The other books were no more than the interpretations so that we can reuse the standard. Except for TNI Part 2, the source document and requirement for rainbow series is TCSEC. -----Original Message----- From: Randall Atkinson [mailto:rja at extremenetworks.com] Sent: Wednesday, February 20, 2008 10:40 AM To: Santosh Chokhani Cc: saag at mit.edu Subject: RE: [saag] Algorithms/modes requested by users/customers Earlier, Santosh Chokhani wrote: % Orange Book was not about OS security alone. % % It was successfully applied to network components and DBMS systems also. Santosh, I was using terms precisely, not loosely. The network evaluations were done against Red Book (TNI) published as NCSC TG-005, and not against the Orange Book proper. DBMS evals were done against the Purple Book, published as NCSC TG-021, and not against the Orange Book proper. (I have a full set of colouring books to hand from a previous life. :-) Cheers, Ran
Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.