Analyzing the Interconnected Ecosystem of Common Criteria Certified Products: Identifying High-Impact Dependencies and Aging Risks

The Common Criteria certification ecosystem features a complex network of interconnected certified products, with many products relying on the security functions of other certified devices. This study analyzes the prevalence and nature of these dependencies, identifying high-reach products that could significantly impact the broader ecosystem if compromised, and examining the risks posed by references to archived products.