One Evaluation Assurance Level per Evaluation?
It is one (not to say the) major objective of evaluation according to Common Criteria to produce confidence that the security mechanisms of a product are implemented correctly. The degree of confidence gained by an evaluation depends on the Evaluation Assurance Level (EAL). However, there is only one EAL per evaluation. This concept is challenged by this paper.