🚀 go-pugleaf

On Wed, 14 Oct 1992 19:37:30 GMT, marc@watson.ibm.com (Marc Auslander) said:
> 1.  Define the various security levels A1...C2...

The security ratings are defined in the Trusted Computer System Evaluation
Criteria, sometimes called the Orange Book. This is available from the
National Computer Security Center, or the Government Printing Office. 

Basically, C2 gives discretionary access control, identification and
authentication, object reuse and auditing, plus assurance through design
documentation and testing. B1 adds mandatory access controls. Both can be
achieved through retrofitting, if desired. B2 adds some additional labeling,
and requires a modular kernel. Unix cannot reach B2 without being rewritten,
because of the shape of the code in the kernel. B3 adds the presece for formal
model statements and highly modular and layered code. A1 ands formal
specification and proofs. Without rewriting, Unix cannot get above B2. Without
redesign, it can't get B3 and above, because ACLs (access control lists) are
required.

> 2.  Discuss what is known about getting unix to various levels.

There were some papaers in a past National Computer Security Conference
proceedings. YOu might also check out Deborah Russel's book, "Computer
Security Basics".

Daniel
--
[W]:The Aerospace Corp. M1/055 * POB 92957 * LA, CA 90009-2957 * 310/336-8228
[Email]:faigin@aerospace.aero.org              [Vmail]:310/336-5454 Box#13149
   "You can't be a rationalist in an irrational world. It isn't rational!"
	       Dr. Rance, in Joe Orton's "What the Butler Saw"