Orange book
security, standard
A standard from the US Government National Computer Security Council (an arm of the U.S. National Security Agency), “Trusted Computer System Evaluation Criteria, DOD standard 5200.28-STD, December 1985” which defines criteria for trusted computer products. There are four levels, A, B, C, and D. Each level adds more features and requirements.
D is a non-secure system.
C1 requires user log-on, but allows group ID.
C2 requires individual log-on with password and an audit mechanism. (Most Unix implementations are roughly C1, and can be upgraded to about C2 without excessive pain).
Levels B and A provide mandatory control. Access is based on standard Department of Defense clearances.
B1 requires DOD clearance levels.
B2 guarantees the path between the user and the security system and provides assurances that the system can be tested and clearances cannot be downgraded.
B3 requires that the system is characterised by a mathematical model that must be viable.
A1 requires a system characterized by a mathematical model that can be proven.
See also crayola books, book titles.
[Jargon File]
(1997-01-09)
Read Also:
- Orangeburg
[awr-inj-burg, or-] /ˈɔr ɪndʒˌbɜrg, ˈɒr-/ noun 1. a city in central South Carolina.
- Orange cauliflower
noun a hybrid of white cauliflower with an orange-tinted variety Examples Orange cauliflower is creamier, more tender, and full of beta-carotene.
- Orange chromide
/ˈkrəʊmaɪd/ noun 1. an Asian cichlid fish, Etropus maculatus, with a brownish-orange spotted body
- Orange-flower-oil
noun 1. .
- Orange-free-state
noun 1. a province in central Republic of South Africa: a Boer republic 1854–1900; a British colony (Orange River Colony, ) 1900–10. 49,647 sq. mi. (128,586 sq. km). Capital: Bloemfontein. noun 1. a former province of central South Africa, between the Orange and Vaal rivers: settled by Boers in 1836 after the Great Trek; annexed […]