<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;"><DIV><FONT face=Arial size=2>CISSP All in One - Shon Harris V4 - Page 360</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Orange Book:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>B2 - Structured protection= security policy, must not allow cover channels, no trap door exists</FONT></DIV>
<DIV><FONT face=Arial size=2>B3 - Security Domains = Highly secure environment, small reference monitor, sec admin role clear</FONT></DIV><BR><BR>--- On <B>Wed, 6/17/09, cisspstudy-request@cccure.org <I><cisspstudy-request@cccure.org></I></B> wrote:<BR>
<BLOCKQUOTE style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: rgb(16,16,255) 2px solid"><BR>From: cisspstudy-request@cccure.org <cisspstudy-request@cccure.org><BR>Subject: cisspstudy Digest, Vol 12, Issue 17<BR>To: cisspstudy@cccure.org<BR>Date: Wednesday, June 17, 2009, 7:46 PM<BR><BR>
<DIV class=plainMail>Send cisspstudy mailing list submissions to<BR> <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org" ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A><BR><BR>To subscribe or unsubscribe via the World Wide Web, visit<BR> <A href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target=_blank>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</A><BR>or, via email, send a message with subject or body 'help' to<BR> <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy-request@cccure.org" ymailto="mailto:cisspstudy-request@cccure.org">cisspstudy-request@cccure.org</A><BR><BR>You can reach the person managing the list at<BR> <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy-owner@cccure.org" ymailto="mailto:cisspstudy-owner@cccure.org">cisspstudy-owner@cccure.org</A><BR><BR>When replying,
please edit your Subject line so it is more specific<BR>than "Re: Contents of cisspstudy digest..."<BR><BR><BR>Today's Topics:<BR><BR> 1. Re: Here's another one ... (Holland, Brandon)<BR> 2. Re: cisspstudy Digest, Vol 12, Issue 16 (<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=An.Dang@do.treas.gov" ymailto="mailto:An.Dang@do.treas.gov">An.Dang@do.treas.gov</A>)<BR> 3. Re: Would this fool you? (Sergio Pantoja)<BR><BR><BR>----------------------------------------------------------------------<BR><BR>Message: 1<BR>Date: Wed, 17 Jun 2009 14:50:16 -0500<BR>From: "Holland, Brandon" <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=hollandb@frmaint.com" ymailto="mailto:hollandb@frmaint.com">hollandb@frmaint.com</A>><BR>Subject: Re: [Cisspstudy] Here's another one ...<BR>To: "The CISSP Study Mailing list" <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org"
ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A>><BR>Message-ID:<BR> <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=B5E0B4818A669C49A9C22199D9C389F8118AC6AB@MAIL.frmaint.com" ymailto="mailto:B5E0B4818A669C49A9C22199D9C389F8118AC6AB@MAIL.frmaint.com">B5E0B4818A669C49A9C22199D9C389F8118AC6AB@MAIL.frmaint.com</A>><BR>Content-Type: text/plain; charset="us-ascii"<BR><BR>I was about to say... wikipedia says B3 introduces timing... I would've<BR>gotten it wrong... thanks for sharing and I'll add that to what to<BR>remember for the B3 channel...<BR><BR>-----Original Message-----<BR>From: <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy-bounces@cccure.org" ymailto="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</A><BR>[mailto:<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy-bounces@cccure.org"
ymailto="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</A>] On Behalf Of Belinda Foster<BR>Sent: Wednesday, June 17, 2009 2:46 PM<BR>To: The CISSP Study Mailing list<BR>Subject: Re: [Cisspstudy] Here's another one ...<BR><BR>You are half right.....for both storage and timing, that's at B3 (where<BR>timing is introduced).<BR><BR><BR>On Wed, Jun 17, 2009 at 3:43 PM, Lamey, Phillip <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=phillip.lamey@cgi.com" ymailto="mailto:phillip.lamey@cgi.com">phillip.lamey@cgi.com</A>><BR>wrote:<BR><BR><BR> <BR><BR> <BR><BR> I thought Cover Channel Analysis was addressed at TCSEC level B2<BR>... Am I missing something here?<BR><BR> <BR><BR> Phil Lamey, P.Eng.<BR><BR> CGI Senior Consultant<BR><BR> (506) 458-5020 ext.
5121<BR><BR> <BR><BR><BR> _______________________________________________<BR> cisspstudy mailing list<BR> <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org" ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A><BR> <A href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target=_blank>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</A><BR> <BR> <BR><BR><BR><BR><BR><BR>------------------------------<BR><BR>Message: 2<BR>Date: Wed, 17 Jun 2009 16:01:04 -0400<BR>From: <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=An.Dang@do.treas.gov" ymailto="mailto:An.Dang@do.treas.gov">An.Dang@do.treas.gov</A><BR>Subject: Re: [Cisspstudy] cisspstudy Digest, Vol 12, Issue 16<BR>To: <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org"
ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A><BR>Message-ID:<BR> <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=AE177CAE7814224ABE82FF33FC89523304DE8F3F@D01EXC2P.do.treas.gov" ymailto="mailto:AE177CAE7814224ABE82FF33FC89523304DE8F3F@D01EXC2P.do.treas.gov">AE177CAE7814224ABE82FF33FC89523304DE8F3F@D01EXC2P.do.treas.gov</A>><BR>Content-Type: text/plain; charset=us-ascii<BR><BR>The CBK says B3 (or above) is data layering or hiding<BR><BR>-----Original Message-----<BR>From: <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy-bounces@cccure.org" ymailto="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</A><BR>[mailto:<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy-bounces@cccure.org" ymailto="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</A>] On Behalf Of<BR><A
href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy-request@cccure.org" ymailto="mailto:cisspstudy-request@cccure.org">cisspstudy-request@cccure.org</A><BR>Sent: Wednesday, June 17, 2009 3:47 PM<BR>To: <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org" ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A><BR>Subject: cisspstudy Digest, Vol 12, Issue 16<BR><BR>Send cisspstudy mailing list submissions to<BR> <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org" ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A><BR><BR>To subscribe or unsubscribe via the World Wide Web, visit<BR> <A href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target=_blank>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</A><BR>or, via email, send a message with subject or body 'help' to<BR> <A
href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy-request@cccure.org" ymailto="mailto:cisspstudy-request@cccure.org">cisspstudy-request@cccure.org</A><BR><BR>You can reach the person managing the list at<BR> <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy-owner@cccure.org" ymailto="mailto:cisspstudy-owner@cccure.org">cisspstudy-owner@cccure.org</A><BR><BR>When replying, please edit your Subject line so it is more specific<BR>than "Re: Contents of cisspstudy digest..."<BR><BR><BR>Today's Topics:<BR><BR> 1. Re: Here's another one ... (Belinda Foster)<BR><BR><BR>----------------------------------------------------------------------<BR><BR>Message: 1<BR>Date: Wed, 17 Jun 2009 15:46:27 -0400<BR>From: Belinda Foster <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=belinda.foster@gmail.com" ymailto="mailto:belinda.foster@gmail.com">belinda.foster@gmail.com</A>><BR>Subject: Re:
[Cisspstudy] Here's another one ...<BR>To: The CISSP Study Mailing list <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org" ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A>><BR>Message-ID:<BR> <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=f19cf76b0906171246h3d1d2472l3ea57e045df64492@mail.gmail.com" ymailto="mailto:f19cf76b0906171246h3d1d2472l3ea57e045df64492@mail.gmail.com">f19cf76b0906171246h3d1d2472l3ea57e045df64492@mail.gmail.com</A>><BR>Content-Type: text/plain; charset="windows-1252"<BR><BR>You are half right.....for both storage and timing, that's at B3 (where<BR>timing is introduced).<BR><BR>On Wed, Jun 17, 2009 at 3:43 PM, Lamey, Phillip<BR><<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=phillip.lamey@cgi.com" ymailto="mailto:phillip.lamey@cgi.com">phillip.lamey@cgi.com</A>>wrote:<BR><BR>><BR>><BR>> I thought Cover Channel Analysis was
addressed at TCSEC level B2 ? Am<BR>I<BR>> missing something here?<BR>><BR>><BR>><BR>> Phil Lamey, P.Eng.<BR>><BR>> *CGI Senior Consultant*<BR>><BR>> *(506) 458-5020 ext. 5121*<BR>><BR>><BR>><BR>> _______________________________________________<BR>> cisspstudy mailing list<BR>> <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org" ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A><BR>> <A href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target=_blank>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</A><BR>><BR>><BR>-------------- next part --------------<BR>An HTML attachment was scrubbed...<BR>URL:<BR><<A href="http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20090617/" target=_blank>http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20090617/</A><BR>f41158aa/attachment.html><BR>-------------- next part
--------------<BR>A non-text attachment was scrubbed...<BR>Name: not available<BR>Type: image/png<BR>Size: 22504 bytes<BR>Desc: not available<BR>URL:<BR><<A href="http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20090617/" target=_blank>http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20090617/</A><BR>f41158aa/attachment.png><BR><BR>------------------------------<BR><BR>_______________________________________________<BR>cisspstudy mailing list<BR><A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org" ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A><BR><A href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target=_blank>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</A><BR><BR><BR>End of cisspstudy Digest, Vol 12, Issue 16<BR>******************************************<BR><BR><BR><BR>------------------------------<BR><BR>Message: 3<BR>Date: Wed, 17 Jun 2009
20:46:29 -0400<BR>From: Sergio Pantoja <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=spantoja@gmail.com" ymailto="mailto:spantoja@gmail.com">spantoja@gmail.com</A>><BR>Subject: Re: [Cisspstudy] Would this fool you?<BR>To: The CISSP Study Mailing list <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org" ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A>><BR>Message-ID:<BR> <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=c3227e2d0906171746p69a494eaob9de4705ee3b06ed@mail.gmail.com" ymailto="mailto:c3227e2d0906171746p69a494eaob9de4705ee3b06ed@mail.gmail.com">c3227e2d0906171746p69a494eaob9de4705ee3b06ed@mail.gmail.com</A>><BR>Content-Type: text/plain; charset="windows-1252"<BR><BR>IIRC TCSEC is about OS,App and Systems and not only OS.<BR><BR>On Wed, Jun 17, 2009 at 3:38 PM, Lamey, Phillip <<A href="http://us.mc339.mail.yahoo.com/mc/compose?to=phillip.lamey@cgi.com"
ymailto="mailto:phillip.lamey@cgi.com">phillip.lamey@cgi.com</A>>wrote:<BR><BR>><BR>><BR>> I thought that TCSEC was only concerned with the mechanisms implemented<BR>> within an OS ? and since the TCB originated from TCSEC ? I got fooled.<BR>><BR>><BR>><BR>> Would it have fooled you?<BR>><BR>><BR>><BR>> I write next week ? I am stressing J<BR>><BR>><BR>><BR>> Phil Lamey, P.Eng.<BR>><BR>> *CGI Senior Consultant*<BR>><BR>> *(506) 458-5020 ext. 5121*<BR>><BR>><BR>><BR>> _______________________________________________<BR>> cisspstudy mailing list<BR>> <A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org" ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A><BR>> <A href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target=_blank>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</A><BR>><BR>><BR><BR><BR>-- <BR>Sergio
Pantoja H.<BR><A href="http://us.mc339.mail.yahoo.com/mc/compose?to=spantoja@gmail.com" ymailto="mailto:spantoja@gmail.com">spantoja@gmail.com</A><BR>System, Network and Security Administrator<BR>Linux User register #239475<BR>Mandrake Club Member<BR>-------------- next part --------------<BR>An HTML attachment was scrubbed...<BR>URL: <<A href="http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20090617/82545786/attachment.html" target=_blank>http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20090617/82545786/attachment.html</A>><BR>-------------- next part --------------<BR>A non-text attachment was scrubbed...<BR>Name: not available<BR>Type: image/png<BR>Size: 32801 bytes<BR>Desc: not available<BR>URL: <<A href="http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20090617/82545786/attachment.png"
target=_blank>http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20090617/82545786/attachment.png</A>><BR><BR>------------------------------<BR><BR>_______________________________________________<BR>cisspstudy mailing list<BR><A href="http://us.mc339.mail.yahoo.com/mc/compose?to=cisspstudy@cccure.org" ymailto="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</A><BR><A href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target=_blank>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</A><BR><BR><BR>End of cisspstudy Digest, Vol 12, Issue 17<BR>******************************************<BR></DIV></BLOCKQUOTE></td></tr></table>