Oracle Application Server passes security test

The Oracle Application Server 10g has successfully completed one of the most rigorous security assessments for commercially available software, Oracle officials said yesterday.

Oracle Applications Server, a component of Oracle Fusion Middleware, has achieved Common Criteria Evaluation Assurance Level 4+. The software now meets the purchasing criteria of many public-sector organizations and agencies, company officials said. Oracle Fusion Middleware enables users to adopt and manage service-oriented architectures in heterogeneous computing environments.

Accepted by 24 governments worldwide, the Common Criteria evaluation assesses a product’s security against a published security target. It is important to organizations that must comply with government-mandated procurement policies, such as the National Security Telecommunications and Information Systems Security Policy No. 11 and Defense Department Directive 8500.1, which require agencies to purchase only products that have successfully completed a Common Criteria evaluation.

The evaluation is Oracle’s 23rd independent security evaluation, company officials said.