EAL2 Structurally Tested. EAL3 Methodically Tested and Checked. Development environment controls and TOE configurations management are also required. EAL4 Methodically Designed, Tested and Reviewed. Analysis is supported by the low-level design of the modules of the TOE, and a subset of the implementation.
Testing is supported by an independent search for obvious vulnerabilities.
Development controls are supported by a life-cycle model, identification of tools, and automated configuration management. EAL5 Semiformally Designed and Tested. Analysis includes all of the implementation. Assurance is supplemented by a formal model and a semiformal presentation of the functional specification and high level design, and a semiformal demonstration of correspondence. The search for vulnerabilities must ensure relative resistance to penetration attack.