-
Notifications
You must be signed in to change notification settings - Fork 12
Description
Is your feature request related to a problem? Please describe.
No, it is enhancement
Describe the solution you'd like
Analyze metadata for AQUA-approved certificates and add these metadata to existing devices in sec-cert database. A user can see easily, that given product was also approved by AQUA members. Ideally, one can also limit search based on being AQUA approved.
The name for approved product is typically very close to the name of CC or FIPS certificate. Sometimes, certificate ID is explicitly mentioned in description.
More accurate matching may be achieved by NLP analysis of AQUA product page description (is free form text without specific structure).
Additional context
More info:
https://www.ia.nato.int/NIAPC
Approved products:
https://www.consilium.europa.eu/en/general-secretariat/corporate-policies/classified-information/information-assurance/
https://www.consilium.europa.eu/media/x0ebv5jn/st09931en24.pdf
Example:
Sm@rtCafe Expert 7.0
https://www.ia.nato.int/niapc/Product/Sm@rtCafe-Expert-7.0_630
...
Certifications
FIPS 140-2 Level 3, NIST certification identifier: 2327 (2015)
BSI certification identifier: BSI-DSZ-CC-0868-2014
...
-> Sm@rtCafé® Expert 7.0 C1 https://sec-certs.org/cc/d8473663e3e82527/