Factbites
 Where results make sense
About us   |   Why use us?   |   Reviews   |   PR   |   Contact us  

Topic: CTCPEC


Related Topics
Apt
ISO
Ziz

In the News (Wed 23 Dec 09)

  
  CTCPEC - Wikipedia, the free encyclopedia
CTCPEC is the Canadian Trusted Computer Product Evaluation Criteria.
It is a computer security standard published in 1993 by the Communications Security Establishment to provide an evaluation criteria on IT products.
CTCPEC, ITSEC and TCSEC have been large superseded by the Common Criteria standard.
en.wikipedia.org /wiki/CTCPEC   (100 words)

  
 [No title]
CTCPEC: Exactly the same as the TCSEC but for a potentially larger set of policies, i.e., evidence that some specified security policy is correctly implemented using the reference monitor concept.
One person noted that the CTCPEC at one time had a component concept for assurance requirements, but removed it in favor of complete sets of assurance require- ments due to its complexity.
It was noted, however, that the CTCPEC's components were targeted at vendors, evaluators, and system procurers whereas the FC's compo- nents are targeted at profile writers and approvers (with the presumption that this latter audience was smaller and more sophisticated).
csrc.nist.gov /nistgen/fcprocs.txt   (21208 words)

  
 [No title]
Its approach was to specify both security functional requirements and assurances and place only the essential limits on their combination.
Although no explicit distinctions of this sort are made in the TCSEC, FC, or CTCPEC, the distinctions have been recognised in practice (although without the implications regarding evaluation requirements, as in the ITSEC).
Therefore, identification of the elements of the TCB defines the limit of what must be evaluated in order to reach supportable conclusions about the attributes and behaviour of the system.
chacs.nrl.navy.mil /cc/rationale.ascii   (7309 words)

  
 Common Criteria FAQ
The CTCPEC was published to define a set of technical hardware/firmware/software criteria for trusted products which is consistent with the Security Policies and Information Technology Security Standards under development by the Government of Canada.
CTCPEC included evaluation assurance levels T-0 through T-7, with T-7 being the highest level of assurance and T-0 being the lowest.
ITSEC), was published by France, Germany, the Netherlands and the United Kingdom in May of 1990 which derived from the previous computer security standards developed by each respective country.
www.cceval.com /faq.htm   (2084 words)

  
 Common Criteria - Wikipedia, the free encyclopedia
The CC originated out of three standards -- ITSEC, a European standard, developed in the early 1990s by France, Germany, the Netherlands, the UK and also used by some other countries, e.g.
Australia; TCSEC (also called the "Orange Book"), the US standard, and CTCPEC, the Canadian standard.
CC was produced by unifying these pre-existing standards, so that companies selling computer products for defence or intelligence use would only need to have them evaluated against one set of standards.
en.wikipedia.org /wiki/Common_Criteria   (1376 words)

  
 DSV --- Magisteruppsatser 1994 abstracts   (Site not responding. Last check: 2007-10-23)
Future studies - specially on the collaborative applications like work flow or action management applications - should be conducted, since the experiences of Notes were rather short and, in some cases, limited amongst the interviewed organizations.
Certificates can be issued by national agencies, which might delegate the evaluation and the authorship of evaluation reports to accredited test houses (Commercially Licensed Evaluation Facilities).
The objective of this paper is to survey the security products marketed in Sweden with the intention of studying how they can provide facilities to construct secure application systems.
www.dsv.su.se /publikationer/Masters-1994.html   (1141 words)

  
 [No title]
The bulletin also publicly acknowledged that the Canadian CTCPEC and the European ITSEC contained similar requirements.
The NIST bulletin recognized that, while full equivalency among these three criteria was not easy to establish, enough similarities existed to recommend the use of low- level assurance products evaluated under any of them.
Part 3 presents the seven Evaluation Assurance Levels (EALs), which are predefined packages of assurance components that make up the CC scale for rating confidence in the security of IT products and systems.
csrc.nist.gov /publications/nistbul/itl98-11.txt   (4083 words)

  
 [No title]   (Site not responding. Last check: 2007-10-23)
Under the CTCPEC, the C2 Functionality Profile with assurance T1 is similar to TCSEC C2.
During evaluations against both the TCSEC and CTCPEC, the evaluators are closely involved in documenting the design of a product in addition to validating it.
In the case of application evaluations, the underlying operating system and hardware must also be included in the evaluation or have been previously evaluated under the TCSEC or CTCPEC respectively.
ftp.sunet.se /pub/security/csir/nist/nistbul/csl96-04.txt   (1427 words)

  
 A Common Criteria Project
Initially, progress was slow within WG3 because of the extensive amount of work and intensive multilateral negotiations required.
In June 1993, the sponsoring organisations of the CTCPEC, FC, TCSEC and ITSEC (which are identified in the next subclause) pooled their efforts and began a joint activity to align their separate criteria into a single set of IT security criteria that could be widely used.
Its purpose was to resolve the conceptual and technical differences found in the source criteria and to deliver the results to ISO as a contribution to the international standard under development.
www.cygnacom.com /labs/cc_assurance_index/CCinHTML/PART1/PART1A.HTM   (728 words)

  
 [No title]
At present there is no generally accepted standard set of criteria that voting systems are required to satisfy.
This paper proposes a generic set of criteria similar in concept to existing security criteria such as the U.S. TCSEC (the Orange Book, TNI, TDI, etc.), the European ITSEC, the Canadian CTCPEC, and the draft U.S. Federal Criteria.
We observe that essentially all existing voting systems would fail to satisfy even the simplest of the existing criteria.
www.csl.sri.com /users/neumann/ncs93.html   (2815 words)

  
 Network Computing O4-Q1 Press Resources   (Site not responding. Last check: 2007-10-23)
Pluggable authentication modules provide failed-login account locking, trusted-path checking, and machine generated passwords, without the need to change code.
Independent Certification: The Common Criteria project harmonizes the various evaluation criteria, ITSEC, CTCPEC (Canadian criteria), and United States Federal Criteria (FC), to replace national and regional criteria with a worldwide set acceptable to the International Standards Organization (ISO).
If any of the five areas above give you an uneasy feeling, it is time to take a deeper look beneath the surface.
www.sun.com /aboutsun/media/features/vos_foundation.html   (611 words)

  
 Computer Security Evaluation FAQ, Version 2.1
In the case of the ITSEC, it is recommended that if an appropriate C2 rated product is not available, that ITSEC rated FC2/E2 products be used.
In the case of the CTCPEC, it is recommended that if an appropriate C2 rated product is not available, that CTCPEC products rated with a C2 functionality profile and T1 assurance be used.
The Common Criteria (CC) occasionally (and somewhat incorrectly) referred to as the Harmonized Criteria, is a multinational effort to write a successor to the TCSEC and ITSEC that combines the best aspects of both.
www.faqs.org /faqs/computer-security/evaluations   (7331 words)

  
 Operations Security
An EAL can be considered a level of confidence in the security functions of an IT product or system.
The EALs have been developed with the goal of preserving the concepts of assurance drawn from the source criteria, such as the Trusted Computer System Evalation Criteria (TCSEC), Information Technology Security Evaluation Criteria (CTCPEC), so that results of previous evaluations remain relevant.
EAL levels 2-7 are generally equivalent to the assurance portions of the TCSEC C2-A1 scale, although exact TCSEC mappings do not exist.
gaia.ecs.csus.edu /~dsmith/security/fall03-2/right6.html   (211 words)

  
 CTCPEC   (Site not responding. Last check: 2007-10-23)
It is a computer security standard comparable to the American TCSEC_("Orange Book") but somewhat more advanced.
it uses material from the wikipedia article "CTCPEC"
Millions of Congolese vote in historic elections Unison.ieCongolese vote to end years of war and chaos ReutersNewsday - Washington Times - Cape Argus (subscription) - Washington Post - all 860 related more
www.33beat.com /CTCPEC.html   (492 words)

  
 Security: Standards
Japan and Australia are expected to quickly join the group.
The CC replaces the European ITSEC, the US TCSEC (Orange Book) and the Canadian CTCPEC.
For more information about evaluations using the Common Criteria using IBM's Commercial Evaluation facility, contact Bob Finlay at (44)-1252-805334 or send email to: BFINLAY@dsl.uk.ibm.com.
www.ibm.com /security/standards/st_cc.shtml   (195 words)

  
 Untitled
The Orange Book [249]) and the ensuing Rainbow Books, to the 1990 Canadian Trusted Computer Product Evaluation Criteria (CTCPEC, [64]), and the 1991 Information Technology Security Evaluation Criteria (ITSEC, [116]).
These efforts have resulted in an international effort to produce the Common Criteria framework (ISO 15408 [172]), which represents the current state of the art in that particular evolutionary process.
These impediments to composability can arise essentially everywhere throughout the development life cycle -- for example, incompatibilities among different requirements and policies, undesirable interact
www.sdl.sri.com /users/neumann/chats4.html   (13250 words)

  
 PKI Certifications - Entrust Authority Security Manager
Where are relevant CC resources found on the web?
The Common Criteria, which has become ISO standard 15408 in 1999, is an alignment and development of a number of source IT security evaluation criteria including existing European (ITSEC), US (TCSEC - Orange Book) and Canadian (CTCPEC).
The CC allows comparisons to be made between the results of independent security evaluations.
www.entrust.com /public-key-infrastructure/commoncriteria.htm   (1228 words)

  
 [No title]   (Site not responding. Last check: 2007-10-23)
The Trusted Computer System Evaluation Criteria was referred to as "The Orange Book".
Used in the United States Canada used their own CTCPEC Europe and several other countries used the competing ITSEC standard.
C1 requires user log-on, but allows group ID. C2 requires individual log-on with password and an audit mechanism.
ils.unc.edu /~brunkb/inls187/notes/16_Sept_Policy.ppt   (1103 words)

  
 Leveling the Security Products Playing Field
Thanks to ongoing international efforts, that metric exists today and is shaping how you''ll purchase security systems tomorrow.
The Common Criteria (CC), commonly known as ISO 15408, combines the best features of the United States'' Trusted Computer Security Evaluation Criteria (TCSEC, aka NSA''s Orange Book) with the European''s Information Technology Security Evaluation Criteria (ITSEC) and the Canadian Trusted Computer Product Evaluation Criteria (CTCPEC), synergized into a new, single international standard.
The CC is also an acronym-lovers dream come true!
www.ecommerce-guide.com /news/trends/print.php/10535_136791   (254 words)

  
 Nathan Ashelman | Reading | Network Security   (Site not responding. Last check: 2007-10-23)
NIPC (National Infrastructure Protection Center) of the FBI
Common Criteria, IT security certification criteria representing a unification of the standards of the US Federal Criteria (FC), Canadian Criteria (CTCPEC), and European ITSEC see also
ITSEC, the harmonized security criteria of UK, Germany, France, Netherlands
www.ashelman.net /reading/security.html   (210 words)

  
 Trusted Solaris Operating System - Technical FAQs
Information Technology Security Evaluation Criteria from the United Kingdom See the ITSEC web site for more information.
The Common Criteria project harmonizes the various evaluation criteria, ITSEC, CTCPEC (Canadian criteria), and United States Federal Criteria (FC), to replace national and regional criteria with a worldwide set acceptable to the International Standards Organization (ISO).
Would you recommend this Sun site to a friend or colleague?
www.sun.com /software/solaris/trustedsolaris/ts_tech_faq/faqs/cc_itsec.xml   (123 words)

Try your search on: Qwika (all wikis)

Factbites
  About us   |   Why use us?   |   Reviews   |   Press   |   Contact us  
Copyright © 2005-2007 www.factbites.com Usage implies agreement with terms.