The OSEC Project

---

The OSEC (Open Security Evaluation Criteria) project solves problems similar to the ones solved by the Lincoln Laboratory project, and is also oriented towards testing network security tools. However, in contrast to the Lincoln Laboratory project, the OSEC standard is open. Its description can be found at the following site: http://osec.neohapsis.com/. At the time of writing, the developers have published criteria for testing network-level intrusion detection systems, and were in the process of preparing a similar standard for firewall testing. Besides the development of testing methods, the Neohapsis laboratory that developed these criteria is engaged in testing intrusion detection systems for their correspondence to these criteria. Currently, two systems have already undergone such tests—RealSecure Network Sensor from ISS, and IntruShield from IntruVert. As I am writing, the testing of Intrusion.com solutions is underway.

---