5 ms·
Instead of telling you what they recommended, I'm going to give you my modern list instead of assurance activities that could be considered for the next evaluat
by nickpsecurity 10y ago
Instead of telling you what they recommended, I'm going to give you my modern list instead of assurance activities that could be considered for the next evaluation scheme. Orange Book had a subset of these. I pulled from the whole field to get a larger list.
https://lobste.rs/s/mhqf7p/static_typing_will_not_save_us_from_broken/comments/d7gega#c_d7gega https://lobste.rs/s/mhqf7p/static_typing_will_not_save_us_fr...
The two summaries of the history of successes and problems in TCSEC are here:
http://lukemuehlhauser.com/wp-content/uploads/Bell-Looking-Back-Addendum.pdf http://lukemuehlhauser.com/wp-content/uploads/Bell-Looking-B...
https://www.acsac.org/2004/papers/ClassicPaperSchafer.pdf https://www.acsac.org/2004/papers/ClassicPaperSchafer.pdf