crocs-muni / sec-certs

Tool for analysis of security certificates and their security targets (Common Criteria, NIST FIPS140-2...).
https://sec-certs.org
MIT License
9 stars 7 forks source link

Enhance data collected from CC schemes and match to portal #278

Closed J08nY closed 1 year ago

J08nY commented 1 year ago

For some schemes there is more information on the pages they provide that we do not collect currently:

Also, we should create a mapping between these collected entries and the main CC portal dataset entries. The matching could be done as follows:

  1. Try to match on canonicalized cert_ids (if the scheme page has them, maybe we can also extract them from the documents if the scheme has them, atleast the filenames).
  2. Maybe try to match on document hash if the scheme has them.
  3. Match on product name + category + vendor?
  4. Give up matching?

After we have this we should evaluate how good the matching is.