TCSEC/TNI/TDI Public Interpretations Database by Stage

• About the IWG
• About the TCSEC/TNI/TDI Public Interpretations Database

Quickfinder:

• Stage 410: Posted for External Review
• Stage 420: Reposted for External Review
• Stage 430: Interpretations Board Reworked External Post in Interpretations Board Review
• Stage 450: Ready to Prepare for TPEP Management
• Stage 470: Sent to TPEP Management for Approval/Disapproval
• Stage 510: Approved by TPEP Management and Mailed to Public Mailing List
• Stage 520: Formally Superseded
• Stage 600: Withdrawn
• Stage 610: Tabled

Index:

• Posted for External Review (410)
  • I-0140: Modularity Is For Understandability, Maintainability And Testability
    (1998-10-27)
    

• Reposted for External Review (420)
  • I-0008: Testing Is Not Expected To Find All Flaws
    (1998-05-22)
    

• Interpretations Board Reworked External Post in Interpretations Board Review (430)
  • I-0036: Documentation Requirements For TCB Software Internals
    (1997-05-02)
    
  • I-0037: TCB software internals coverage at B2 and up
    (1997-09-17)
    
  • I-0044: Hardware Segmentation Of Internal TCB Data Not Required
    (1998-05-21)
    
  • I-0047: Auditable actions of administrative users
    (1998-07-10)
    
  • I-0103: Trusted path not required for DAC changes
    (1997-07-09)
    
  • I-0137: Definition Of ``Storage Objects'' For The Purposes Of MAC
    (1999-02-22)
    
  • I-0150: Administrator Role May Include Operator Functions (Revised)
    (1997-07-11)
    
  • I-0277: Audit of security database changes
    (1996-10-26)
    
  • I-0336: Security Testing Must Be Comprehensive
    (1999-02-22)
    

• Ready to Prepare for TPEP Management (450)
  • I-0025: Definition Of ``Named Objects''
    (1998-05-22)
    
  • I-0051: Meaning Of ``On Behalf Of'' In TNI M- And I- Components
    (1998-05-21)
    
  • I-0054: Support Code Need Not Meet All Architecture Requirements
    (1998-09-03)
    
  • I-0060: TFM Must Describe Network Security Architecture And Design
    (1998-05-21)
    
  • I-0066: Definition Of ``Communication Channel'' And ``Endpoint''
    (1998-02-05)
    
  • I-0068: Timing Of Security Policy Model Development
    (1998-07-08)
    
  • I-0076: At B2, Trusted Path Functions May Be Duplicated Outside Trusted Path
    (1998-05-22)
    
  • I-0107: Only Security-Relevant Features Require System Integrity Tests
    (1998-07-08)
    
  • I-0114: Untrusted Programs Must Not Execute With Security-Relevant Privileges
    (1998-02-06)
    
  • I-0120: Additional Protection Required For Passwords
    (1996-04-15)
    
  • I-0183: Restrictions On Untrusted Programs In Low Assurance Products
    (1998-09-03)
    
  • I-0191: Minimum Set Of Actions That Require Trusted Path
    (1998-05-22)
    
  • I-0232: In Most Cases, There Must Be Discretion In DAC
    (1998-07-08)
    
  • I-0328: Audit requirement for object deletion
    (1996-04-15)
    
  • I-0332: Randomness of generated authentication
    (1998-05-20)
    
  • I-0335: User-generated audit records
    (1996-04-15)
    

• Sent to TPEP Management for Approval/Disapproval (470)
  • I-0113: Covert channel capacity limit policy
    (1997-01-15)
    
  • I-0221: Covert Channel Analysis Must Be Methodical, Repeatable, And Complete
    (1998-09-08)
    
  • I-0273: Auditing of Delayed Execution Jobs
    (1997-01-22)
    
  • I-0334: Output Beginning/End Labels Required
    (1997-01-15)
    

• Approved by TPEP Management and Mailed to Public Mailing List (510)
  • I-0001: Delayed Enforcement Of Authorization Change
    (1994-04-19)
    
  • I-0002: Delayed Revocation Of DAC Access
    (1993-10-20)
    
  • I-0003: Access Validation After Object Label Change
    (1994-11-16)
    
  • I-0004: Enforcement Of Audit Settings Consistent With Protection Goals
    (1993-10-20)
    
  • I-0005: Action For Audit Log Overflow
    (1993-10-20)
    
  • I-0006: Audit Of User-Id For Invalid Login
    (1993-10-20)
    
  • I-0007: Assigning Device Level Range
    (1993-10-20)
    
  • I-0020: DAC Authority For Assignment
    (1993-10-20)
    
  • I-0022: One Set Of Banner Pages Around Multiple Outputs
    (1994-04-19)
    
  • I-0039: Multilevel Printers And Page Labeling
    (1993-10-20)
    
  • I-0040: Requirements For Overwrite Label Capability
    (1993-10-20)
    
  • I-0041: Object Reuse Applies To All System Resources
    (1994-04-19)
    
  • I-0043: Auditing Use Of Unnamed Pipe
    (1994-04-19)
    
  • I-0046: Detailed Audit Record Structure
    (1994-07-12)
    
  • I-0053: Public Objects And DAC
    (1995-01-12)
    
  • I-0069: Flexibility In Packaging TFM
    (1993-10-20)
    
  • I-0073: OK To Audit Decision Regardless Of Whether Action Completed
    (1993-10-20)
    
  • I-0084: Audit Least Disruptive Action
    (1994-07-12)
    
  • I-0096: Blanking Passwords
    (1994-04-18)
    
  • I-0144: Availability Of Diagnostics
    (1994-11-16)
    
  • I-0147: Administrator Role May Include Operator Functions
    (1995-07-11)
    
  • I-0170: Functional Tests Required For Object Reuse
    (1994-04-18)
    
  • I-0172: Audit Of Imminent Security Violations
    (1994-04-19)
    
  • I-0185: Security Testing And Denial Of Service (C1-CI-01-83)
    (1983-05-16)
    
  • I-0192: Interface Manuals As Design Documentation
    (1994-04-19)
    
  • I-0193: Standard System Books As Design Documentation
    (1993-10-20)
    
  • I-0203: Accuracy Of Covert Channel Bandwidths Need Not Be Tested (C1-CI-02-84)
    (1984-06-15)
    
  • I-0204: Storage Of Labels On Multilevel Tapes (C1-CI-05-84)
    (1984-09-05)
    
  • I-0208: Auditing Of ``Object Not Found'' (C1-CI-07-84)
    (1984-12-19)
    
  • I-0213: Administrator Interface Is Part Of TCB
    (1995-01-12)
    
  • I-0216: Meaning Of ``Selectively Audit'' (C1-CI-02-85)
    (1985-01-11)
    
  • I-0222: Passwords Not Acceptable For DAC
    (1994-12-05)
    
  • I-0223: Software-Based Two-State Architectures Are Acceptable (C1-CI-04-85)
    (1985-06-01)
    
  • I-0224: Trusted Path Not Required For DAC Actions (C1-CI-01-86)
    (1986-10-26)
    
  • I-0225: Individual Accountability In A Server Environment (C1-CI-02-86)
    (1986-10-28)
    
  • I-0226: Initial Protection By Default (C1-CI-03-86)
    (1986-10-24)
    
  • I-0233: Operator Logon At System Console (C1-CI-04-86)
    (1986-12-11)
    
  • I-0234: One-Time Authentication Mechanisms Can Be Acceptable
    (1995-07-11)
    
  • I-0237: FTLS Must Accurately Describe TCB Operations (C1-CI-01-87)
    (1987-03-11)
    
  • I-0239: Subject Access Revocation After Change In User Clearance
    (1994-04-19)
    
  • I-0240: Passwords May Be Used For Card Input
    (1993-10-20)
    
  • I-0242: Auditing And Imminent Violations (C1-CI-02-87)
    (1987-05-11)
    
  • I-0244: Flexibility In Packaging SFUG
    (1993-10-20)
    
  • I-0245: Auditability Of Label Changes For Devices/Comm. Channels (C1-CI-01-88)
    (1988-04-21)
    
  • I-0247: Boundaries And Documentation For Loss Of Audit Data (C1-CI-02-89)
    (1989-01-09)
    
  • I-0253: Default Page Marking Format
    (1994-11-16)
    
  • I-0254: UNIX-Style Manual Pages As DTLS
    (1994-12-05)
    
  • I-0275: Single-Level Printers And Page Labeling
    (1993-10-20)
    
  • I-0281: Testing System Architecture Functions
    (1995-07-11)
    
  • I-0285: CM Comparison Source Or Object?
    (1994-04-19)
    
  • I-0286: Auditing Unadvertised TCB Interfaces
    (1994-04-18)
    
  • I-0288: Actions Allowed Before I&A
    (1994-04-18)
    
  • I-0302: Trusted Path Required For All Authentication
    (1995-07-17)
    
  • I-0312: Set-ID And The DAC Requirement
    (1994-04-19)
    
  • I-0314: Password Changes Do Not Require Authentication
    (1995-07-11)
    
  • I-0315: Restricted To Trusted Administrative Interface
    (1995-01-12)
    

• Formally Superseded (520)
  • I-0186: I&A And The Operator Console (C1-CI-02-83)
    (Approved 1983-05-16; Superseded 1986-12-11)
    
  • I-0187: Auditing User ID On Failed Login Attempts (C1-CI-01-84)
    (Approved 1984-06-15; Superseded 1993-10-20)
    
  • I-0205: Passwords Unacceptable For Discretionary Access Control (C1-CI-06-84)
    (Approved 1984-09-05; Superseded 1994-12-05)
    
  • I-0210: All Devices Must Possess Minimum And Maximum Labels (C1-CI-01-85)
    (Approved 1985-01-11; Superseded 1993-10-20)
    
  • I-0220: Object Creator Need Not Have Capability To Specify DAC (C1-CI-03-85)
    (Approved 1985-01-15; Superseded 1993-10-20)
    
  • I-0246: Action For Audit Log Overflow (C1-CI-01-89)
    (Approved 1989-01-09; Superseded 1993-10-20)
    
  • I-0250: Public Objects And DAC (C1-CI-03-89)
    (Approved 1989-01-09; Superseded 1995-01-12)
    

• Withdrawn (600)
  • I-0009: Audit Tools Are Part Of TCB
    (1996-05-02)
    
  • I-0014: Meaning Of Trusted Recovery Below B3
    (1997-07-09)
    
  • I-0099: Listing Non-Evaluated Software In Evaluation Reports
    (1997-05-23)
    
  • I-0126: Source code access at C1-B1
    (1996-03-15)
    
  • I-0128: Use Of Comsec/Cryptography In Evaluated Products
    (1996-03-15)
    
  • I-0133: Requirements For Rating Maintenance
    (1996-03-15)
    
  • I-0142: Is Minimizing Trusted Processes Required At B2?
    (1996-07-18)
    
  • I-0165: User Creation Of Processes Above The User's Clearance
    (1996-03-15)
    
  • I-0168: Job initiation under different identity
    (1995-02-02)
    
  • I-0207: Separation Of Roles Using Trusted Path
    (1997-05-02)
    
  • I-0218: No Distinction Between Storage And Timing Channels
    (1996-07-18)
    
  • I-0219: No Audit Necessary For Unauditable Channels
    (1996-07-18)
    
  • I-0228: Use of TNI vs TCSEC
    (1996-07-18)
    
  • I-0229: Editors As Audit Post Processing Tools
    (1996-05-02)
    
  • I-0265: Should Banner Page Indicate Suppression Of Internal Labels
    (1996-07-18)
    
  • I-0269: Non-connected output effect
    (1996-05-03)
    
  • I-0326: Protecting passwords against exhaustive search
    (1997-04-11)
    

• Tabled (610)
  • I-0029: Permissible Probability Of Undetected Compromise
    (1996-08-08)
    
  • I-0048: Subject Sensitivity Labels With Access Class Range
    (1997-01-20)
    
  • I-0080: Punch Card Output Must Be Labeled
    (1997-04-25)
    
  • I-0190: Content Required In Educational Materials Used For Design Docs
    (1996-03-18)
    
  • I-0262: Information Labels Are Acceptable Top/Bottom Markings In CMWs
    (1996-09-17)
    
  • I-0333: Interfaces for authentication
    (1995-05-31)
    

Return to Index Selection Page

This page was generated on Fri Jun 30 12:29:08 2006.
Questions on this page, or comments on Database entries should be addressed to cc-cmt@nist.gov.
Flags are based on a comparison against information uploaded 2005-01-20-00:00