|
In the ST document, the security problem of TOE should be defined first. The security problem that TOE probably will face is listed in the document, which is usually divided into three categories: Threatsˇ˘Assumptions and Organizational Security Policies. The threats for the Network Devices are grouped according to the functional areas of the device. Assumptions are made in identifying the threats and security requirements for Network Devices. Organizational security policies are rules, practices, and procedures imposed by an organization to address its security needs. |