Skip to content

Adding support for AQUA certificates metadata #452

@petrs

Description

@petrs

Is your feature request related to a problem? Please describe.
No, it is enhancement

Describe the solution you'd like
Analyze metadata for AQUA-approved certificates and add these metadata to existing devices in sec-cert database. A user can see easily, that given product was also approved by AQUA members. Ideally, one can also limit search based on being AQUA approved.

The name for approved product is typically very close to the name of CC or FIPS certificate. Sometimes, certificate ID is explicitly mentioned in description.

More accurate matching may be achieved by NLP analysis of AQUA product page description (is free form text without specific structure).

Additional context
More info:
https://www.ia.nato.int/NIAPC

Approved products:
https://www.consilium.europa.eu/en/general-secretariat/corporate-policies/classified-information/information-assurance/
https://www.consilium.europa.eu/media/x0ebv5jn/st09931en24.pdf

Example:
Sm@rtCafe Expert 7.0
https://www.ia.nato.int/niapc/Product/Sm@rtCafe-Expert-7.0_630
...
Certifications
FIPS 140-2 Level 3, NIST certification identifier: 2327 (2015)
BSI certification identifier: BSI-DSZ-CC-0868-2014
...
-> Sm@rtCafé® Expert 7.0 C1 https://sec-certs.org/cc/d8473663e3e82527/

Metadata

Metadata

Assignees

No one assigned

    Labels

    ccRelated to CC certificationfipsRelated to FIPS 140 certification

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions