Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!mnetor!seismo!rutgers!sri-unix!sri-spam!ames!ucbcad!ucbvax!MITRE.ARPA!art
From: art@MITRE.ARPA (Art McClinton)
Newsgroups: mod.computers.vax
Subject: Re: SECURITY certification of VMS releases
Message-ID: <8611251328.AA02465@mitre.ARPA>
Date: Tue, 25-Nov-86 19:31:49 EST
Article-I.D.: mitre.8611251328.AA02465
Posted: Tue Nov 25 19:31:49 1986
Date-Received: Tue, 25-Nov-86 22:47:06 EST
References: <861124-141643-1681@Xerox>
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: The MITRE Corp., Washington, D.C.
Lines: 37
Approved: info-vax@sri-kl.arpa

VMS 4.3 has been certified at a C2 level when run on a VAX 11/xxx or a VAX 8600.
There were talks at S.F. DECUS on the methods used by DEC to certify at this 
level.  The NCSC (government agency that certifies) also gave a talk concerning
security certification.  If you are interested in the talks, you can buy a 
cassette tape of the talk.

Vendor is Chesapeake Audio/Video Communications  (301)796-0040.

The talks were:
V150 Digital's Secure System Development
V198 Security Testing of VAX/VMS
S013 Security Evaluation Howard Israel National Computer Security Center
        (not taped)


The MicroVAX II was not submitted for C2 as the manual set does not contain
the required manuals.  

It should also be noted that the C2 level is reached without any installed 
layered products.  The installation of privileged images negates the automatic 
C2 certification.  Each privileged program must be examined.  One such program 
that will possibly make it difficult to maintain the certification is DECnet.
Both DEC and NCSC were careful to point out that the C2 certification is for
only single CPU systems which were not members of a cluster or a DECnet network.
This is not to imply that Clusters or DECnet networks can not made to be C2 or
above, they just are not automatically classed as such.

 
     
*
*---Art
*
*Arthur T. McClinton Jr.     ARPA: ART@MITRE.ARPA
*Mitre Corporation MS-Z305   Phone: 703-883-6356
*1820 Dolley Madison Blvd    Internal Mitre: ART@MWVMS or M10319@MWVM
*McLean, Va. 22102           DECUS DCS: MCCLINTON
*