search

biometricITC / cPP-biometrics

Contains the development of a Collaborative Protection Profile for biometrics
MIT License
10 stars 2 forks source link

Use Protection Profile instead of PP for the first time in the document #203

Closed woodbe closed 4 years ago

woodbe commented 4 years ago

https://github.com/biometricITC/cPP-biometrics/blame/c52f87fc6c717c04e0d6448d17995b458d5b54d5/3_ProtectionProfile/BiocPP.adoc#L16

Instead of saying "collaborative PP-Module", write it out as "collaborative Protection Profile-Module (PP-Module)".

Issue 1 from Cybersecurity Malaysia

woodbe commented 4 years ago

I'm not sure about this. The PP-Modules I see just state PP-Module up front, so I don't know if this is actually a correct term (Protection Profile-Module).

The-Fiona commented 4 years ago

In the proposed ISO standard the definition is thus:

Protection Profile module PP-Module implementation-independent statement of security needs for a TOE type complementary to one or more Base Protection Profiles

So, I would suggest if we do spell it out on first use that we use the term "Protection Profile module" and thereafter "PP-Module"

The-Fiona commented 4 years ago

Plus.... "collaborative Protection Profile" is a construct of the CCDB/CCRA scheme and therefore does not appear in the ISO standard. I guess the authoritative source for that term is the CCRA committees..

woodbe commented 4 years ago

I'm still good with us leaving "collaborative" as a descriptor for the PP-Module. I'll make a pull request to review.