[83412] in North American Network Operators' Group
Re: Cisco crapaganda (Modified by Jason Chambers)
daemon@ATHENA.MIT.EDU (Jason Chambers)
Sat Aug 13 08:54:04 2005
Cc: nanog@merit.edu
From: Jason Chambers <jchambers@cenic.org>
Date: Sat, 13 Aug 2005 04:17:03 -0700
To: Michael.Dillon@btradianz.com
Errors-To: owner-nanog@merit.edu
On Aug 10, 2005, at 05:53, Michael.Dillon@btradianz.com wrote:
>> Also, what about DoD Orange Book certification? Can this kind of
>> testing methodology be applied to routing systems as well, such as
>> IOS?
>
> I don't claim to fully understand Orange Book but it seems to
> me that one of the essences of Open Source is the process of
> certification.
<--snip-->
> To learn more about the Orange book, look here
> http://www.dynamoo.com/orange/
In relation to the Orange Book,
There is a evaluation program available, named TPEP, links are below.
Very interesting and intense.
Yes, routing systems \ IOS applies. See 1.3 TPEP Process Overview at
http://www.radium.ncsc.mil/tpep/process/procedures.html
I chatted briefly with a fed @ Defcon about this program, specifically
about work to make this achievement something [buzzword warning]
"Critical Infrastructure" and the well known software manufacturers
would look to engage in \ use. Maybe by way of public forums such as
this is that accomplished. In labels we trust.
http://www.radium.ncsc.mil/tpep/index.html
http://www.radium.ncsc.mil/tpep/tpep.html
http://www.radium.ncsc.mil/tpep/process/faq-sect6.html#Q8
-Jason
