Cascading Evaluations—Can Downstream Vendors Benefit from Reference Evaluations (A23c)
Starting in 2019 with Android 9, Google started to evaluate Pixel devices to the requirements of the PP_MDF. While this directly supports Google in showing Pixel devices as capable of meeting these requirements, it also allows Android OEMs to more easily perform their own certifications without the same amount of effort as a new evaluation would take.
This presentation will look at the downstream benefits that are gained when a product is evaluated initially and then the results and tools from that evaluation are shared within the ecosystem from both vendor and lab perspectives. Topics to be presented include: efficiencies gained by repeated evaluations, differences in speed of evaluation over time and how closely subsequent evaluations can follow the initial reference one. Further thoughts will be provided on how test tools and evidence may be able to be reused/shared, and other areas where this type of evaluation sequence may be beneficial.
This will be a joint presentation with Ed Morris from Gossamer Security Solutions.