Secure E-commerce Protection Profile

We present a Secure E-commerce Protection Profile (SEPP) that captures security requirements for securing sessions in the e-commerce operational environment. The SEPP is prepared in accordance with the Common Criteria (CC), Version 2.1, as specified by the ISO 15408 standard. The SEPP states the requirements that sessions must satisfy in order to respond to the needs of e-commerce. The Target of Evaluation (TOE) security environment, which is composed of threat agents, vulnerabilities, attacks and threats, is described in detail. It is followed by describing the administrative security policies that are necessary to safeguard the TOE or its operating environment. The risks to the TOE are identified. The security objectives for the TOE are stated.

• Type: Conference
• Year: 2006
• Where: CSREASAM
• Authors: Anil Kumar Venkataiahgari, Mourad Debbabi, J. William Atwood
• Keywords: CSREASAM 2006, CSREASAM 2007, E-commerce Operational Environment, Secure E-commerce Protection, Security