ITSEC definition of ITSEC in the Free Online Encyclopedia.

NCSC

(National Computer Security Center) The arm of the U.S. National Security Agency that defines criteria for trusted computer products, which are embodied in the Orange Book and Red Book. Published in the 1980s and 1990s and known as the Rainbow Series because of their colored covers for each topic, they have been largely superseded by the Common Criteria. See also NCSA.

Orange Book
The Orange Book contains the "Trusted Computer Systems Evaluation Criteria" (TCSEC), DOD Standard 5200.28.

Red Book (for networks)
The Red Book contains the "Trusted Network Interpretation of the Trusted Computer System Evaluation Criteria" (NCSC-TG-005) and "Trusted Network Interpretation Environments Guideline: Guidance for Applying the Trusted Network Interpretation" (NCSC-TG-011).

Level D
Systems are rated on a scale starting from D, which is not secure, to A, which is the most secure.

Level D is a non-secure system.

Level C
Level C provides discretionary access control (DAC). The owner of the data can determine who has access to it.

C1: Requires user login, but allows group ID.

C2: Requires individual user login with
password and an audit mechanism.

Levels B and A
Levels B and A provide mandatory access control (MAC). Access is based on standard DOD clearances. Each data structure contains a sensitivity level, such as top secret, secret and unclassified, and is available only to users with that level of clearance.

B1: DOD clearance levels.

B2: Guarantees path between user and the
security system. Provides assurances
that system can be tested and clearances
cannot be downgraded.

B3: System is characterized by a mathematical
model that must be viable.

A1: System is characterized by a mathematical
model that can be proven. Highest
security. Used in military computers.

European Ratings
The European Information Technology Security Evaluation Criteria (ITSEC) is similar to TCSEC, but rates functionality (F) and effectiveness (E) separately.

        Orange
        Book
        TCSEC   ITSEC
        D       E0
        C1      F-C1, E1
        C2      F-C2, E2
        B1      F-B1, E3
        B2      F-B2, E4
        B3      F-B3, E5
        A1      F-B3, E6

Mentioned in	?		References in periodicals archive	?		Encyclopedia browser	?		Full browser	?
No references found	Baltimore's UniCERT product is also the first certificate management system in the world to gain ITSEC E3 certification(1) and now the first to deliver a commercially available Full Gatekeeper service. BALTIMORE TECHNOLOGIES GAINS "GATEKEEPER" ACCREDITATION by Worldwide Telecom The subsidiary is named partly after the team's concentration on operating system level chip development, and partly in reference to offering security beyond the six recognized levels of ITSEC (information technology security evaluation criteria). NatWest Moves into Smartcards by Computergram International Germany, which is one of the few countries in the EU whose courts recognize digital signatures on contracts, requires digital signatures to meet the ITSEC E4 level of security and would like the EU to do the same. EU DIGITAL SIGNATURE PROPOSAL FAILS by Computergram International	Ithamar Ithamore iThing Ithna 'Ashariyyah Ithomiinae Ithra Ithran Ithream ITI Itil itinera versurarum ITMS (AICPA) Ito Ito Hirobumi Ito Jinsai Itô's formula Itô's integral Ito, Hirobumi Ito, Marquis Hirobumi Itonididae iTouch iTouch interface ITP ITS ITS-90 ITSEC Itsenko-Cushing's Disease ITSP Itsuku-shima Ittai ITU ITU X.209 ITU-R BT.601 ITU-T ITU-T X.680 Itul iTunes iTunes Plus iTunes Store iTunes tagging iTunes U Ituraea Iturbi, José Iturbide, Agustin De Iturbide, Agustín de Itúrbide, Agustín De Iturrigaray, José de Iturup Ituzaingó, battle of ITV ITX	ITSAM ITSANM ITSAP ITSAPP ITSAT ITSB ITSC ITSCAP ITSCC ITSCD ITSCDU ITSCJ ITSCM ITSCO ITSCP ITSD ITSDAISI ITSDF ITSDN ITSDP ITSDR ITSDS ITSE ITSEA ITSEC ITSEE ITSEF Itsekiri National Youth Council itself itself itself ITSEM Itsenko-Cushing's Disease ITSEP ITSES ITSET ITSF ITSFAC ITSFB ITSFEA ITSFEA ITSFWI ITSG ITSH ITSI ITSI BBS ITSIA ITSIE ITSIG ITSL ITSLA ITSLP

Mentioned in

References in periodicals archive

Encyclopedia browser

Full browser

No references found

Baltimore's UniCERT product is also the first certificate management system in the world to gain ITSEC E3 certification(1) and now the first to deliver a commercially available Full Gatekeeper service.

BALTIMORE TECHNOLOGIES GAINS "GATEKEEPER" ACCREDITATION by Worldwide Telecom

The subsidiary is named partly after the team's concentration on operating system level chip development, and partly in reference to offering security beyond the six recognized levels of ITSEC (information technology security evaluation criteria).

NatWest Moves into Smartcards by Computergram International

Germany, which is one of the few countries in the EU whose courts recognize digital signatures on contracts, requires digital signatures to meet the ITSEC E4 level of security and would like the EU to do the same.

EU DIGITAL SIGNATURE PROPOSAL FAILS by Computergram International

NCSC (redirected from ITSEC)

NCSC
(redirected from ITSEC)