Impact
"Lower barriers to entry
Anyone can play -> more systems certified
"Real-valued result
Instead of boolean certified/not-certified
"Easy to interpret
Can partially or totally order systems
"Empirical measurement
Measure results instead of adherence to process
"Implementation measurement
CC can’t measure most of the Immunix defenses (StackGuard, FormatGuard, RaceGuard)
RV can measure their efficacy