Loading…
Security test and evaluation for multilevel-mode accreditation: Lessons learned
MITRE's experience and lessons learned in performing security test and evaluation (ST&E) for SPADOC 4B are described. ST&E drew on contractual testing but involved extensive government testing of the system. ST&E included testing in a representative stressed environment and in failu...
Saved in:
Main Authors: | , , , |
---|---|
Format: | Conference Proceeding |
Language: | English |
Subjects: | |
Online Access: | Request full text |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
Summary: | MITRE's experience and lessons learned in performing security test and evaluation (ST&E) for SPADOC 4B are described. ST&E drew on contractual testing but involved extensive government testing of the system. ST&E included testing in a representative stressed environment and in failure situations. ST&E also involved verification of safeguards from security disciplines other than COMPUSEC, including procedural and physical security. SPADOC 4B has been accredited to operate in multilevel mode.< > |
---|---|
DOI: | 10.1109/CSAC.1992.228235 |