标准摘要
[中文适用范围]： 本国际标准是 ISO/IEC 15408 中定义的 IT 安全评估标准的配套文件。 它定义了评估者使用定义的标准和评估证据进行 ISO/IEC 15408 评估所需执行的最低限度的操作ISO/IEC 15408 中的规定。 本国际标准没有定义某些高保证 ISO/IEC 15408 组件的评估者操作，因为目前还没有普遍商定的指导。 [外文原描述]： ISO/IEC 18045:2008 is a companion document to ISO/IEC 15408, Information technology - Security techniques - Evaluation criteria for IT security. ISO/IEC 18045:2008 defines the minimum actions to be performed by an evaluator in order to conduct an ISO/IEC 15408 evaluation, using the criteria and evaluation evidence defined in ISO/IEC 15408. ISO/IEC 18045:2008 does not define evaluator actions for certain high assurance ISO/IEC 15408 components, where there is as yet no generally agreed guidance.
英文名称Information technology - Security techniques - Methodology for IT security evaluation