Previous Next Table of Contents

---

Orange Book Parts I and II: THE CRITERIA and RATIONALE AND GUIDELINES

NCSC/DOD/NIST (SGML by Andrew G. Morgan)

December 1985 (translation 1996/12/31)

---

Highlighting is used in Part I to indicate criteria not contained in a lower class or changes and additions to already defined criteria. Where there is no highlighting, requirements have been carried over from lower classes without addition or modification. In Part II, highlighting is used for emphasis.

---

1. DIVISION D: MINIMAL PROTECTION

2. DIVISION C: DISCRETIONARY PROTECTION

• 2.1 CLASS (C1): DISCRETIONARY SECURITY PROTECTION
• 2.2 CLASS (C2): CONTROLLED ACCESS PROTECTION

3. DIVISION B: MANDATORY PROTECTION

• 3.1 CLASS (B1): LABELED SECURITY PROTECTION
• 3.2 CLASS (B2): STRUCTURED PROTECTION
• 3.3 CLASS (B3): SECURITY DOMAINS

4. DIVISION A: VERIFIED PROTECTION

• 4.1 CLASS (A1): VERIFIED DESIGN
• 4.2 BEYOND CLASS (A1)

5. CONTROL OBJECTIVES FOR TRUSTED COMPUTER SYSTEMS

• 5.1 A NEED FOR CONSENSUS
• 5.2 DEFINITION AND USEFULNESS
• 5.3 CRITERIA CONTROL OBJECTIVES

6. RATIONALE BEHIND THE EVALUATION CLASSES

• 6.1 THE REFERENCE MONITOR CONCEPT
• 6.2 A FORMAL SECURITY POLICY MODEL
• 6.3 THE TRUSTED COMPUTING BASE
• 6.4 ASSURANCE
• 6.5 THE CLASSES

7. THE RELATIONSHIP BETWEEN POLICY AND THE CRITERIA

• 7.1 ESTABLISHED FEDERAL POLICIES
• 7.2 DOD POLICIES
• 7.3 CRITERIA CONTROL OBJECTIVE FOR SECURITY POLICY
• 7.4 CRITERIA CONTROL OBJECTIVE FOR ACCOUNTABILITY
• 7.5 CRITERIA CONTROL OBJECTIVE FOR ASSURANCE

8. A GUIDELINE ON COVERT CHANNELS

9. A GUIDELINE ON CONFIGURING MANDATORY ACCESS CONTROL FEATURES

10. A GUIDELINE ON SECURITY TESTING

• 10.1 TESTING FOR DIVISION C
• 10.2 TESTING FOR DIVISION B
• 10.3 TESTING FOR DIVISION A

---

Previous Next Table of Contents