A Modeling Method for Common Criteria

Common Criteria, CC, is a framework to guarantee the security level of a system, which the developers argue. Although CC becomes to play an important role in industry in recent years, it is difficult to clearly define a security target, threats and the counter-measures required for CC. In addition, it is hard to integrate such security artifacts into traditional system development process because of the lack of such activities in the process. In this paper, we have proposed a new method to help the definition of security concerns in CC with extension to a misuse-case diagram, including a process to allow us to integrate it into traditional one.