Re: Question about assurance?

[Park Lee <parklee_sel@xxxxxxxxx>]

On Mon, 06 Jun 2005 at 10:24, Stephen Smalley wrote:
> On Sun, 2005-06-05 at 09:39 -0700, Park Lee wrote:
>> Hi,
>>  
>> In "5.1 Architecture Overview" of¡¶The Flask 
>> Security Architecture: System Support for Diverse 
>> Security Policies¡·, It says:
>> 
>> "Secondary goals for the architecture include
>> application transparency, defense-in-depth, ease 
>> of assurance, and minimal performance impact".
>> 
>> Here, Is the meaning of word "assurance" the same 
>> as the meaning of "assurance" of "Security 
>> assurance" in  ISO/IEC15408 (i.e. Information 
>> technology - Security techniques --Evaluation 
>> criteria for IT security)? 
>
> Yes.

Yesterday, "Lorenzo Hernández García-Hierro"
<lorenzo@xxxxxxx> wrote on the list for the issue as
the following:
"At least for me, that part means that you can easily
implement information assurance models on top of the
Flask architecture,..."


Then, Is the meaning of word "assurance" in
"information assurance models" the same as the meaning
of "assurance" of "Security assurance" in CC ?  
But, I think they are 2 different things. Then, Does
Lorenzo misunderstand the word "assurance" in "ease
of assurance" in my question ? 

> http://www.nsa.gov/selinux/papers/inevitability/#2

It can not be open, why?


Thanks a lot.

Best Regards,
Park Lee


		
__________________________________ 
Discover Yahoo! 
Get on-the-go sports scores, stock quotes, news and more. Check it out! 
http://discover.yahoo.com/mobile.html

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.