The Common Criteria may be one of the best kept secrets of the computer security world. It was designed to provide customers assurances that the products they purchase have met a level of security. It is an international standard ISO 15408, but its arcane nature and complex process have been adopted primarily by governments. Commercial product vendors wishing to sell IT product to these governments are faced with learning this exotic language and navigating its labyrinthian evaluation process. This book provides practical guidance based on years of real-world experience to vendors brave...