Xerox WorkCentre 5875 - R Ationale; Table 5: IEEE Std. 2600.2-2009 Common SFR Augmentations

Xerox Multi-Function Device Security Target
17
Copyright

2013 Xerox Corporation. All rights reserved.
 2600.2-SCN, SFR Package for Hardcopy Device Scan Functions,
Operational Environment B
 2600.2-CPY, SFR Package for Hardcopy Device Copy Functions,
Operational Environment B
 2600.2-fax, SFR Package for Hardcopy Device Fax Functions,
Operational Environment B
 2600.2-DSR, SFR Package for Hardcopy Device Document Storage
and Retrieval Functions, Operational Environment B
 2600.2-SMI, SFR Package for Hardcopy Device Shared-medium
Interface Functions, Operational Environment B
2.4. Rationale
The TOE type in this ST (MFD) is the same as the TOE type for IEEE 2600.2.
The Security Problem Definition and Objectives have been copied directly
from IEEE Std. 2600.2-2009 and have not been modified. One security
objective for the TOE (O.AUDIT_STORAGE.PROTECTED) has been added
in accordance to application note 7 from IEEE Std. 2600.2-2009. One security
objective for the IT environment (OE.USER.AUTHENTICATED) has been
added in accordance to application notes 37, 42 and 43 from IEEE Std.
2600.2-2009.
The statement of Security Requirements contains the Security Functional
Requirements (SFRs) from IEEE Std. 2600.2-2009 as well as additional
SFRs that are taken from CC Part 2. By including all of the SFRs from IEEE
Std. 2600.2-2009 and including additional SFRs (none of which conflict with
each other), the statement of Security Requirements is necessarily at least as
strict as the statement in IEEE Std. 2600.2-2009, if not more strict.
The rationales for objectives, threats, assumptions, organizational security
policies and security requirements have been copied from IEEE Std. 2600.2-
2009 and have been augmented to address the requirements that have been
added from CC Part 2.
The IEEE Std. 2600.2-2009 statement of Common SFRs has been
augmented with additional (including iterated) SFRs from CC Part 2 shown in
Table 5.
Table 5: IEEE Std. 2600.2-2009 common SFR augmentations
Family
Augmentation
Audit
FAU_STG.1, FAU_STG.4
Cryptographic Support
FCS_COP.1, FCS_CKM.1, FCS_CKM.2, FCS_CKM.4