MADCAD.com - The Cloud-Based Reference Library

- Free Trial - Webinar - Feedback

Cart (0)

No items in cart.

Total

There is a technical issue about last added item. You can click "Report to us" button to let us know and we resolve the issue and return back to you or you can continue without last item via click to continue button.

Home

Content

Tour

eLibrary

Store

Not a subscriber? Register for a trial account.

Username:
Password:

Incorrect username/password.

Already a subscriber?

MADCAD.com Free Trial

Sign up for a 3 day free trial to explore the MADCAD.com interface, PLUS access the
2009 International Building Code to see how it all works.

If you like to setup a quick demo, let us know at support@madcad.com
or +1 800.798.9296 and we will be happy to schedule a webinar for you.

Email *
Password *
Confirm *
First Name *
Last Name *
Title
Company Name *
Company Size *
Industry *
Address *
Address 2
City *
State *	Zip *
Country *
Phone *
How did you hear about MADCAD.com? *

Print page(s), starting from page (current page)

Continue to Print

Reset password

Enter your personal account email address to request
a password reset:

Reset password

Enter your account email address to request
a password reset:

Save As:

Are you sure you want to delete this group?

Security check

Please check the following box:

Please login to your personal account to use this feature.

Email:

Password:

Forgot your password?

Remember me for one month

Need a login? Register now.

Please login to your authorized staff account to use this feature.

Username:

Password:

Are you sure you want to empty the cart?

There were no books found for the applied search filters.

CLICK TO START OVER

Report To Us

Please fill the form below so that we can contact you.

Full name*
Email*
Phone

Contact us for a custom quote

Please fill the form below and a member of our staff will contact you shortly. The contents of your cart will automatically be sent to us so we can provide an accurate custom quote.

Company*
Full name*
Email*
Phone

⨯To continue with accurate pricing,
please select your company type below:

Large goverment organizations

Large multi-national corporation (more than $5B annual revenue)

None of the above

Your company has a special pricing case for IEEE.
For pricing, please contact us by filling out the form.

Full name*
Email*
Phone
Your selection

⨯We need your input!

Are you a code official in a jurisdiction with less than 300,000 population?

Yes No

This item is only available for the code officials of jurisdictions less then 300K population.

If you do not meet the criteria item will be removed and you will be able to continue shopping other items.

⨯ We need your input!

Your company has a special pricing case for ASME.
Please make sure the information you provide below is accurate.

Company Industry
Number Of Employees
Revenue

Pricing for the ASME publications in the store is for a 1-4 employee company in Construction Industry with revenue under $500,000.
If correct company info does not match what is publicly available info we will suspend the access and contact you for correction.
Please call 1-800-798-9296 if you have any questions.
If your company has more than 5,000 employee or more than 500 mil revenue please email us at info@madcad.com to receive a special quote, use "ASME Quote" on the subject line.

Cart Warning

Search book title

Search book content

Clear all filters Advanced Search Basic Search

Download File

eLibrary > BS EN 17927:2023 Security Evaluation Standard for IoT Platforms (SESIP). An effective methodology for applying cybersecurity assessment and re-use for connected products >

BS EN 17927:2023 Security Evaluation Standard for IoT Platforms (SESIP). An effective methodology for applying cybersecurity assessment and re-use for connected products, 2023

Expand All

TOC Search:

BS EN 17927:2023 Security Evaluation Standard for IoT Platforms (SESIP). An effective methodology for applying cybersecurity assessment and re-use for connected products, 2023

undefined
1 Scope
2 Normative references
3 Terms, definitions, symbols and abbreviated terms
4 Overview [Go to Page]
4.1 General
4.2 SESIP concepts
4.3 IoT use cases and threat model [Go to Page]
4.3.1 General
4.3.2 Architecture
4.3.3 Assets
4.3.4 Attackers and threats [Go to Page]
4.3.4.1 Base scenario
4.3.4.2 Extended scenario – physical access
4.3.4.3 Extended scenario – untrusted software
4.4 Connected product life cycle
4.5 Reusability in SESIP [Go to Page]
4.5.1 General
4.5.2 Building connected products from connected platforms [Go to Page]
4.5.2.1 Reuse of external evaluations
4.5.2.2 Reuse of platform parts evaluations
4.5.2.3 Reuse of platform evaluation in connected products
4.5.3 Additive composition within SESIP [Go to Page]
4.5.3.1 General
4.5.3.2 Composition evaluation rules
4.5.3.3 Assurance level of compositions
4.6 Accessibility and transparency
4.7 Security self-assessment in SESIP
4.8 Catalogue of security features and assurance packages
4.9 SESIP profiles and mappings [Go to Page]
4.9.1 General
4.9.2 SESIP profiles
4.9.3 SESIP mappings
5 Security Functional Requirements (SFRs) [Go to Page]
5.1 General
5.2 Identification and attestation of platforms and applications [Go to Page]
5.2.1 General
5.2.2 Verification of platform identity [Go to Page]
5.2.2.1 Requirement
5.2.3 Verification of platform instance identity [Go to Page]
5.2.3.1 Requirement
5.2.3.2 Value
5.2.3.3 Considerations
5.2.4 Attestation of platform genuineness [Go to Page]
5.2.4.1 Requirement
5.2.4.2 Value
5.2.4.3 Considerations
5.2.5 Secure initialization of platform [Go to Page]
5.2.5.1 Requirement
5.2.5.2 Value
5.2.5.3 Considerations
5.2.6 Attestation of platform state [Go to Page]
5.2.6.1 Requirement
5.2.6.2 Value
5.2.6.3 Consideration
5.2.7 Attestation of application genuineness [Go to Page]
5.2.7.1 Requirement
5.2.7.2 Value
5.2.7.3 Considerations
5.2.8 Attestation of application state [Go to Page]
5.2.8.1 Requirement
5.2.8.2 Value
5.2.8.3 Considerations
5.3 Product Life Cycle: Factory reset / Install / Update / Decommission [Go to Page]
5.3.1 General
5.3.2 Factory reset of platform [Go to Page]
5.3.2.1 Requirement
5.3.2.2 Value
5.3.2.3 Considerations
5.3.3 Secure install of application [Go to Page]
5.3.3.1 Requirement
5.3.3.2 Value
5.3.3.3 Consideration
5.3.4 Secure update of platform [Go to Page]
5.3.4.1 Requirement
5.3.4.2 Value
5.3.4.3 Considerations
5.3.5 Secure update of application [Go to Page]
5.3.5.1 Requirement
5.3.5.2 Value
5.3.5.3 Consideration
5.3.6 Secure uninstall of application [Go to Page]
5.3.6.1 Requirement
5.3.6.2 Value
5.3.6.3 Considerations
5.3.7 Decommission of platform [Go to Page]
5.3.7.1 Requirement
5.3.7.2 Value
5.3.7.3 Considerations
5.3.8 Field return of platform [Go to Page]
5.3.8.1 Requirement
5.3.8.2 Value
5.3.8.3 Considerations
5.4 Secure communication [Go to Page]
5.4.1 General
5.4.2 Secure communication support [Go to Page]
5.4.2.1 Requirement
5.4.2.2 Value
5.4.2.3 Considerations
5.4.3 Secure communication enforcement [Go to Page]
5.4.3.1 Requirement
5.4.3.2 Value
5.4.3.3 Considerations
5.5 Extra attacker resistance [Go to Page]
5.5.1 General
5.5.2 Limited physical attacker resistance [Go to Page]
5.5.2.1 Requirement
5.5.2.2 Value
5.5.2.3 Considerations
5.5.3 Physical attacker resistance [Go to Page]
5.5.3.1 Requirement
5.5.3.2 Value
5.5.3.3 Considerations
5.5.4 Software attacker resistance: Isolation of platform [Go to Page]
5.5.4.1 Requirement
5.5.4.2 Value
5.5.4.3 Considerations
5.5.5 Software attacker resistance: Isolation of platform parts [Go to Page]
5.5.5.1 Requirement
5.5.5.2 Value
5.5.5.3 Considerations
5.5.6 Software attacker resistance: Isolation of application parts [Go to Page]
5.5.6.1 Requirement
5.5.6.2 Value
5.5.6.3 Considerations
5.6 Cryptographic functionality [Go to Page]
5.6.1 General
5.6.2 Cryptographic operation [Go to Page]
5.6.2.1 Requirement
5.6.2.2 Value
5.6.2.3 Considerations
5.6.3 Cryptographic key generation [Go to Page]
5.6.3.1 Requirement
5.6.3.2 Value
5.6.3.3 Considerations
5.6.4 Cryptographic keyStore [Go to Page]
5.6.4.1 Requirement
5.6.4.2 Value
5.6.4.3 Considerations
5.6.5 Cryptographic random number generation [Go to Page]
5.6.5.1 Requirement
5.6.5.2 Value
5.6.5.3 Considerations
5.7 Compliance functionality [Go to Page]
5.7.1 General
5.7.2 Secure trusted storage [Go to Page]
5.7.2.1 Requirement
5.7.2.2 Value
5.7.2.3 Considerations
5.7.3 Secure confidential storage [Go to Page]
5.7.3.1 Requirement
5.7.3.2 Value
5.7.3.3 Considerations
5.7.4 Secure encrypted storage [Go to Page]
5.7.4.1 Requirement
5.7.4.2 Value
5.7.4.3 Considerations
5.7.5 Secure data serialization [Go to Page]
5.7.5.1 Requirement
5.7.5.2 Value
5.7.5.3 Considerations
5.7.6 Residual information purging [Go to Page]
5.7.6.1 Requirement
5.7.6.2 Value
5.7.6.3 Considerations
5.7.7 Audit log generation and storage [Go to Page]
5.7.7.1 Requirement
5.7.7.2 Value
5.7.7.3 Considerations
5.7.8 Reliable index [Go to Page]
5.7.8.1 Requirement
5.7.8.2 Value
5.7.8.3 Considerations
5.7.9 Secure debugging [Go to Page]
5.7.9.1 Requirement
5.7.9.2 Value
5.7.9.3 Considerations
5.7.10 Secure recovery [Go to Page]
5.7.10.1 Requirement
5.7.10.2 Value
5.7.10.3 Considerations
5.7.11 Secure backup and restore [Go to Page]
5.7.11.1 Requirement
5.7.11.2 Value
5.7.11.3 Considerations
5.7.12 Generic security platform feature [Go to Page]
5.7.12.1 Requirement
5.7.12.2 Value
5.7.12.3 Considerations
5.8 Access control [Go to Page]
5.8.1 General
5.8.2 Privileged access control [Go to Page]
5.8.2.1 Requirement
5.8.2.2 Value
5.8.2.3 Considerations
5.8.3 Authenticated access control [Go to Page]
5.8.3.1 Requirement
5.8.3.2 Value
5.8.3.3 Considerations
5.9 Availability [Go to Page]
5.9.1 General
5.9.2 Constrained demands on the environment capability [Go to Page]
5.9.2.1 Requirement
5.9.2.2 Value
5.9.2.3 Considerations
5.9.3 Availability support [Go to Page]
5.9.3.1 Requirement
5.9.3.2 Value
5.9.3.3 Considerations
5.10 Minimum security functional requirements set
6 Security Process Packages (SPPs) [Go to Page]
6.1 General
6.2 Secure development [Go to Page]
6.2.1 Requirement
6.2.2 Value
6.2.3 Considerations
6.3 Trust provisioning [Go to Page]
6.3.1 Requirement
6.3.2 Value
6.3.3 Considerations
7 Security Assurance Requirements (SARs) [Go to Page]
7.1 Security assurance requirements in SESIP
7.2 Security Target requirements [Go to Page]
7.2.1 General
7.2.2 ASE_INT.SESIP
7.2.3 ASE_OBJ.SESIP
7.2.4 ASE_REQ.SESIP
7.2.5 ASE_TSS.SESIP
7.3 Guidance documents requirements [Go to Page]
7.3.1 AGD_PRE.SESIP
7.3.2 AGD_OPE.SESIP
7.4 Development requirements [Go to Page]
7.4.1 ADV_ARC.SESIP
7.4.2 ADV_TDS.SESIP
7.4.3 ADV_FSP.SESIP
7.4.4 ADV_IMP.SESIP
7.5 Life-cycle support requirements [Go to Page]
7.5.1 ALC_CMC.SESIP
7.5.2 ALC_CMS.SESIP
7.5.3 ALC_DEL.SESIP
7.5.4 ALC_DVS.SESIP
7.5.5 ALC_FLR.SESIP
7.5.6 ALC_TAT.SESIP
7.6 Tests requirements [Go to Page]
7.6.1 ATE_COV.SESIP
7.6.2 ATE_DPT.SESIP
7.6.3 ATE_FUN.SESIP
7.6.4 ATE_IND.SESIP
7.7 Vulnerability assessment requirements [Go to Page]
7.7.1 General
7.7.2 AVA_VAN.SESIP1
7.7.3 AVA_VAN.SESIP2
7.7.4 AVA_VAN.SESIP3
7.7.5 AVA_VAN.SESIP4
7.7.6 AVA_VAN.SESIP5
8 SESIP Assurance Levels [Go to Page]
8.1 General
8.2 SESIP assurance level 1 (SESIP1) [Go to Page]
8.2.1 General
8.2.2 Objectives
8.2.3 Assurance components
8.3 SESIP assurance level 2 (SESIP2) [Go to Page]
8.3.1 General
8.3.2 Objectives
8.3.3 Assurance components
8.4 SESIP assurance level 3 (SESIP3) [Go to Page]
8.4.1 General
8.4.2 Objectives
8.4.3 Assurance components
8.5 SESIP assurance level 4 (SESIP4) [Go to Page]
8.5.1 General
8.5.2 Objectives
8.5.3 Assurance components
8.6 SESIP assurance level 5 (SESIP5) [Go to Page]
8.6.1 General
8.6.2 Objectives
8.6.3 Assurance components
Annex A (informative)SESIP evaluation case example
Annex B (informative)Guidance — Attack potential rating [Go to Page]
B.1 Principles [Go to Page]
B.1.1 General
B.1.2 Identification and exploitation Phases
B.1.3 Physical (local) attacks and remote attacks
B.2 Attack potential rating
Annex C (informative)Example use cases [Go to Page]
C.1 Generic examples [Go to Page]
C.1.1 IoT Cloud connectivity platform
C.1.2 Root-of-Trust cased on a microcontroller
C.2 Examples for specific use cases [Go to Page]
C.2.1 General
C.2.2 Secure update of a product (OTA)
C.2.3 A Blood glucose measurement product (DTSec)
Annex D (informative)Security Target template [Go to Page]
D.1 General
D.2 Security Target title page
D.3 Introduction [Go to Page]
D.3.1 General
D.3.2 ST reference
D.3.3 Platform reference
D.3.4 Included guidance documents
D.3.5 (Optional) Other certification
D.3.6 Platform functional overview and description
D.4 Security objectives for the operational environment [Go to Page]
D.4.1 Platform objectives for the operational environment
D.4.2 (Optional) Inherited objectives for the operational environment
D.5 Security requirements and implementation [Go to Page]
D.5.1 Security Assurance Requirements [Go to Page]
D.5.1.1 General
D.5.1.2 Flaw reporting procedure (ALC_FLR.SESIP)
D.5.1.3 Vulnerability survey (AVA_VAN.SESIP1)
D.5.2 Security Functional Requirements [Go to Page]
D.5.2.1 General
D.5.2.2 Verification of platform identity
D.5.2.3 Secure update of platform
D.5.2.4 < Security Functional Requirement (SFR) from SESIP >
D.5.3 (Optional) Security Process Package [Go to Page]
D.5.3.1 General
D.5.3.2 < Security Functional Requirement (SFR) from SESIP >
D.5.4 (Optional) Additional Security Functional/Process Requirements [Go to Page]
D.5.4.1 General
D.5.4.2 < Security Functional Requirement (SFR) >
D.6 Mapping and sufficiency rationales [Go to Page]
D.6.1 General
D.6.2 SESIP1 sufficiency
D.6.3 SESIP2 sufficiency
D.6.4 SESIP3 sufficiency
D.6.5 SESIP4 sufficiency
D.6.6 SESIP5 sufficiency
Annex E (Normative)Composition Guidelines [Go to Page]
E.1 Introduction
E.2 SESIP composition process
E.3 SESIP composition evaluation activities [Go to Page]
E.3.1 General
E.3.2 Guidelines for the developer of platform part to be integrated [Go to Page]
E.3.2.1 Providing of composition information
E.3.3 Guidelines for the evaluator of platform part to be Integrated [Go to Page]
E.3.3.1 Verification of composition information
E.3.3.2 Writing of evaluation report for composition
E.3.4 Guidelines for developer of the composition [Go to Page]
E.3.4.1 Analysis of composition information
E.3.4.2 Implementation of requirements for composition
E.3.4.3 Security claim in Security Target in composition context
E.3.4.4 Providing of composition information
E.3.5 Guidelines for evaluator of the composition [Go to Page]
E.3.5.1 Analysis of the composition information
E.3.5.2 Implementation analysis
E.3.5.3 Testing
E.3.5.4 Composition reporting
Annex F (Informative)SESIP in overall product securing process [Go to Page]
F.1 Introduction
F.2 Risk analysis domain
F.3 Attack methods domain
F.4 Security assessment
F.5 Flaw remediation [Go to Page]

About Us / Careers / support@madcad.com / 1.800.798.9296

MADCAD.com Free Trial

Report To Us

Contact us for a custom quote

⨯To continue with accurate pricing, please select your company type below:

⨯We need your input!

⨯ We need your input!

Cart Warning

BS EN 17927:2023 Security Evaluation Standard for IoT Platforms (SESIP). An effective methodology for applying cybersecurity assessment and re-use for connected products, 2023

⨯To continue with accurate pricing,
please select your company type below: