I've been studying aspects of Windows NT security, and I came across an interesting bit of information which i thought of sharing... There is a body called National Computer Security Center in the US Dept of Defense.They guys basically evaluate the security of computer systems and certify a _particular_configuration at a certain level from A to D, where A is the highest level of security. It seems that Windows NT was certified at C2 level on a Compaq ProLiant 2000, running Version 3.51 of NT, as per the Orange Book Now, surprise surprise, the Orange Book is for standalone systems only! Windows NT was never evaluated on the Red Book,which provides an interpretation of the security criteria for networked systems!!! There, now u guys know why its the favorite target....
kishor ps:of course, linux flavours are the second-most favourite...;-) (ducks for cover...)
_________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com
for completeness, NT 4.0 was finally C2 network certified in November 1999....
----- Original Message ----- From: Kishor Bhagwat aaaaarrrgghhh@yahoo.com To: Linux Users linuxers@mm.ilug-bom.org.in Sent: Thursday, December 13, 2001 9:19 AM Subject: [ILUG-BOM] OT- Win NT security evaluation
I've been studying aspects of Windows NT security, and I came across an interesting bit of information which i thought of sharing... There is a body called National Computer Security Center in the US Dept of Defense.They guys basically evaluate the security of computer systems and certify a _particular_configuration at a certain level from A to D, where A is the highest level of security. It seems that Windows NT was certified at C2 level on a Compaq ProLiant 2000, running Version 3.51 of NT, as per the Orange Book Now, surprise surprise, the Orange Book is for standalone systems only! Windows NT was never evaluated on the Red Book,which provides an interpretation of the security criteria for networked systems!!! There, now u guys know why its the favorite target....
kishor ps:of course, linux flavours are the second-most favourite...;-) (ducks for cover...)
Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com
_________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com
Hi There, Wud like to know - Wat the score for Linux / Unix?? Is this what we are talking about --- http://www.fas.org/irp/nsa/rainbow.htm ???
for completeness, NT 4.0 was finally C2 network certified in November 1999....
Windows NT was never evaluated on the Red Book,which provides an interpretation of the security criteria for networked systems!!! There, now u guys know why its the favorite target....
Bye, Surya ######### __ __ ^^^ ^^^ |__ |__| |/ ( <+> | <+> ) __|urya |rakash |\ompalli | <<< >>> Email - kompalli@cse.buffalo.edu Phone - Home - (716) 862 0366 Office - (716) 645 5084 x 19 Website - http://www.ksuryap.freeservers.com
Linux hasnt been presented for evaluation by any of the distributions. http://www.radium.ncsc.mil
kishor
----- Original Message ----- From: Suryaprakash Kompalli kompalli@cse.Buffalo.EDU
Wud like to know - Wat the score for Linux / Unix?? Is this what we are talking about --- http://www.fas.org/irp/nsa/rainbow.htm ???
for completeness, NT 4.0 was finally C2 network certified in November 1999....
Windows NT was never evaluated on the Red Book,which provides an interpretation of the security criteria for networked systems!!! There, now u guys know why its the favorite target....
_________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com
-
Kishor Bhagwat -
Suryaprakash Kompalli