From: "William H. Geiger III" <whgiii@invweb.net>
Date: Tue, 2 Jun 1998 18:46:20 -0700 (PDT)
To: Dark Knight <DarkKnight@Elitehackers.org>
Subject: Re: WinNT C2?
In-Reply-To: <Pine.LNX.3.96.980602172921.21860A-100000@Nigger.EliteHackers.org>
Message-ID: <199806030150.UAA009.49@geiger.com>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

In <Pine.LNX.3.96.980602172921.21860A-100000@Nigger.EliteHackers.org>, on
06/02/98 
   at 12:35 PM, Dark Knight <DarkKnight@EliteHackers.org> said:

>Do you know the Redbook specs?  From my understanding of the specs to
>have a C2 rateing you can't have a NIC card or Disk Drive.  But I think
>you can have a NIC card in the machine connected to a network that is
>enrycpted network.  But I could be wrong but I don't forget most of what
>I read.. 

You are making the same mistake the previous poster made on this.

Orange Book == Standalone
Red Book    == Network

The numerious criteria for the various levels of trusted systems are too
numerious to list here. I *strongly* recomend obtaining copies of the
Rainbow Series from the NSA (they will mail a copy for free) and studying
the documentation. They are well written and easy to read (unlike many
such papers which are techno-bable filled).

There are aprox. 30 manuals in the Rainbow Series that cover a wide range
of topics related to Trusted Systems of which the Orange Book is a small
part. I doubt you could find more than 5 M$ employees that have read more
than a quarter of the manuals let alone are able to implement their
principals. 

- -- 
- ---------------------------------------------------------------
William H. Geiger III  http://users.invweb.net/~whgiii
Geiger Consulting    Cooking With Warp 4.0

Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 5.0 at: http://users.invweb.net/~whgiii/pgp.html
- ---------------------------------------------------------------
 
Tag-O-Matic: I love running Windows! NOT!

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a-sha1
Charset: cp850
Comment: Registered_User_E-Secure_v1.1b1_ES000000

iQCVAwUBNXSr2Y9Co1n+aLhhAQGtDAQApkDb/TiweTEuMnijTqOVcwcFuqQGKh/7
wZjiBu6S+VcyVUj/dcTyUwszqD1vuBUuevD8W9+dGdqjxRz/P8nxYelqaZfza997
sraI5Wc3MjGxp64plbRAt6qOzZjfFCXOv/ZSuRrf9tXjHFJeZz0KSkNex3Haz54j
zmxljrbnmB8=
=J5Mg
-----END PGP SIGNATURE-----