I-0388: What Is The Difference Between "Sort" And "Order"?




  This transaction consists of a proposal for a NIAP Interpretation of a
  Common Criteria document. It is being posted in accordance with the
  procedures of the IWG.

  Comments on this proposal are welcomed and should be posted to this
  transaction chain.  If any party wishes to post a comment anonymously,
  the comment should be mailed to ccevs-cmt@nist.gov in a form suitable
  for posting.  All comments should be posted no later than Monday, August
  5, 2002.


                 CCITSE/CEM  NIAP INTERPRETATION (PROPOSED)


     
________________________________________________________________
_

          I-0388: What Is The Difference Between "Sort" And "Order"?
     
________________________________________________________________
_

TYPE:                 NIAP Interpretation
NUMBER:               I-0388
STATUS:               Ready for External Review

TITLE:                What Is The Difference Between "Sort" And "Order"?
COMMENTS DUE BY:      Monday, August 5, 2002 to ccevs-cmt@nist.gov

SOURCE REFERENCE:     CC v2.1 Part 2 Subclause 3.4 FAU_SAR.3
RELATED TO:           <None>

ISSUE:

   What is the distinction between the terms "sorting" and "ordering"?
   Sometimes the words are used interchangeably.

STATEMENT

   Although the terms "sorting" and "ordering" are sometimes used
   interchangeably in IT system discussions, they have somewhat different
   meanings. When one sorts, one separates items into different kinds or
   classes; when one orders, one arranges the items in a particular
   order.

SPECIFIC INTERPRETATION

   To address this interpretation, the following changes are made to CC
   v2.1: (Additions marked _thusly_; deletions marked _[DEL:_ thusly
   _:DEL]_ )


     * Insert the following two new entries into the glossary in Part 1.

     _order --_ to put into a sequence or succession according to some
     attribute

     _sort --_ to place in categories or classes according to some
     attribute

     * In part 2, section 3.4, "Security audit review (FAU_SAR)", insert
       the following new second paragraph after paragraph 111, "Family
       behavior":

     Although the terms "sorting" and "ordering" are sometimes used
     interchangeably in IT system discussions, they have somewhat
     different meanings. When one sorts, one groups items into kinds or
     classes; when one orders, one arranges the items in a particular
     sequence. So, for example, one might sort audit data so that all
     the audit records that contain information on a particular user are
     separated from all other audit data. On the other hand, one might
     order the audit data based on the date and time of the audit event
     in each audit record. Thus, technically, what is usually referred
     to as "bubble sorting" more accurately be referred to as "bubble
     ordering".

     * In Annex C, change the last sentence in paragraph 546 as follows:

     The traditional notion of a _[DEL:_ time-sorted _:DEL]_ _time-
     ordered_ list or "trail" of audited events may not be applicable in
     a global asynchronous network with arbitrarily many events
     occurring at once.

     * In Annex C, Section C.4, "Security audit review (FAU_SAR)", change
       the third sentence in paragraph 609 as follows:

     Selectable review is more sophisticated, and requires the ability
     to perform searches based on a single criterion or multiple
     criteria with logical (i.e. and/or) relations, sort _and/or order_
     audit data, filter audit data, before audit data are reviewed.

SUPPORT:

   The Common Criteria does not provide a clear distinction between
   "sorting" and "ordering", particularly as used in the functional
   requirement FAU_SAR.3.1:

     The TSF shall provide the ability to perform [selection: searches,
     sorting, ordering] of audit data based on [assignment: criteria
     with logical relations].

   In developing this interpretation, the Oxford English Dictionary was
   consulted. Among the applicable definitions found were the following:

     sort: To arrange (things, etc.) according to a kind or quality, or
     after some settled order or system; to separate and put into
     different sorts or classes.

     order: The action of putting or keeping in order.

     in order: In proper sequence or succession, according to rank,
     importance, seniority, size, position, date, affinity, etc.

   While this interpretation adds definitions to the glossary in Part I;
   the paragraphs that use those words are in Part II. This implies that
   Part II really should have its own glossary.





Date Index | Thread Index | Problems or questions? Contact list-master@nist.gov