Orange Book Appendices

NCSC/DOD/NIST (SGML by Andrew G. Morgan)

Appendix

1. COMMERCIAL PRODUCE EVALUATION PROCESS

• 1.1 Preliminary Product Evaluation
• 1.2 Formal Product Evaluation

2. SUMMARY OF EVALUATION CRITERIA DIVISIONS

• 2.1 Division (D): Minimal Protection
• 2.2 Division (C): Discretionary Protection
• 2.3 Division (B): Mandatory Protection
• 2.4 Division (A): Verified Protection

3. SUMMARY OF EVALUATION CRITERIA CLASSES

• 3.1 Class (D): Minimal Protection
• 3.2 Class (C1): Discretionary Security Protection
• 3.3 Class (C2): Controlled Access Protection
• 3.4 Class (B1): Labeled Security Protection
• 3.5 Class (B2): Structured Protection
• 3.6 Class (B3): Security Domains
• 3.7 Class (A1): Verified Design

4. REQUIREMENT DIRECTORY

• 4.1 Audit
• 4.2 Configuration Management
• 4.3 Covert Channel Analysis
• 4.4 Design Documentation
• 4.5 Design Specification and Verification
• 4.6 Device Labels
• 4.7 Discretionary Access Control
• 4.8 Exportation of Labeled Information
• 4.9 Exportation to Multilevel Devices
• 4.10 Exportation to Single-Level Devices
• 4.11 Identification and Authentication
• 4.12 Label Integrity
• 4.13 Labeling Human-Readable Output
• 4.14 Labels
• 4.15 Mandatory Access Control
• 4.16 Object Reuse
• 4.17 Security Features User's Guide
• 4.18 Security Testing
• 4.19 Subject Sensitivity Labels
• 4.20 System Architecture
• 4.21 System Integrity
• 4.22 Test Documentation
• 4.23 Trusted Distribution
• 4.24 Trusted Facility Management
• 4.25 Trusted Facility Manual
• 4.26 Trusted Path
• 4.27 Trusted Recovery