NT's C2 rating

[Mike Tighe]

>At 10:21 AM 3/21/96 -0800,  David Loysen <dwl at hnc.com> wrote:
>>>The fine print says its insecure as soon as its connected to a network. 
>>Ain't nothing fine about that print. An operating system or piece of
>>hardware may be C2 certifiable. But only a complete system in a specific
>>configuration can be certified as C2 compliant. The way I read the orange
>>book, no system with a network connection can ever be C2. 

To address that problem, they wrote the Trusted Network Interpretation a few years after the Orange Book

Mike Tighe
tighe at spectrum.titan.com
http://www.tcst.com/~tighe/