Loading…

Security test and evaluation for multilevel-mode accreditation: Lessons learned

MITRE's experience and lessons learned in performing security test and evaluation (ST&E) for SPADOC 4B are described. ST&E drew on contractual testing but involved extensive government testing of the system. ST&E included testing in a representative stressed environment and in failu...

Full description

Saved in:
Bibliographic Details
Main Authors: Bodeau, D.J., Brusil, N.R., Chang, I.N., Reece, M.J.
Format: Conference Proceeding
Language:English
Subjects:
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:MITRE's experience and lessons learned in performing security test and evaluation (ST&E) for SPADOC 4B are described. ST&E drew on contractual testing but involved extensive government testing of the system. ST&E included testing in a representative stressed environment and in failure situations. ST&E also involved verification of safeguards from security disciplines other than COMPUSEC, including procedural and physical security. SPADOC 4B has been accredited to operate in multilevel mode.< >
DOI:10.1109/CSAC.1992.228235