[olug] NSA XP manual

[Sean Edwards]

When Windows NT first came out, Microsoft was toting
D.O.D. C3 security rating.  However, they never
mentioned it was the D.O.D. Orange Book.  They were
doing this because Novell's NDS was toting (and I
believe still does) D.O.D. Red Book C3.

The difference is Red Book C3 is secure enough to do
financial transactions across the Publicly Switched
Telephone Network (i.e. WAN), and Orange Book C3 means
secure enough to do financial transactions over a
Campus Network (no Public Switched Telephone Network).

It has been a couple of years since I have been
involved with security, but does anybody know if the
above is still true?  Are there D.O.D. standards and
ratings for OpenSource projects, like Linux and
OpenLDAP?

-=Sean Edwards=-
cybersean3000 at yahoo.com


--- VHP3 <vhpascale3 at yahoo.com> wrote:
> I found it as a PDF a while back and downloaded a
> copy
> for myself.  Haven't had a chance to look over it
> and
> last I saw, it was 140-some pages.  But the NSA also
> has a bunch of other security related docs for
> download on their site as well.  One of them was
> required reading for a security course I took a
> while
> back
> 
> Vince
> 
> > Just got a copy of the NSA Windows XP security
> > manual.  1.7MB Zip
> > archive at
> > http://www.nsa.gov/snac/winxp/download.htm.
> 
> 
> =====
> "Thanks to the Condo Kings there's cable now in
> Zombietown."
> 
> 
> __________________________________
> Do you Yahoo!?
> New Yahoo! Photos - easier uploading and sharing.
> http://photos.yahoo.com/
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> http://lists.olug.org/mailman/listinfo/olug


__________________________________
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/