PP-Module for Endpoint Detection and Response Version 1.0

Profile details

Status archived
Valid from 23.10.2020
Valid until 29.03.2026
Scheme 🇺🇸 US
Category Detection Devices and Systems
Security level

Certification report

certification report could not be downloaded, no link is available.

Protection profile

Extracted keywords

Asymmetric Algorithms
ECDSA
Protocols
TLS, DTLS
Randomness
DRBG, RBG

Claims
O.ACCOUNTABILITY, O.EDR_MANAGEMENT, O.PROTECTED_TRANSIT, O.PROTECTED_STORAGE, O.EDR, O.PROTECTED_COMMS, T.MISCONFIGURATION, T.CREDENTIAL_REUSE, T.LOCAL_ATTACK, T.NETWORK_EAVESDROP, A.CONNECTIVITY, A.PLATFORM, OE.RELIABLE_TRANSIT
Security Functional Requirements (SFR)
FAU_GEN, FAU_ALT_EXT.1, FAU_COL_EXT.1, FAU_ALT_EXT.1.2, FAU_COL_EXT.1.1, FAU_GEN.1, FAU_ALT_EXT, FAU_COL_EXT, FAU_ALT_EXT.1.1, FAU_ALT_EXT.1.3, FAU_GEN.1.2, FCS_TLSC_EXT.1, FCS_TLSC_EXT.2, FCS_TLSS_EXT.1, FCS_TLSS_EXT.2, FCS_COP.1, FIA_AUT_EXT.1, FIA_PWD_EXT.1, FIA_AUT_EXT.1.1, FIA_UID.1, FIA_AUT_EXT, FIA_PWD_EXT, FIA_PWD_EXT.1.1, FMT_SMF, FMT_SMR.1, FMT_SRF_EXT.1, FMT_TRM_EXT.1, FMT_SMF.1, FMT_SMR.1.1, FMT_SRF_EXT.1.1, FMT_SRF_EXT, FMT_TRM_EXT, FMT_TRM_EXT.1.1, FPT_ITT.1, FPT_STM.1, FTP_TRP.1, FTP_TRP.1.1, FTP_TRP.1.3

Certification process
out of scope, may be extended by addons, plugins, threat feeds, or other reputation services. These are out of scope of this PP- Module. [USE CASE 1] Detection of Potential Unauthorized Activity The detection of

Standards
FIPS PUB 186-4, ISO/IEC 15408, CCMB-2017-04-001, CCMB-2017-04-002, CCMB-2017-04-003
Title PP-Module for Endpoint Detection and Response (EDR)
Creation date D:20201027172600Z
Pages 25
Creator wkhtmltopdf 0.12.4
Producer Qt 4.8.7

References

No references are available for this protection profile.

Processing updates

  • The protection profile was first processed.

Raw data

{
  "_id": "23bc0997d9ac3b23",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "23bc0997d9ac3b23",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "",
    "pp_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 2
          }
        }
      },
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.CONNECTIVITY": 4,
          "A.PLATFORM": 2
        },
        "O": {
          "O.ACCOUNTABILITY": 5,
          "O.EDR": 1,
          "O.EDR_MANAGEMENT": 5,
          "O.PROTECTED_COMMS": 1,
          "O.PROTECTED_STORAGE": 2,
          "O.PROTECTED_TRANSIT": 5
        },
        "OE": {
          "OE.RELIABLE_TRANSIT": 4
        },
        "T": {
          "T.CREDENTIAL_REUSE": 5,
          "T.LOCAL_ATTACK": 1,
          "T.MISCONFIGURATION": 5,
          "T.NETWORK_EAVESDROP": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {},
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_ALT_EXT": 2,
          "FAU_ALT_EXT.1": 9,
          "FAU_ALT_EXT.1.1": 1,
          "FAU_ALT_EXT.1.2": 2,
          "FAU_ALT_EXT.1.3": 1,
          "FAU_COL_EXT": 2,
          "FAU_COL_EXT.1": 9,
          "FAU_COL_EXT.1.1": 2,
          "FAU_GEN": 5,
          "FAU_GEN.1": 3,
          "FAU_GEN.1.2": 1
        },
        "FCS": {
          "FCS_COP.1": 1,
          "FCS_TLSC_EXT.1": 3,
          "FCS_TLSC_EXT.2": 3,
          "FCS_TLSS_EXT.1": 3,
          "FCS_TLSS_EXT.2": 3
        },
        "FIA": {
          "FIA_AUT_EXT": 2,
          "FIA_AUT_EXT.1": 15,
          "FIA_AUT_EXT.1.1": 2,
          "FIA_PWD_EXT": 2,
          "FIA_PWD_EXT.1": 9,
          "FIA_PWD_EXT.1.1": 1,
          "FIA_UID.1": 3
        },
        "FMT": {
          "FMT_SMF": 10,
          "FMT_SMF.1": 1,
          "FMT_SMR.1": 6,
          "FMT_SMR.1.1": 1,
          "FMT_SRF_EXT": 2,
          "FMT_SRF_EXT.1": 9,
          "FMT_SRF_EXT.1.1": 2,
          "FMT_TRM_EXT": 2,
          "FMT_TRM_EXT.1": 9,
          "FMT_TRM_EXT.1.1": 1
        },
        "FPT": {
          "FPT_ITT.1": 6,
          "FPT_STM.1": 2
        },
        "FTP": {
          "FTP_TRP.1": 5,
          "FTP_TRP.1.1": 1,
          "FTP_TRP.1.3": 1
        }
      },
      "certification_process": {
        "OutOfScope": {
          "may be extended by addons, plugins, threat feeds, or other reputation services. These are out of scope of this PP- Module. [USE CASE 1] Detection of Potential Unauthorized Activity The detection of": 1,
          "out of scope": 1
        }
      },
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "DTLS": {
            "DTLS": 5
          },
          "TLS": {
            "TLS": 34
          }
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 1
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCMB-2017-04-001": 1,
          "CCMB-2017-04-002": 1,
          "CCMB-2017-04-003": 1
        },
        "FIPS": {
          "FIPS PUB 186-4": 2
        },
        "ISO": {
          "ISO/IEC 15408": 2
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/CreationDate": "D:20201027172600Z",
      "/Creator": "wkhtmltopdf 0.12.4",
      "/Producer": "Qt 4.8.7",
      "/Title": "PP-Module for Endpoint Detection and Response (EDR)",
      "pdf_file_size_bytes": 457715,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://commoncriteria.github.io/pp/esm-hostagent/esm-hostagent-release.html",
          "http://www.commoncriteriaportal.org/files/ccfiles/CCPART3V3.1R5.pdf",
          "http://www.commoncriteriaportal.org/files/ccfiles/CCPART2V3.1R5.pdf",
          "https://www.niap-ccevs.org/MMO/PP/-429-/",
          "http://www.commoncriteriaportal.org/files/ccfiles/CCPART1V3.1R5.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 25
    },
    "report_filename": null,
    "report_keywords": null,
    "report_metadata": null
  },
  "scheme_metadata": {
    "cc_version": "3.1",
    "pp_short_name": "MOD_EDR_V1.0",
    "pp_sponsor_id": "NIAP",
    "pp_transition": null,
    "predecessor": null,
    "source_scheme": "US",
    "successor": "MOD_EDR_V2.0"
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "0edba9bcb8178e8a1acb065ed1d2f64e57319eabb8e5632b0ceede93d90e531d",
      "txt_hash": "4bc810182187326a632dcd2078acc3e961e8bc57d3a1c58dd201915bdb92469a"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "Detection Devices and Systems",
    "is_collaborative": false,
    "maintenances": [],
    "name": "PP-Module for Endpoint Detection and Response Version 1.0",
    "not_valid_after": "2026-03-29",
    "not_valid_before": "2020-10-23",
    "pp_link": "https://www.niap-ccevs.org/api/file/get_public_file/?file_id=18138",
    "report_link": null,
    "scheme": "US",
    "security_level": {
      "_type": "Set",
      "elements": []
    },
    "status": "archived",
    "version": "1.0"
  }
}