NCSC-TG-006-88 -- A GUIDE TO UNDERSTANDING CONFIGURATION MANAGEMENT IN TRUSTED SYSTEMS

NCSC has announced a different "interpretation" of Orange Book. These descriptions clarify Orange Book requirements for specific system components. For example, NCSC's "Trusted Network Interpretation Criteria for Trusted Computer System Evaluation Criteria" or "Red Book" is an interpretation of Orange Book's security requirements as it applies to network components of security systems . The Redbook does not change the requirements, it only shows how the network system should operate to meet the Orange Book requirements of the C2 security system. C2 security is required in many US government facilities, but its value extends to all organizations that place importance on information security.

The National Computer Security Center (NCSC) of the US Department of Defense describes the requirements of the C2 security system in the publication "Computer System Evaluation Criteria" (also called "Orange Book"). All systems, whether network operating systems or standalone operating systems, are evaluated according to the standards specified in the Orange Book. Windows NT Server was originally designed to meet the requirements of Orange Book of NCSC. Microsoft and NCSC work closely together throughout the development process to ensure that both Windows NT Workstation and Windows NT Server meet government requirements for C2 security systems.

A trusted operating system is a special version of a commercially available operating system such as Windows NT or Unix. IT administrators may use a trusted version of Windows NT on a Web server that contains sensitive information or is linked to it. Trusted operating systems, however, are usually more difficult to learn and manage than standard versions. For example, a system administrator may think that an application has crashed, since the trusted operating system can seal the application to an unsafe "isolated zone", but in reality he will monitor it I do not have permission. And because they allocate administrative authority among many people, support staff needs more adjustment than before. "I keep on head every day," Calco said, "What happened here?"