> On Aug 1, 11:43am, Darwin Martinez wrote:
> > Subject: Re: Is any O.S. w/IP enabled C2 certified?
> > Recall, however, that even though NT/HPUX/etc. may be C@ certified, it is
> > certified at the box level only, not the network level.
> >
>
> Correct, but that is because the Orange book definition of C-2 doesn't
> have any network requirements. (someone please correct me if I am
> wrong) I didn't think that network requirements came into play until
> the B levels, notably B-1.
Actually, there is a different book entirely that deals with the network:
"Trusted Network Interpretation" (NCSG-TG-005) and "Trusted Network Interpretation
Environments Guideline - Guidance for applying the Trusted Network Interpretation"
(NCSC-TG-011), commonly known as the "Red Book". (As far as which one is the "Red"
book, they're both red and essentially deal with the same subject.)
--
John Turner, jturner @
loki .
aetc .
af .
mil
"But if they called them 'Sad Meals', kids wouldn't buy them!" - PATB
Follow-Ups:
|
|
