DoD-Certified Trusted Systems And You - Part Two

by Ben Malisow Sept. 1, 2017 via Symantec

The Orange Book itself is not that useful for evaluating or assessing NT 4.0; the TCSEC guidance solely exists to give a broad overview of what an organization should examine when determining the security level compliance of a given system. The Orange Book is therefore necessarily vague, and the terms and conditions may or may not apply to NT 4.0.

https://www.symantec.com/connect/articles/dod-certified-trusted-systems-and-you-part-two

Avatar
2flash 1 week ago

Interesting approach on the Orange Book and guidances! Thanks for the upload.

Reply