So the evaluation and certification on information security is a fundmental research area . since us dod developed tcsec in 1985 , the security community in the world has made great progress and at last developed cc ( common criteria ) which latter was publicized as international standard 国际社会中,自从1985年美国国防部发布了tcsec (可信计算机系统评估准则)以来,历经十余年的发展,已经制定了得到广泛认可的cc ( it安全通用评估准则) ,并将其作为国际标准发布。