RE: C-2(Security) blues and the like

2002-10-10 Thread Nelson, Trent .
obert Watson > Cc: Terry Lambert; Steve Kudlak; Roman V. Mashak; '[EMAIL PROTECTED]'; > Nelson, Trent . > Subject: Re: C-2(Security) blues and the like > > On Thu, Oct 10, 2002 at 06:34:30PM -0400, Robert Watson wrote: > > > Are ISO standards still on the order of US

Re: C-2(Security) blues and the like

2002-10-10 Thread Robert Watson
On Thu, 10 Oct 2002, Terry Lambert wrote: > Craig Rodrigues wrote: > > On Thu, Oct 10, 2002 at 06:34:30PM -0400, Robert Watson wrote: > [ ... where to get security standards ... ] > > Cool. You guys are a wealth of information.. > > Robert: any chance of this finding its way into a docs seci

Re: C-2(Security) blues and the like

2002-10-10 Thread Terry Lambert
Craig Rodrigues wrote: > On Thu, Oct 10, 2002 at 06:34:30PM -0400, Robert Watson wrote: [ ... where to get security standards ... ] Cool. You guys are a wealth of information.. Robert: any chance of this finding its way into a docs secion on the TrustedBSD.org web site? -- Terry To Unsubscrib

Re: C-2(Security) blues and the like

2002-10-10 Thread Craig Rodrigues
On Thu, Oct 10, 2002 at 06:34:30PM -0400, Robert Watson wrote: > > Are ISO standards still on the order of US$9 per single-sided page? I > > just got my copies of the ECMA standards on CDROM (for free...). You can get ISO 15408 (Common Criteria) from ANSI: http://webstore.ansi.org/ansidocstore/

Re: C-2(Security) blues and the like

2002-10-10 Thread Robert Watson
On Thu, 10 Oct 2002, Terry Lambert wrote: > Robert Watson wrote: > > The first thing you are > > probably interested in is the Common Criteria description, which I believe > > is available from ISO. > > ...which answers the "how do I get it?" followup question that naturally > comes from the CA

Re: C-2(Security) blues and the like

2002-10-10 Thread Terry Lambert
Robert Watson wrote: > The first thing you are > probably interested in is the Common Criteria description, which I believe > is available from ISO. ...which answers the "how do I get it?" followup question that naturally comes from the CAPP/LSPP profile references for the various EAL levels: "Yo

Re: C-2(Security) blues and the like

2002-10-10 Thread Robert Watson
On Thu, 10 Oct 2002, Steve Kudlak wrote: > It has been a long time since I dealt with those arcane security > matters. At least they are obscure and arcane to most people. Many > consider me to be babbling when I go on about these things. If I start > saying "rainbow books" (the NSA's security

C-2(Security) blues and the like

2002-10-10 Thread Steve Kudlak
It has been a long time since I dealt with those arcane security matters. At least they are obscure and arcane to most people. Many consider me to be babbling when I go on about these things. If I start saying "rainbow books" (the NSA's security books are in different colors) many people assume th