Harvey Newstrom CISSP CISA CISM CGEIT CSSLP CRISC CIFI NSA-IAM ISSAP ISSMP ISSPCS IBMCP TCSEC Rainbow Series Tech. Reports

The Trusted Computer System Evaluation Criteria (TCSEC), also known as the Orange Book, is a set of security features and assurances that were engineered to support the security policies of the U.S. Department of Defense to enforce confidentiality of data.

The Rainbow Series contains the Orange Book as well as other books which provide additional guidance and interpretations for TCSEC:

C1 Technical Report 001, Computer Viruses: Prevention, Detection, and Treatment

C1 Technical Report 79-91, Integrity in Automated Information Systems

C1 Technical Report 32-92, The Design and Evaluation of INFOSEC systems: The Computer Security Contribution to the Composition Discussion

C1 Technical Report 111-91, Integrity-Oriented Control Objectives: Proposed Revisions to the TCSEC

NCSC Technical Report 002, Use of the TCSEC for Complex, Evolving, Multipolicy Systems

NCSC Technical Report 003, Turning Multiple Evaluated Products into Trusted Systems

NCSC Technical Report 004, A Guide to Procurement of Single Connected Systems -- Language for RFP Specifications and Statements of Work -- An Aid to Procurement Initiators -- Includes Complex, Evolving and Multipolicy Systems

NCSC Technical Report 005 Volume 1/5, Inference and Aggregation Issues in Secure Database Management Systems

NCSC Technical Report 005 Volume 2/5, Entity and Referential Integrity Issues in Multilevel Secure Database Management

NCSC Technical Report 005 Volume 3/5, Polyinstantiation Issues in Multilevel Secure Database Management Systems

NCSC Technical Report 005 Volume 4/5, Auditing Issues in Secure Database Management Systems

NCSC Technical Report 005 Volume 5/5, Discretionary Access Control Issues in High Assurance Secure Database Management Systems

Contact Us for a proposal!