Microsoft C2 bull again

[mea culpa <jericho () DIMENSIONAL COM>]

From: "John Q. Public" <tpublic () dimensional com>


heads up:

originally from - http://www.microsoft.com/security/default.asp

  Windows NT 4.0 Completes Major Security Evaluation!
  On December 02, 1999, the US Government announced that Windows NT Server and
  Workstation had completed an "Orange Book" Security evaluation at the C2
  level.  This evaluation, make by respected third-party security experts with
  full access to Windows NT source code, confirms once again the strength of
  the Windows NT security model.  [Read More!]

"Read More" - http://www.microsoft.com/security/issues/C2Evaluation.asp
contains blurbs about who the NCSC is and what the TCSEC is, with links to
TPEP and a link to "Microsoft Windows NT Evaluation Status" at -
http://www.microsoft.com/security/issues/c2summary.asp

  Last Updated: December 02, 1999

  On December 02, 1999, the US Government announced that Microsoft Windows NT
  Server and Workstation 4.0 had completed a successful evaluation at the C2
  level according to the Trusted Computer System Evaluation Criteria (TCSEC).
  The TCSEC, more familiarly known as the "Orange Book", is perhaps the
  best-known governmental evaluation process for IT systems. C2 is widely
  acknowledged to be the highest evaluation rating that can be achieved by a
  general-purpose operating system. The Windows NT 4.0 evaluation included
  servers and workstations in six different roles, operating in both TCP/IP
  networked and stand-alone modes.

[snip]

With links to NT3.5 evaulation reports, and dead links to the NT4.0 reports:
"The following information regarding the C2 evaluation for Windows NT 4.0 is
being posted on the appropriate web sites and will be available for review
shortly."

I can find NO reference to ANY of this at http://www.radium.ncsc.mil/tpep/
or http://www.radium.ncsc.mil/tpep/epl/

.nhoJ

ISN is sponsored by Security-Focus.COM