Earlier Santosh wrote: % The other books were no more than the interpretations so that we can % reuse the standard. % % Except for TNI Part 2, the source document and requirement for rainbow % series is TCSEC. So then you do agree with me, Network evals and DBMS evals used the other volumes that I cited, because the Orange book didn't really cover either networking or DBMS topics. I was involved in formal evaluations for the US DoD, while a DoD employee in a prior life, so I've got specific first hand experience with this topic. :-) Cheers, Ran
Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.