • FCS_SSH_EXT.1.4: 2
    • FCS_SSH_EXT.1.5: 2
    • FCS_SSH_EXT.1.6: 2
    • FCS_TLC: 1
    • FCS_TLS: 1
    • FCS_TLS_EXT: 3
    • FCS_TLS_EXT.1: 9
    • FCS_TLS_EXT.1.1: 2
  • FIA:
    • FIA_AFL: 3
    • FIA_AFL.1: 5
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_ATD: 3
    • FIA_ATD.1: 3
    • FIA_ATD.1.1: 1
    • FIA_UAU: 5
    • FIA_UAU.1: 8
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UAU.5: 4
    • FIA_UAU.5.1: 2
    • FIA_UAU.5.2: 1
    • FIA_UID: 3
    • FIA_UID.1: 8
    • FIA_UID.1.1: 1
    • FIA_UID.1.2: 1
    • FIA_UID.2: 1
  • FMT:
    • FMT_MOF: 3
    • FMT_MOF.1: 5
    • FMT_MOF.1.1: 1
    • FMT_MTD: 3
    • FMT_MTD.1: 5
    • FMT_MTD.1.1: 1
    • FMT_SMF: 3
    • FMT_SMF.1: 10
    • FMT_SMF.1.1: 1
    • FMT_SMR: 3
    • FMT_SMR.1: 6
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_ITT: 3
    • FPT_ITT.1: 4
    • FPT_ITT.1.1: 1
    • FPT_STM.1: 2
  • FTA:
    • FTA_SSL: 6
    • FTA_SSL.3: 4
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 6
    • FTA_SSL.4.1: 1
    • FTA_TAB: 3
    • FTA_TAB.1: 4
    • FTA_TAB.1.1: 1
  • FTP:
    • FTP_TRP: 5
    • FTP_TRP.1: 5
    • FTP_TRP.1.1: 1
    • FTP_TRP.1.2: 1
    • FTP_TRP.1.3: 1
pdf_data/st_keywords/cc_claims
  • OE:
    • OE.ADMIN: 1
    • OE.COMMUNICATION: 2
    • OE.INSTALL: 1
    • OE.LOCAL: 1
    • OE.NETWORK: 1
    • OE.PATCH: 1
    • OE.PHYSICAL: 1
    • OE.TIMESTAMP: 1
  • A:
    • A.AUDIT_PROTECTION: 3
    • A.DATA_SOURCES: 2
    • A.DEPLOY: 2
    • A.MANAGE: 2
    • A.PHYSICAL: 2
    • A.TIME: 3
    • A.TRUSTED_ADMIN: 2
    • A.USER: 3
  • O:
    • O.ANALYZE: 5
    • O.AUDIT_GENERATION: 4
    • O.AUDIT_PROTECTION: 2
    • O.MANAGE: 2
    • O.PROTECTED_: 2
    • O.PROTECTED_COMMS: 3
    • O.TOE_ACCESS: 5
  • OE:
    • OE.AUDIT_PROTECTION: 2
    • OE.DATA_SOURCES: 1
    • OE.DEPLOY: 2
    • OE.MANAGE: 2
    • OE.PHYSICAL: 3
    • OE.TIME: 3
    • OE.TRUSTED_ADMIN: 2
    • OE.USER: 2
  • T:
    • T.INADVERTENT_ACTIVITY: 2
    • T.MALICIOUS_ACTIVITY: 3
    • T.MISUSE: 3
    • T.TSF_COMPROMISE: 2
    • T.UNACCOUNTABLE_USERS: 3
    • T.UNAUTHORIZED_ACCESS: 2
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 1
  • Cisco:
    • Cisco: 1
  • Microsoft:
    • Microsoft: 1
pdf_data/st_keywords/eval_facility
  • Leidos:
    • Leidos: 1
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES-: 1
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA256: 3
pdf_data/st_keywords/crypto_protocol
  • TLS:
    • SSL:
      • SSL: 1
  • SSH:
    • SSH: 43
  • TLS:
    • TLS:
      • TLS: 45
      • TLS 1.0: 1
      • TLS 1.1: 1
      • TLS 1.2: 3
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 3
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA: 1
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 1
    • TLS_RSA_WITH_AES_128_CBC_SHA: 3
    • TLS_RSA_WITH_AES_128_CBC_SHA256: 1
    • TLS_RSA_WITH_AES_256_CBC_SHA: 2
    • TLS_RSA_WITH_AES_256_CBC_SHA256: 1
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 2
pdf_data/st_keywords/standard_id
  • FIPS:
    • FIPS 140-2: 4
  • RFC:
    • RFC 4252: 2
    • RFC 5246: 1
pdf_data/st_metadata
  • /Author: Nunni Zainal Abidin (stratsec)
  • /CreationDate: D:20111125105310+08'00'
  • /Creator: Microsoft® Word 2010
  • /ModDate: D:20111125105310+08'00'
  • /Producer: Microsoft® Word 2010
  • /Subject: Security Target
  • /Title: AssetCentral
  • pdf_file_size_bytes: 564770
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 27
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different