Another Question

Author

Another Question

Williamd000
Member
M

Registered: Aug 2001
Location: USA
Country: United States
State:
Certifications: MCP ( Windows 2000 Pro ) and Security+
Working on: CEH, CISSP, MCSA + Security

Total Posts: 55

Another Question

Hi Heres another question.
The defacto IT security evaluation criteria for the international community is called?
1- Common Criteria
2- Global Criteria
3- TCSEC
4- ITSEC

I believe its 1.

Report this post to a moderator

03-25-03 04:00 PM

Click here to Send Williamd000 a Private Message

IP: Logged

rlrouns
Member

Registered: Aug 2000
Location: Coral Springs
Country: US
State:
Certifications: SANS GSEC, IBM Server Expert, CCNA, SANS Win2k Gold Standard, MCSE, Linux+, Security+
Working on: GCWN, CISSP

Total Posts: 235

You are correct. Here is a link to the common criteria page: http://csrc.nist.gov/cc/index.html

Report this post to a moderator

03-25-03 05:44 PM

Click here to Send rlrouns a Private Message

IP: Logged

RussS
radical dood
M

Registered: Sep 2002
Location: Hamilton
Country: New Zealand (Aotearoa)
State:
Certifications: MCP W2K Pro & Server, A+, Net+, NZQA L3 Computing
Working on: Security+, MCSA, Linux+

Total Posts: 955

Snap :-)

__________________
Go hard or go home!

Report this post to a moderator

03-25-03 07:34 PM

Click here to Send RussS a Private Message

IP: Logged

Hacker
Moderator

Registered: Nov 2000
Location: USA
Country: United States
State:
Certifications:
Working on:

Total Posts: 382

Yes, CC is used. Previously, it was the Orange Book, part of the Rainbow Series. For example, Cyberguard (www.cyberguard.com) uses CC to benchmark its firewalls.

__________________
FREE certification support from our many Certified Experts here!

Report this post to a moderator

04-11-03 12:19 AM

Click here to Send Hacker a Private Message

IP: Logged

gat0r
Senior Member
M

Registered: Apr 2003
Location:
Country: United States
State:
Certifications: CISSP, C|EH, A+, Network+, Security+, MCP Server 2003
Working on: Linux+ & CCNA

Total Posts: 109

that question was on the test i took this week.

Report this post to a moderator

04-23-03 01:47 AM

Click here to Send gat0r a Private Message

IP: Logged

Burneweb
Junior Member
M

Registered: Mar 2001
Location:
Country: USA
State:
Certifications: A+, Net +, MCPx3, MCSA
Working on: MCSE W2K, W2K3, Security +, CCNA

Total Posts: 18

Actually, I believe it is ITSEC

http://216.239.37.100/search?q=cache:B569Tf8FdZcJ:www.bsi.de/zertifiz/itkrit/itsec-en...&hl=en&ie=UTF-8

and

niap.nist.gov/CRCchapter.PDF

The "international" defacto standard is ITSEC

which means Information Technology Security Evaluation Criteria

Report this post to a moderator

05-22-03 03:44 PM

Click here to Send Burneweb a Private Message

IP: Logged

Burneweb
Junior Member
M

Registered: Mar 2001
Location:
Country: USA
State:
Certifications: A+, Net +, MCPx3, MCSA
Working on: MCSE W2K, W2K3, Security +, CCNA

Total Posts: 18

Actually, I believe it is ITSEC

http://216.239.37.100/search?q=cache:B569Tf8FdZcJ:www.bsi.de/zertifiz/itkrit/itsec-en...&hl=en&ie=UTF-8

and

http://niap.nist.gov/CRCchapter.PDF

The "international" defacto standard is ITSEC

which means Information Technology Security Evaluation Criteria

Report this post to a moderator

05-22-03 03:52 PM

IP: Logged

Burneweb
Junior Member
M

Registered: Mar 2001
Location:
Country: USA
State:
Certifications: A+, Net +, MCPx3, MCSA
Working on: MCSE W2K, W2K3, Security +, CCNA

Total Posts: 18

Actually, I believe it is ITSEC

http://216.239.37.100/search?q=cache:B569Tf8FdZcJ:www.bsi.de/zertifiz/itkrit/itsec-en...&hl=en&ie=UTF-8 (You may have to cut and paste this URL)

and

http://niap.nist.gov/CRCchapter.PDF

The "international" defacto standard is ITSEC

which means Information Technology Security Evaluation Criteria

Report this post to a moderator

05-22-03 03:53 PM

IP: Logged

azimuth40
Senior Member

Registered: Jun 2002
Location:
Country: USA
State: CA
Certifications: A+, Net+, iNet+, Server+
Working on: MCSA, CCNA

Total Posts: 2073

Re: Actually, I believe it is ITSEC

quote:
Originally posted by Burneweb
http://216.239.37.100/search?q=cache:B569Tf8FdZcJ:www.bsi.de/zertifiz/itkrit/itsec-en...&hl=en&ie=UTF-8 (You may have to cut and paste this URL)

and

http://niap.nist.gov/CRCchapter.PDF

The "international" defacto standard is ITSEC

which means Information Technology Security Evaluation Criteria

There is conflicting info here and it looks like ITSEC was superceeded. There was never an "international" defacto standard, there were five separate standards and ITSEC was the Euoropean standard; CC is the merging of the five standards. ITSEC was done in 1991, CC started in 1993 and everyone signed off in 1997-1998. This URL will give you the entire history of how we arrive at Common Critera.

http://www.commoncriteria.org/cc/part1/part1a.html

and further at

http://www.commoncriteria.org/docs/origins.html

and here

http://www.commoncriteria.org/faq/faq.html

You can get a users guide in acrobat format here

http://www.commoncriteria.org/intro...iews/index.html

Report this post to a moderator

05-22-03 05:02 PM

Click here to Send azimuth40 a Private Message

IP: Logged

Burneweb
Junior Member
M

Registered: Mar 2001
Location:
Country: USA
State:
Certifications: A+, Net +, MCPx3, MCSA
Working on: MCSE W2K, W2K3, Security +, CCNA

Total Posts: 18

Ok, I see. As many posters have said, the wording of these questions are tricky. I think the best way to have stated this question would be "The Current Defacto ..."

Thanks for the info.

~Burneweb~

Report this post to a moderator

05-22-03 05:07 PM

IP: Logged