Data Protection and Security

VI

Operating System Security and Secure Programming

VI.III

Security Evaluation

Orange Book:

Although the efforts were concentrated in the “national security” sector, the document also provides:

• A yardstick for users to assess the degree of trust that can be placed in a computer security system.
• Guidance for manufacturers of computer security systems.
• A basis for specifying security requirements when acquiring a computer security system.