James Sutherland wrote:
> Do you have a WWW page for your project, BTW, summarising the criteria
> you're aiming for, the changes needed etc?
--- Documents are being written concurrent to development, though we hope to have some documentetation on OSS within a few weeks.To see the CAPP and LSPP (Controlled Access and Labeled Security Protection Profiles, see:
http://commoncriteria.org/protection_profiles/pp.html
Of the most interest -- skip to the Functional Requirements. That is the driving spec of 'features' needed for each. Effective Assurance requirements are docs required, code control requirements, fault remediation, testing required, formal or informal models, proof of model, mapping of OS onto modeletc -- i.e. all the paper work/administrative stuff ( sizeable requirements, but technically not very interesting). Note that a kludgy or complex implementation of the requirements may require alot more work at the 'proof' stage.
-linda
-- Linda A Walsh | Trust Technology, Core Linux, SGI law@sgi.com | Voice: (650) 933-5338
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Mon May 15 2000 - 21:00:14 EST