| Understanding the Windows EAL4 Evaluation | | Jonathan S. Shapiro, Ph.D.Johns Hopkins University Information Security Institute By now, you may have heard that Microsoft has received a Common Criteria certification for Windows 2000 (with service pack 3) at Evaluation Assurance Level (EAL) 4. Since a bunch of people know that I work on operating system security and on security assurance, I've received lots of notes asking "What does this mean?" On this page I will try to answer the question. For the impatient the answer is: Security experts have been saying for years that the the security of...
