IT-Security Evaluation Criteria

Summary of TCSEC- Security Classes:
Division C: Discretionary Protection:
Division D/ Class D: Minimal Protection:
- unrated, no security characteristics required
Class C1: Discretionary Security Protection:
- for cooperating users processing at the same level of security
- discretionary access controls (DAC): users can protect their own data and
keep other users from accidentally reading or destroying their data
- identification and authentication
- penetration testing
-
Example: MVS/RACF
Tillämpad datasäkerhet (DAVC17) – Security Evaluation Criteria Simone Fischer-Hübner 5
Tillämpad datasäkerhet (DAVC17) – Security Evaluation Criteria Simone Fischer-Hübner 6
C2: Controlled Access Protection:
Features of C1 +:
- more finely grained DAC:
protection must be implementable at the degree of a single user
- auditing
- object reuse
Examples: VAX VMS, MVS/ACF, Windows NT
Division B: Mandatory Protection
Class B1: Labelled Security Protection:
Features of C2 +:
- informal statement of security model
- security labelling
- mandatory access control (MAC) policy of the Bell LaPadula model
- thorough analysis and testing of design documentation,
source code, object code,
- removal of security related flaws
Examples: Trusted Solaris CMW 1.1, Trusted Oracle 7, Unix System V/MLS
Tillämpad datasäkerhet (DAVC17) – Security Evaluation Criteria Simone Fischer-Hübner 7
Tillämpad datasäkerhet (DAVC17) – Security Evaluation Criteria Simone Fischer-Hübner 8