Evaluation Assurance Activities specified in Section 5.2.1 and CC Part 3 assurance requirements specified in section 5.2.2 Conventions, Terminology, Acronyms This section specifies the formatting information used in the security target. Conventions The following conventions have been applied in this document: Security Functional Requirements (SFRs): Part 2 of the CC defines the approved set of operations that may be applied to functional requirements: iteration, assignment, selection, and refinement. Iteration: allows a component to be used more than once with varying operations. Assignment: allows the specification of an identified parameter. Selection: allows the specification of one or more elements from a list. Refinement: allows the addition of details. The conventions for the assignment, selection, refinement, and iteration operations are described in Section 5. Other sections of the security target use a bold font to highlight text of special interest, such as captions. Terminology The following terminology is used in the security target: Term Definition Access Interaction between an entity and an object that results in the flow or modification of data. Access control Security service that controls the use of resources and the disclosure and modification of data. Accountability Tracing each activity in an IT system to the entity responsible for the activity. Active Directory Active Directory manages enterprise identities, credentials, information protection, system and application settings through AD Domain Services, Federation Services, Certificate Services and Lightweight Directory Services. Administrator An authorized user who has been specifically granted the authority to manage some portion or the entire TOE and thus whose actions may affect the TOE Security Policy (TSP). Administrators may possess special privileges that provide capabilities to override portions of the TSP. Assurance A measure of confidence that the security features of an IT system are sufficient to enforce the IT system’s security policy. Attack An intentional act attempting to violate the security policy of an IT system. Authentication A security measure that verifies a claimed identity. Authentication data The information used to verify a claimed identity.
Threat Description T.EAVESDROP If positioned on a wireless communications channel or elsewhere on the network, attackers may monitor and gain access to data exchanged between the Mobile Device and other endpoints. T.NETWORK An attacker may initiate communications with the Mobile Device or alter communications between the Mobile Device and other endpoints. T.PHYSICAL Loss of confidentiality of user data and credentials may be a result of an attacker gaining physical access to a Mobile Device. T.FLAWAPP Malicious or exploitable code could be used knowingly or unknowingly by a developer, possibly resulting in the capability of attacks against the platform’s system software. T.PERSISTENT An attacker gains and continues to have access the device, resulting it loss of integrity and possible control by both an adversary and legitimate owner. Table 2 MDF PP Threats Addressed By Windows Organizational Security Policies An organizational security policy is a set of rules or procedures imposed by an organization upon its operations to protect its sensitive data and IT assets. Table 3 describes organizational security policies which are necessary for conformance to the protection profile. Security Policy Description [None] There are no Organizational Security Policies for the protection profile. Table 3 Organizational Security Policies Secure Usage Assumptions Table 4 describes the core security aspects of the environment in which Windows is intended to be used. It includes information about the physical, personnel, procedural, and connectivity aspects of the environment. The following specific conditions are assumed to exist in an environment where the TOE is employed in order to conform to the protection profile: Assumption Description A.CONFIG It is assumed that the TOE’s security functions are configured correctly in a manner to ensure that the TOE security policies will be enforced on all applicable network traffic flowing among the attached networks.
specifying a set of allowed applications based on [a digital signature or application name and version] (an application whitelist), denying installation of applications] import keys/secrets into the secure key storage M √ √ - destroy imported keys/secrets and [[any other keys/secrets]] in the secure key storage M √ √ - import X.509v3 certificates into the Trust Anchor Database M √ √ remove imported X.509v3 certificates and [[all X.509v3 certificates]] in the Trust Anchor Database M Windows 10 Mobile Windows 10 enroll the TOE in management M Windows 10 Mobile Windows 10 - remove applications M √ √ update system software M √ √ install applications M √ √ remove Enterprise applications M √ √ configure the Bluetooth trusted channel: disable/enable the Discoverable mode (for BR/EDR) change the Bluetooth device name M √ [ c. allow/disallow additional wireless technologies to be used with Bluetooth, d. disable/enable Advertising (for LE), e. disable/enable the Connectable mode f. disable/enable the Bluetooth services and/or profiles available on the device, g. specify minimum level of security for each pairing , h. configure allowable methods of Out of Band pairing i. no other Bluetooth configuration] √ enable/disable display notification in the locked state of: [ email notifications, calendar appointments, M √