A Guide to Understanding Discretionary Access Control in Trusted Systems

A Guide to Understanding Discretionary Access Control in Trusted Systems PDF

Author:

Publisher:

Published: 1987

Total Pages: 40

ISBN-13:

DOWNLOAD EBOOK →

"One of the features of the Criteria that is required of a secure system is the enforcement of discretionary access control (DAC). DAC is a means of restricting access to objects based on the identity of subjects and/or groups to which they belong. The controls are discretionary in the sense that a user or process given discretionary access to information is capable of passing that information along to another subject. This guide discusses issues involved in designing, implementing and evaluating DAC mechanisms. Its primary purpose is to provide guidance to manufacturers on how to select and build effective DAC mechanisms."--DTIC

A Guide to Understanding Discretionary Access Control in Trusted Systems

A Guide to Understanding Discretionary Access Control in Trusted Systems PDF

Author:

Publisher:

Published: 1987

Total Pages: 0

ISBN-13:

DOWNLOAD EBOOK →

One of the features of the Criteria that is required of a secure system is the enforcement of discretionary access control (DAC). DAC is a means of restricting access to objects based on the identity of subjects and/or groups to which they belong. The controls are discretionary in the sense that a user or process given discretionary access to information is capable of passing that information along to another subject. This guide discusses issues involved in designing, implementing and evaluating DAC mechanisms. Its primary purpose is to provide guidance to manufacturers on how to select and build effective DAC mechanisms.

A Guide to Understanding Security Testing and Test Documentation in Trusted Systems

A Guide to Understanding Security Testing and Test Documentation in Trusted Systems PDF

Author: Virgil D. Gligor

Publisher:

Published: 1994

Total Pages: 136

ISBN-13:

DOWNLOAD EBOOK →

"The National Computer Security Center is issuing A Guide to Understanding Security Testing and Test Documentation in Trusted Systems as part of the Rainbow Series of documents our Technical Guidelines Program produces. In the Rainbow Series, we discuss in detail the features of the Department of Defense Trusted Computer System Evaluation Criteria (DoD 5200.28-STD) and provide guidance for meeting each requirement. The National Computer Security Center, through its Trusted Product Evaluation Program, evaluates the security features of commercially produced computer systems. Together, these programs ensure that users are capable of protecting their important data with trusted computer systems. The specific guidelines in this document provide a set of good practices related to security testing and the development of test documentation. This technical guideline has been written to help the vendor and evaluator community understand what deliverables are required for test documentation, as well as the level of detail required of security testing at all classes in the Trusted Computer System Evaluation Criteria."--DTIC.

Guide to Understanding Design Documentation in Trusted Systems

Guide to Understanding Design Documentation in Trusted Systems PDF

Author:

Publisher: DIANE Publishing

Published: 1995-10

Total Pages: 44

ISBN-13: 9780788122309

DOWNLOAD EBOOK →

A set of good practices related to design documentation in automated data processing systems employed for processing classified and other sensitive information. Helps vendor and evaluator community understand what deliverables are required for design documentation and the level of detail required of design documentation at all classes in the Trusted Computer Systems Evaluation Criteria.