Skip to main content

Computers at Risk Safe Computing in the Information Age (1991) / Chapter Skim
Currently Skimming:

A The Orange Book
Pages 241-245

The Chapter Skim interface presents what we've algorithmically identified as the most significant single chunk of text within every page in the chapter.
Select key terms on the right to highlight them within pages of the chapter.


From page 241...
... Appendixes
Read the entire page →
From page 243...
... · The Orange Book process combines published system criteria with system evaluation and rating (relative to the criteria) by the staff of the National Computer Security Center.
Read the entire page →
From page 244...
... The TCB interface is well-defined and the TCB design and implementation enable it to be subjected to more thorough testing and more complete review. Authentication mechanisms are strengthened, trusted facility management is provided in the form of support for system administrator and operator functions, and stringent configuration management controls are imposed.
Read the entire page →
From page 245...
... It has been codified as a military standard, making it a requirement for defense systems, and its dissemination has been directed largely to major vendors of centralized systems, notably vendors who are or who supply government contractors. Because of its shortcomings, which have been debated in the computer security community for several years, the Orange Book must be regarded as only an interim stage in the codification of prudent protection practices.
Read the entire page →

Key Terms

  • security policy
  • evaluation criteria
  • trusted computer
  • access control
  • configuration management

  • stringent configuration
  • discretionary security
  • computer security
  • policy model
  • tcb design

  • mandatory access
  • development analysis
  • controls capable
  • providing separation
  • security community

  • formal security
  • named subjects
  • discretionary access
  • additional architectural
  • computer manufacturers

  • data labeling
  • defense trusted
  • management controls
  • analysis derived
  • implementation directed

  • trusted facility
  • functionally equivalent
  • correctly implemented
  • literally answer
  • weak support


    • This material may be derived from roughly machine-read images, and so is provided only to facilitate research.
    More information on Chapter Skim is available.