Re: Microsoft C2 bull again

[mea culpa <jericho () DIMENSIONAL COM>]

Reply From: "Glover, John" <John.Glover () icbc com>


Perhaps this is why you couldn't find any references...

LAST UPDATE WAS IN 1998!!

Last updated Fri Dec 18 17:43:11 1998
URL: http://www.radium.ncsc.mil/tpep/epl/epl-by-vendor.html

Last updated Thu Jan 14 14:30:13 1999
URL: http://www.radium.ncsc.mil/tpep/epl/index.html

Methinks the list at this site needs some maintenance...

IMHO, JohnG


> originally from - http://www.microsoft.com/security/default.asp
>
>  Windows NT 4.0 Completes Major Security Evaluation!
>  On December 02, 1999, the US Government announced that Windows NT Server and
>  Workstation had completed an "Orange Book" Security evaluation at the C2
>  level.  This evaluation, make by respected third-party security experts with
>  full access to Windows NT source code, confirms once again the strength of
>  the Windows NT security model.  [Read More!]
>
> "Read More" - http://www.microsoft.com/security/issues/C2Evaluation.asp
> contains blurbs about who the NCSC is and what the TCSEC is, with links to
> TPEP and a link to "Microsoft Windows NT Evaluation Status" at -
> http://www.microsoft.com/security/issues/c2summary.asp
>
>  Last Updated: December 02, 1999
>
>  On December 02, 1999, the US Government announced that Microsoft Windows NT
>  Server and Workstation 4.0 had completed a successful evaluation at the C2
>  level according to the Trusted Computer System Evaluation Criteria (TCSEC).
>  The TCSEC, more familiarly known as the "Orange Book", is perhaps the
>  best-known governmental evaluation process for IT systems. C2 is widely
>  acknowledged to be the highest evaluation rating that can be achieved by a
>  general-purpose operating system. The Windows NT 4.0 evaluation included
>  servers and workstations in six different roles, operating in both TCP/IP
>  networked and stand-alone modes.
>
> [snip]
>
> With links to NT3.5 evaulation reports, and dead links to the NT4.0 reports:
> "The following information regarding the C2 evaluation for Windows NT 4.0 is
> being posted on the appropriate web sites and will be available for review
> shortly."
>
> I can find NO reference to ANY of this at http://www.radium.ncsc.mil/tpep/
> or http://www.radium.ncsc.mil/tpep/epl/