iAnywhere, a subsidiary of Sybase, Inc., has announced its Adaptive Server Anywhere database within SQL Anywhere 9.0.1 and 9.0.2 has attained Evaluation Assurance Level 3 (EAL3) augmented with ALC_FLR.2 from the International Common Criteria for Information Technology Security Evaluation. This level of security certification is evidence of the rigorous engineering process used in the development of SQL Anywhere, as well as the database's advanced security features.
Common Criteria is an internationally recognized security certification required by the U.S. and other governments worldwide for any of their departments and agencies interested in procuring commercially available products. Common Criteria certification also assures businesses that a product meets a standard measure of security, whether it is used internally or in solutions for their customers. iAnywhere completed its Common Criteria evaluation and certification for its Adaptive Server Anywhere database through SAIC's Accredited Testing and Evaluation Labs in Columbia , Md.
This testing has found that the Adaptive Server Anywhere database in SQL Anywhere 9.01 and 9.02 exceeds the requirements of EAL3 by providing additional assurance in the area of flaw remediation. The additional ALC_FLR.2 designation means that if a security flaw is discovered in the product, there is a clearly defined procedure in place to effectively and quickly identify the problem, report it, and take corrective action.
"The protection of data is a top concern for government and military agencies as they empower workers in frontline environments with server, desktop and mobile applications," said Dave Neudoerffer, vice president, engineering, iAnywhere. "We are pleased to attain the Common Criteria certification, which assures our clients, both business and government, that SQL Anywhere meets rigorous government standards for data security."
SQL Anywhere joins other Sybase database products Adaptive Server Enterprise and Sybase IQ 12.6, which have completed Common Criteria security evaluations. In 2005, ASE 12.5.2 was certified with EAL 4, augmented with ALC LFR.2 conformance claim and Sybase IQ 12.6 was certified with EAL 3 augmented with ALC_FLR.2.