1. IEEE P2600 Working Group CygnaCom Solutions Introduction Kris Rogers 25 April 2007

2. 2 Topics  CygnaCom Introduction  Protection Profile Experience  Product Evaluation Experience  Useful Links  Contact Information

3. 3 CygnaCom Solutions  Founded in 1994  Located in McLean, VA  Business Areas –PKI Consulting and software development –Cryptographic Module Testing Lab (FIPS 140) –Common Criteria Testing Lab (NIAP) –General security consulting  Acquired by Entrust in 2000

4. 4 CygnaCom Security Evaluation Lab  CygnaCom was first US lab established under TTAP in 1997  CygnaCom was first batch of CCTLs accredited under NIAP/CCEVS scheme in 2000  Medium-sized lab  15 CygnaCom Employees in CCTL  Experienced IT Security professionals (range: 2 to 37 years of experience)  Most have graduate degrees (1 PhD, 9 MS, 5 BS)

5. 5 CygnaCom PP Experience (1)  USMC Public Key Enabled Application Family of Protection Profiles –Author and evaluator –US example of family of Protection Profiles with packages  Trusted Computing Group Trusted Product Module (TPM) and Trusted Building Block (TBB) –Evaluator only –Worked with Trusted Computing Group, formerly TCPA

6. 6 CygnaCom PP Experience (2)  PKI Directory Protection Profile –Author only  Peripheral Sharing Switch for Human Interface Devices Protection Profile –Author and evaluator –Completed in 2000  Authored several draft Protection Profiles under TTAP scheme

7. 7 Product Evaluation Experience  Completed 35 product evaluations  Second highest number of entries on the NIAP Validated Products List  Wide variety of technologies as shown on the next page

8. 8 Product Evaluation Experience (2)  Technology Types –Cryptographic Chips –Disk Encryptors –Document Servers –Firewalls –Guards –Intrusion Detection / Prevention –Network Management – Operating Systems – PKI – Security Management – Sensitive Data Protection – System Access Control – Web Server – Wireless LAN

9. 9 Useful Links  NIAP / CCEVS Home Page –http://www.niap-ccevs.org/cc-scheme/  NIAP Validated Protection Profiles –http://www.niap-ccevs.org/cc-scheme/pp/  NIAP Validated Products List –http://www.niap-ccevs.org/cc-scheme/vpl/  Common Criteria Portal (International Site) –http://www.commoncriteriaportal.org/  CygnaCom Evaluated Products List (EPL) –http://www.cygnacom.com/labs/sel_epl.htm

10. 10 CygnaCom CCTL Contact Information Ms. Nithya Rachamadugu Director Security Evaluation Laboratory (SEL) CygnaCom Solutions 7925 Jones Branch Drive, Suite 5200 McLean, VA 22102-3321 703-270-3551 (Nithya) 703-270-3563 (CCTL Lab phone) nithya@cygnacom.com

11. 11 Kris Rogers Contact Information Ms. Kris Rogers Chief Evaluator Security Evaluation Laboratory (SEL) CygnaCom Solutions 749 Santa Rosita Solana Beach, CA 92075 (858) 509-0180 krogers@cygnacom.com