Forgot your password?
typodupeerror

Comment Re:The significance of EAL2,3,4, etc. (Score 1) 373

>Now realistically, EAL4 IS a restrictive
>certification! Trusted Solaris8 is EAL4 certified.
>Most default Unix installs might barely pass EAL2.

I'm not disagreeing, but I'd like to add this point-
What's important is the Protection Profile the evaluation is against-the w2k EAL4 certification is against the CSPP - vaguely equal to the C2 in the Orange Book. The Trusted Solaris EAL4 cert was against a Security Target that conforms with the CSPP, the LSPP (=~ the B1 or B2 cert in the orange book, I forget,) AND the RBAC (role based access control) protection profile.

Slashdot Top Deals

...when fits of creativity run strong, more than one programmer or writer has been known to abandon the desktop for the more spacious floor. - Fred Brooks, Jr.

Working...