TCSEC/TNI/TDI Public Interpretations Database by Requirement

• About the IWG
• About the TCSEC/TNI/TDI Public Interpretations Database

Quickfinder:

Index:

• Audit (audit)
  • I-0004: Enforcement Of Audit Settings Consistent With Protection Goals
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    
  • I-0005: Action For Audit Log Overflow
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    
  • I-0006: Audit Of User-Id For Invalid Login
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    
  • I-0009: Audit Tools Are Part Of TCB
    (Withdrawn on 1996-05-02)
    
  • I-0043: Auditing Use Of Unnamed Pipe
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-19)
    
  • I-0047: Auditable actions of administrative users
    (Interpretations Board Reworked External Post in Interpretations Board Review on 1998-07-10)
    
  • I-0073: OK To Audit Decision Regardless Of Whether Action Completed
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    
  • I-0084: Audit Least Disruptive Action
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-07-12)
    
  • I-0172: Audit Of Imminent Security Violations
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-19)
    
  • I-0187: Auditing User ID On Failed Login Attempts (C1-CI-01-84)
    (Approved by TPEP Management on 1984-06-15; superseded by 0006 on 1993-10-20)
    
  • I-0208: Auditing Of ``Object Not Found'' (C1-CI-07-84)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1984-12-19)
    
  • I-0216: Meaning Of ``Selectively Audit'' (C1-CI-02-85)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1985-01-11)
    
  • I-0229: Editors As Audit Post Processing Tools
    (Withdrawn on 1996-05-02)
    
  • I-0242: Auditing And Imminent Violations (C1-CI-02-87)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1987-05-11)
    
  • I-0246: Action For Audit Log Overflow (C1-CI-01-89)
    (Approved by TPEP Management on 1989-01-09; superseded by 0005 on 1993-10-20)
    
  • I-0247: Boundaries And Documentation For Loss Of Audit Data (C1-CI-02-89)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1989-01-09)
    
  • I-0277: Audit of security database changes
    (Interpretations Board Reworked External Post in Interpretations Board Review on 1996-10-26)
    
  • I-0286: Auditing Unadvertised TCB Interfaces
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-18)
    
  • I-0328: Audit requirement for object deletion
    (Ready to Prepare for TPEP Management on 1996-04-15)
    
  • I-0335: User-generated audit records
    (Ready to Prepare for TPEP Management on 1996-04-15)
    

• Covert Channel Analysis (cca)
  • I-0113: Covert channel capacity limit policy
    (Sent to TPEP Management for Approval/Disapproval on 1997-01-15)
    
  • I-0218: No Distinction Between Storage And Timing Channels
    (Withdrawn on 1996-07-18)
    
  • I-0219: No Audit Necessary For Unauditable Channels
    (Withdrawn on 1996-07-18)
    
  • I-0221: Covert Channel Analysis Must Be Methodical, Repeatable, And Complete
    (Sent to TPEP Management for Approval/Disapproval on 1998-09-08)
    

• Configuration Management (cm)
  • I-0285: CM Comparison Source Or Object?
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-19)
    

• Compartmented Mode Workstation (cmw)
  • I-0262: Information Labels Are Acceptable Top/Bottom Markings In CMWs
    (Tabled on 1996-09-17)
    

• Discretionary Access Control (dac)
  • I-0002: Delayed Revocation Of DAC Access
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    
  • I-0020: DAC Authority For Assignment
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    
  • I-0053: Public Objects And DAC
    (Approved by TPEP Management and Mailed to Public Mailing List on 1995-01-12)
    
  • I-0205: Passwords Unacceptable For Discretionary Access Control (C1-CI-06-84)
    (Approved by TPEP Management on 1984-09-05; superseded by 0222 on 1994-12-05)
    
  • I-0220: Object Creator Need Not Have Capability To Specify DAC (C1-CI-03-85)
    (Approved by TPEP Management on 1985-01-15; superseded by 0020 on 1993-10-20)
    
  • I-0222: Passwords Not Acceptable For DAC
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-12-05)
    
  • I-0226: Initial Protection By Default (C1-CI-03-86)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1986-10-24)
    
  • I-0232: In Most Cases, There Must Be Discretion In DAC
    (Ready to Prepare for TPEP Management on 1998-07-08)
    
  • I-0250: Public Objects And DAC (C1-CI-03-89)
    (Approved by TPEP Management on 1989-01-09; superseded by 0053 on 1995-01-12)
    
  • I-0312: Set-ID And The DAC Requirement
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-19)
    

• Design Documentation (dd)
  • I-0036: Documentation Requirements For TCB Software Internals
    (Interpretations Board Reworked External Post in Interpretations Board Review on 1997-05-02)
    
  • I-0037: TCB software internals coverage at B2 and up
    (Interpretations Board Reworked External Post in Interpretations Board Review on 1997-09-17)
    
  • I-0190: Content Required In Educational Materials Used For Design Docs
    (Tabled on 1996-03-18)
    
  • I-0192: Interface Manuals As Design Documentation
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-19)
    
  • I-0193: Standard System Books As Design Documentation
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    

• Definition (def)
  • I-0025: Definition Of ``Named Objects''
    (Ready to Prepare for TPEP Management on 1998-05-22)
    
  • I-0066: Definition Of ``Communication Channel'' And ``Endpoint''
    (Ready to Prepare for TPEP Management on 1998-02-05)
    

• Device Labels (dl)
  • I-0007: Assigning Device Level Range
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    
  • I-0210: All Devices Must Possess Minimum And Maximum Labels (C1-CI-01-85)
    (Approved by TPEP Management on 1985-01-11; superseded by 0007 on 1993-10-20)
    

• Design Specification and Verification (dsv)
  • I-0068: Timing Of Security Policy Model Development
    (Ready to Prepare for TPEP Management on 1998-07-08)
    
  • I-0237: FTLS Must Accurately Describe TCB Operations (C1-CI-01-87)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1987-03-11)
    
  • I-0254: UNIX-Style Manual Pages As DTLS
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-12-05)
    

• Exportation of Labeled Information (eli)
  • I-0245: Auditability Of Label Changes For Devices/Comm. Channels (C1-CI-01-88)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1988-04-21)
    

• Exportation to Multilevel Devices (emld)
  • I-0204: Storage Of Labels On Multilevel Tapes (C1-CI-05-84)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1984-09-05)
    

• Identification and Authentication (ia)
  • I-0001: Delayed Enforcement Of Authorization Change
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-19)
    
  • I-0029: Permissible Probability Of Undetected Compromise
    (Tabled on 1996-08-08)
    
  • I-0096: Blanking Passwords
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-18)
    
  • I-0120: Additional Protection Required For Passwords
    (Ready to Prepare for TPEP Management on 1996-04-15)
    
  • I-0165: User Creation Of Processes Above The User's Clearance
    (Withdrawn on 1996-03-15)
    
  • I-0168: Job initiation under different identity
    (Withdrawn on 1995-02-02)
    
  • I-0186: I&A And The Operator Console (C1-CI-02-83)
    (Approved by TPEP Management on 1983-05-16; superseded by 0233 on 1986-12-11)
    
  • I-0225: Individual Accountability In A Server Environment (C1-CI-02-86)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1986-10-28)
    
  • I-0233: Operator Logon At System Console (C1-CI-04-86)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1986-12-11)
    
  • I-0234: One-Time Authentication Mechanisms Can Be Acceptable
    (Approved by TPEP Management and Mailed to Public Mailing List on 1995-07-11)
    
  • I-0240: Passwords May Be Used For Card Input
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    
  • I-0273: Auditing of Delayed Execution Jobs
    (Sent to TPEP Management for Approval/Disapproval on 1997-01-22)
    
  • I-0288: Actions Allowed Before I&A
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-18)
    
  • I-0314: Password Changes Do Not Require Authentication
    (Approved by TPEP Management and Mailed to Public Mailing List on 1995-07-11)
    
  • I-0326: Protecting passwords against exhaustive search
    (Withdrawn on 1997-04-11)
    
  • I-0332: Randomness of generated authentication
    (Ready to Prepare for TPEP Management on 1998-05-20)
    
  • I-0333: Interfaces for authentication
    (Tabled on 1995-05-31)
    

• Labeling Human Readable Output (lhro)
  • I-0022: One Set Of Banner Pages Around Multiple Outputs
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-19)
    
  • I-0039: Multilevel Printers And Page Labeling
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    
  • I-0040: Requirements For Overwrite Label Capability
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    
  • I-0080: Punch Card Output Must Be Labeled
    (Tabled on 1997-04-25)
    
  • I-0253: Default Page Marking Format
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-11-16)
    
  • I-0265: Should Banner Page Indicate Suppression Of Internal Labels
    (Withdrawn on 1996-07-18)
    
  • I-0269: Non-connected output effect
    (Withdrawn on 1996-05-03)
    
  • I-0275: Single-Level Printers And Page Labeling
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    
  • I-0334: Output Beginning/End Labels Required
    (Sent to TPEP Management for Approval/Disapproval on 1997-01-15)
    

• Mandatory Access Control (mac)
  • I-0003: Access Validation After Object Label Change
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-11-16)
    
  • I-0137: Definition Of ``Storage Objects'' For The Purposes Of MAC
    (Interpretations Board Reworked External Post in Interpretations Board Review on 1999-02-22)
    
  • I-0239: Subject Access Revocation After Change In User Clearance
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-19)
    

• Object Reuse (or)
  • I-0041: Object Reuse Applies To All System Resources
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-19)
    

• Other requirement (other)
  • I-0126: Source code access at C1-B1
    (Withdrawn on 1996-03-15)
    
  • I-0128: Use Of Comsec/Cryptography In Evaluated Products
    (Withdrawn on 1996-03-15)
    
  • I-0133: Requirements For Rating Maintenance
    (Withdrawn on 1996-03-15)
    
  • I-0228: Use of TNI vs TCSEC
    (Withdrawn on 1996-07-18)
    

• Evaluation Process (process)
  • I-0099: Listing Non-Evaluated Software In Evaluation Reports
    (Withdrawn on 1997-05-23)
    

• System Architecture (sa)
  • I-0044: Hardware Segmentation Of Internal TCB Data Not Required
    (Interpretations Board Reworked External Post in Interpretations Board Review on 1998-05-21)
    
  • I-0054: Support Code Need Not Meet All Architecture Requirements
    (Ready to Prepare for TPEP Management on 1998-09-03)
    
  • I-0114: Untrusted Programs Must Not Execute With Security-Relevant Privileges
    (Ready to Prepare for TPEP Management on 1998-02-06)
    
  • I-0140: Modularity Is For Understandability, Maintainability And Testability
    (Posted for External Review on 1998-10-27)
    
  • I-0142: Is Minimizing Trusted Processes Required At B2?
    (Withdrawn on 1996-07-18)
    
  • I-0183: Restrictions On Untrusted Programs In Low Assurance Products
    (Ready to Prepare for TPEP Management on 1998-09-03)
    
  • I-0213: Administrator Interface Is Part Of TCB
    (Approved by TPEP Management and Mailed to Public Mailing List on 1995-01-12)
    
  • I-0223: Software-Based Two-State Architectures Are Acceptable (C1-CI-04-85)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1985-06-01)
    

• Security Features User's Guide (sfug)
  • I-0244: Flexibility In Packaging SFUG
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    

• System Integrity (si)
  • I-0107: Only Security-Relevant Features Require System Integrity Tests
    (Ready to Prepare for TPEP Management on 1998-07-08)
    
  • I-0144: Availability Of Diagnostics
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-11-16)
    

• Subject Sensitivity Labels (ssl)
  • I-0048: Subject Sensitivity Labels With Access Class Range
    (Tabled on 1997-01-20)
    

• Security Testing (st)
  • I-0008: Testing Is Not Expected To Find All Flaws
    (Reposted for External Review on 1998-05-22)
    
  • I-0170: Functional Tests Required For Object Reuse
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-04-18)
    
  • I-0185: Security Testing And Denial Of Service (C1-CI-01-83)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1983-05-16)
    
  • I-0203: Accuracy Of Covert Channel Bandwidths Need Not Be Tested (C1-CI-02-84)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1984-06-15)
    
  • I-0336: Security Testing Must Be Comprehensive
    (Interpretations Board Reworked External Post in Interpretations Board Review on 1999-02-22)
    

• Test Documentation (tdoc)
  • I-0281: Testing System Architecture Functions
    (Approved by TPEP Management and Mailed to Public Mailing List on 1995-07-11)
    

• Trusted Facility Manual (tfman)
  • I-0046: Detailed Audit Record Structure
    (Approved by TPEP Management and Mailed to Public Mailing List on 1994-07-12)
    
  • I-0060: TFM Must Describe Network Security Architecture And Design
    (Ready to Prepare for TPEP Management on 1998-05-21)
    
  • I-0069: Flexibility In Packaging TFM
    (Approved by TPEP Management and Mailed to Public Mailing List on 1993-10-20)
    

• Trusted Facility Management (tfmgt)
  • I-0147: Administrator Role May Include Operator Functions
    (Approved by TPEP Management and Mailed to Public Mailing List on 1995-07-11)
    
  • I-0150: Administrator Role May Include Operator Functions (Revised)
    (Interpretations Board Reworked External Post in Interpretations Board Review on 1997-07-11)
    
  • I-0207: Separation Of Roles Using Trusted Path
    (Withdrawn on 1997-05-02)
    
  • I-0315: Restricted To Trusted Administrative Interface
    (Approved by TPEP Management and Mailed to Public Mailing List on 1995-01-12)
    

• Trusted Network Interpretation (tni)
  • I-0051: Meaning Of ``On Behalf Of'' In TNI M- And I- Components
    (Ready to Prepare for TPEP Management on 1998-05-21)
    

• Trusted Path (tp)
  • I-0076: At B2, Trusted Path Functions May Be Duplicated Outside Trusted Path
    (Ready to Prepare for TPEP Management on 1998-05-22)
    
  • I-0103: Trusted path not required for DAC changes
    (Interpretations Board Reworked External Post in Interpretations Board Review on 1997-07-09)
    
  • I-0191: Minimum Set Of Actions That Require Trusted Path
    (Ready to Prepare for TPEP Management on 1998-05-22)
    
  • I-0224: Trusted Path Not Required For DAC Actions (C1-CI-01-86)
    (Approved by TPEP Management and Mailed to Public Mailing List on 1986-10-26)
    
  • I-0302: Trusted Path Required For All Authentication
    (Approved by TPEP Management and Mailed to Public Mailing List on 1995-07-17)
    

• Trusted Recovery (tr)
  • I-0014: Meaning Of Trusted Recovery Below B3
    (Withdrawn on 1997-07-09)
    

Return to Index Selection Page

This page was generated on Fri Jun 30 12:29:08 2006.
Questions on this page, or comments on Database entries should be addressed to cc-cmt@nist.gov.
Flags are based on a comparison against information uploaded 2005-01-20-00:00