Evaluation of the security of distributed IT systems through ITSEC/ITSEM: experiences and findings

This paper reports the experience matured within the SIPE Project (Synergic ITSEC/ITSEM Pre-Evaluation), which was part of the Infosec ’93 work program. The SIPE Consortium developed European guidelines on the development and composition of security targets for distributed computer systems. The project established the practical application to such systems of the Information Technology Security Evaluation Criteria and Methodology (ITSEC (Commission, 1991) and ITSEM (Commission, 1993)) and was supported by the European Commission, DG XIII.