🚀 go-pugleaf

In article <1992Dec14.232220.8343@cbis.ece.drexel.edu> jpw@lorelei.ece.drexel.edu (Joseph Wetstein) writes:
>Could somebody be kind enough to post (or mail) the definitions (with
>examples, in clear english) of the NSCS security levels/criteria,
>i.e. D, C1, C2, B1, ... etc.
>
>If there are any gov't publications available, how would I get them?
>
>Thanks!
>
>

The levels of security are defined in the Trusted Computer System
Evaluation Criteria (TCSEC, also known as the Orange Book  - it's cover
is orange; it is also a Defense Department standard, DoD 5200.28-STD).
It is part of the rainbow series, so called because the various
reference books, all on the subject of computer security, have
different colored covers - e.g., Orange Book, Red Book, etc.).  They are
available upon request from the National Computer Security Center, 9800
Savage Road, Fort George Meade, Maryland, 20755-6000.  A university
library might well already have a copy, possibly even a full set of the
rainbow series.