Re: Penetration testing via shrinkware

Darren Reed (darrenrreed.wattle.id.au)
Tue, 22 Sep 1998 23:18:07 +1000 (EST)

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: John Grillo: "Re: Penetration testing via shrinkware"
• Previous message: Doug Hughes: "re: SUN RPC portmapper"
• In reply to: Sadofsky, Jerry: "re: SUN RPC portmapper"
• Next in thread: Joseph S. D. Yao: "Re: Penetration testing via shrinkware"

In some email I received from Paul D. Robertson, sie wrote:
[...]
> The Orange/Red Book criteria are the only real model for secure code
> development we have to work with. I don't think that we should throw the
> whole idea out because the implementation isn't ideal.

How about a "Visual Orange Book" application which builds you an officially
rated A1 through C3 secure operating system depending on which components
you link together in your workspace ? That's really reaching for the sky,
I suspect, in more ways than one.

Darren

• Next message: John Grillo: "Re: Penetration testing via shrinkware"
• Previous message: Doug Hughes: "re: SUN RPC portmapper"
• In reply to: Sadofsky, Jerry: "re: SUN RPC portmapper"
• Next in thread: Joseph S. D. Yao: "Re: Penetration testing via shrinkware"

This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:11:47 CDT