Specifications

CRP-C0036-01

described in the ST.

b. Testing Approach

For the testing, following approach was used.

1. The developer stimulated each security function at each external interface by

operating the multifunction product’s Control Panel or the Remote UI, and

observed its behavior.

2. As for the security functions whose behavior could not be observed at the

external interfaces, the developer verified their behavior by means of

monitoring the operating status of the TOE program, capturing hard disk

dumps, and monitoring packets on the network.

c. Scope of Testing Performed

Testing is performed about 107 items by the developer.

The coverage analysis is conducted and examined to testing satisfactorily all of

the security functions described in the functional specification and the external

interface.A depth analysis was performed and verified that the subsystems and

subsystem interfaces described in the high-level design have been all thoroughly

tested.

d. Result

The evaluator confirmed consistencies between the expected test results and the

actual test results provided by the developer. The Evaluator confirmed the

developer testing approach performed and legitimacy of items performed, and

confirmed consistencies between the testing approach described in the test plan

and the actual test results.

2.3.2 Evaluator Testing

1) Evaluator Test Environment

The evaluator used the same test configuration as the test configuration used by

the developer, plus an additional tool for penetration testing against the developer

test configuration.

2) Outlining of Evaluator Testing

Outlining of testing performed by the evaluator is as follow.

a. Testing Approach

The evaluator confirmed that the developer’s testing methodology was

appropriate for examination of the expected behavior of the security functions

and thus adopted the same testing approach.

b. Scope of Testing Performed

The evaluator performed 48 tests in total; 10 independent tests, 24 sampled

developer tests, and 14 penetration tests. As for selection of the test subset, the

following factors are considered.