A Network Security Evaluation Model based on Common Criteria

A new model of network security assessment is proposed in this paper. A single IT entity is evaluated through EAL; The composite IT entities are evaluated by CAP. The model analyzes the security value of network elements, and adopts the Geometric mean method to determine the security value of the entire network. The effectiveness of this method is validated through the evaluation of a practical system.