[ILUG] OT - Rainbow series

[Michael Watterson]

Are these complete?
http://www.fas.org/irp/nsa/rainbow.htm

It's an information overload. Effective security design & systems are 
simple and easy to folllow but hard to defeat.  Who has time to read & 
learn all this?

Michael Watterson wrote:
> Brian Foster wrote:
>>  
>>
>>   |[ ... ]
>>   | I presume you mean like Red book CD Audio, White Book VCD etc ..
>>
>>  NO.  “InfoSec” (Andrew's new job) is US-DoD (military)
>>  shorthand for “Information Security”.  in DoD/NSA-land
>>  that means keeping everything Top Secret, and keeping
>>  the Top Secret stuff really secret.  the various books
>>  we are talking about are guidelines (NOT standards)
>>  for how to do that.  (most are really boring as well.)
>>   
> Well I must read what people say more carefully and not make 
> assumptions based on my own experiences.
> Quote:
> /"For the series of U.S. government publications on computer security 
> <http://en.wikipedia.org/wiki/Computer_security> standards, see 
> Rainbow Series <http://en.wikipedia.org/wiki/Rainbow_Series>.
> /The *Rainbow Books* are a collection of standards defining the 
> allowed formats of Compact Discs 
> <http://en.wikipedia.org/wiki/Compact_Disc>."
>
> The Rainbow Books make fairly boring reading too. Poor character 
> development and plots.
>
> I suspect Len Deighton <http://en.wikipedia.org/wiki/Len_Deighton>,  
> Fredick Forsythe, and John Le Carre might be just as useful for 
> Security as the Rainbow Series, given US performance since 1945.
>
> I remember also having CCITT "rainbow books" in mid 1980s when 
> designing SW & HW for Trunk Protocol Translation of Central offices 
> (At least the Red one).  I suspect that more Linux Programmers need 
> the Compact Disk and CCITT coloured books than the USA Colored books 
> :-)   Any CHILL anyone?  (Z.200).
>


-- 
Mike