IEEE P2600 Working Group CygnaCom Solutions Introduction Kris Rogers 25 April 2007

2 Topics  CygnaCom Introduction  Protection Profile Experience  Product Evaluation Experience  Useful Links  Contact Information

3 CygnaCom Solutions  Founded in 1994  Located in McLean, VA  Business Areas –PKI Consulting and software development –Cryptographic Module Testing Lab (FIPS 140) –Common Criteria Testing Lab (NIAP) –General security consulting  Acquired by Entrust in 2000

4 CygnaCom Security Evaluation Lab  CygnaCom was first US lab established under TTAP in 1997  CygnaCom was first batch of CCTLs accredited under NIAP/CCEVS scheme in 2000  Medium-sized lab  15 CygnaCom Employees in CCTL  Experienced IT Security professionals (range: 2 to 37 years of experience)  Most have graduate degrees (1 PhD, 9 MS, 5 BS)

5 CygnaCom PP Experience (1)  USMC Public Key Enabled Application Family of Protection Profiles –Author and evaluator –US example of family of Protection Profiles with packages  Trusted Computing Group Trusted Product Module (TPM) and Trusted Building Block (TBB) –Evaluator only –Worked with Trusted Computing Group, formerly TCPA

6 CygnaCom PP Experience (2)  PKI Directory Protection Profile –Author only  Peripheral Sharing Switch for Human Interface Devices Protection Profile –Author and evaluator –Completed in 2000  Authored several draft Protection Profiles under TTAP scheme

7 Product Evaluation Experience  Completed 35 product evaluations  Second highest number of entries on the NIAP Validated Products List  Wide variety of technologies as shown on the next page

8 Product Evaluation Experience (2)  Technology Types –Cryptographic Chips –Disk Encryptors –Document Servers –Firewalls –Guards –Intrusion Detection / Prevention –Network Management – Operating Systems – PKI – Security Management – Sensitive Data Protection – System Access Control – Web Server – Wireless LAN

9 Useful Links  NIAP / CCEVS Home Page –  NIAP Validated Protection Profiles –  NIAP Validated Products List –  Common Criteria Portal (International Site) –  CygnaCom Evaluated Products List (EPL) –

10 CygnaCom CCTL Contact Information Ms. Nithya Rachamadugu Director Security Evaluation Laboratory (SEL) CygnaCom Solutions 7925 Jones Branch Drive, Suite 5200 McLean, VA (Nithya) (CCTL Lab phone)

11 Kris Rogers Contact Information Ms. Kris Rogers Chief Evaluator Security Evaluation Laboratory (SEL) CygnaCom Solutions 749 Santa Rosita Solana Beach, CA (858)