释义 |
DictionarySeeCDOrange Book
Orange Book (security, standard)A standard from the US GovernmentNational Computer Security Council (an arm of theU.S. National Security Agency), "Trusted Computer SystemEvaluation Criteria, DOD standard 5200.28-STD, December 1985"which defines criteria for trusted computer products. Thereare four levels, A, B, C, and D. Each level adds morefeatures and requirements.
D is a non-secure system.
C1 requires user log-on, but allows group ID.
C2 requires individual log-on with password and an auditmechanism. (Most Unix implementations are roughly C1, andcan be upgraded to about C2 without excessive pain).
Levels B and A provide mandatory control. Access is based onstandard Department of Defense clearances.
B1 requires DOD clearance levels.
B2 guarantees the path between the user and the securitysystem and provides assurances that the system can be testedand clearances cannot be downgraded.
B3 requires that the system is characterised by a mathematicalmodel that must be viable.
A1 requires a system characterized by a mathematical modelthat can be proven.
See also crayola books, book titles.orange book
Orange Book Graduate education-UK A guide to specialist registrar training issued by NHSE, for doctors who entered training programmes before 2007. Medspeak-US A document produced by the US Government Printing Office, which identifies FDA-approved brand medications and generic bioequivalents.orange bookThe "Approved Drug Products with Therapeutic Equivalence Evaluations" published by the U.S. Food and Drug Administration in both bound and electronic formats.ThesaurusSeeCd |