WinNT C2?

Tue Jun 2 18:46:20 PDT 1998

-----BEGIN PGP SIGNED MESSAGE-----

In <Pine.LNX.3.96.980602172921.21860A-100000 at Nigger.EliteHackers.org>, on
06/02/98 
   at 12:35 PM, Dark Knight <DarkKnight at EliteHackers.org> said:

>Do you know the Redbook specs?  From my understanding of the specs to
>have a C2 rateing you can't have a NIC card or Disk Drive.  But I think
>you can have a NIC card in the machine connected to a network that is
>enrycpted network.  But I could be wrong but I don't forget most of what
>I read.. 

You are making the same mistake the previous poster made on this.

Orange Book == Standalone
Red Book    == Network

The numerious criteria for the various levels of trusted systems are too
numerious to list here. I *strongly* recomend obtaining copies of the
Rainbow Series from the NSA (they will mail a copy for free) and studying
the documentation. They are well written and easy to read (unlike many
such papers which are techno-bable filled).

There are aprox. 30 manuals in the Rainbow Series that cover a wide range
of topics related to Trusted Systems of which the Orange Book is a small
part. I doubt you could find more than 5 M$ employees that have read more
than a quarter of the manuals let alone are able to implement their
principals. 

- -- 
- ---------------------------------------------------------------
William H. Geiger III  http://users.invweb.net/~whgiii
Geiger Consulting    Cooking With Warp 4.0

Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 5.0 at: http://users.invweb.net/~whgiii/pgp.html
- ---------------------------------------------------------------

Tag-O-Matic: I love running Windows! NOT!