Orange Book Parts I and II: THE CRITERIA and RATIONALE AND GUIDELINES

NCSC/DOD/NIST (SGML by Andrew G. Morgan)

1. DIVISION D: MINIMAL PROTECTION

2. DIVISION C: DISCRETIONARY PROTECTION

• 2.1 CLASS (C1): DISCRETIONARY SECURITY PROTECTION
• 2.2 CLASS (C2): CONTROLLED ACCESS PROTECTION

3. DIVISION B: MANDATORY PROTECTION

• 3.1 CLASS (B1): LABELED SECURITY PROTECTION
• 3.2 CLASS (B2): STRUCTURED PROTECTION
• 3.3 CLASS (B3): SECURITY DOMAINS

4. DIVISION A: VERIFIED PROTECTION

• 4.1 CLASS (A1): VERIFIED DESIGN
• 4.2 BEYOND CLASS (A1)

5. CONTROL OBJECTIVES FOR TRUSTED COMPUTER SYSTEMS

• 5.1 A NEED FOR CONSENSUS
• 5.2 DEFINITION AND USEFULNESS
• 5.3 CRITERIA CONTROL OBJECTIVES

6. RATIONALE BEHIND THE EVALUATION CLASSES

• 6.1 THE REFERENCE MONITOR CONCEPT
• 6.2 A FORMAL SECURITY POLICY MODEL
• 6.3 THE TRUSTED COMPUTING BASE
• 6.4 ASSURANCE
• 6.5 THE CLASSES

7. THE RELATIONSHIP BETWEEN POLICY AND THE CRITERIA

• 7.1 ESTABLISHED FEDERAL POLICIES
• 7.2 DOD POLICIES
• 7.3 CRITERIA CONTROL OBJECTIVE FOR SECURITY POLICY
• 7.4 CRITERIA CONTROL OBJECTIVE FOR ACCOUNTABILITY
• 7.5 CRITERIA CONTROL OBJECTIVE FOR ASSURANCE

8. A GUIDELINE ON COVERT CHANNELS

9. A GUIDELINE ON CONFIGURING MANDATORY ACCESS CONTROL FEATURES

10. A GUIDELINE ON SECURITY TESTING

• 10.1 TESTING FOR DIVISION C
• 10.2 TESTING FOR DIVISION B
• 10.3 TESTING FOR DIVISION A