menu layout menu layout

Hyperlink: Security: Standards
Meta-Reference on Information Technology
HOME : Security : Standards | Go to contents | Selecionar Idioma | Esta em Português |
HOME
( Selecionar Idioma )

Security:
 · Info
 · Centers
 · Cryptography
 · PKI
 · Malware...
 · E-Mail, Spam
 · Firewall
 · IDS
 · Standards
 · Applications
 · Privacy
 · Hacker
 · Books
 · Topics
See also:
· Internet Protocols

Comments & suggestions are welcome

 

Security Standards

ISO/IEC 15408 - Common Criteria (CC)

Common Criteria Evaluation and Validation Scheme (CCEVS) & Rainbow Series

  • The Common Criteria Evaluation and Validation Scheme (CCEVS)
    By National Information Assurance Partnership (NIAP), a U.S. Government initiative.
  • Rainbow Series
    From Wikipedia, the free encyclopedia.
  • Rainbow Series Library
    The Rainbow Series (sometimes known as the Rainbow Books) is a series of computer security standards and guidelines published by the United States government in the 1980s and 1990s. They were originally published by the U.S. Department of Defense (DoD) Computer Security Center, and then by the National Computer Security Center.
    The Rainbow Series is six-foot tall stack of books on evaluating "Trusted Computer Systems" according to the National Security Agency (NSA). The term "Rainbow Series" comes from the fact that each book is a different color. The main book, upon which all other expound, was the Orange Book.
    Note (2003): Portions of the Rainbow Series (e.g. the Orange book and the Red Book) have been superseded by the Common Criteria Evaluation and Validation Scheme (CCEVS).
    Format: ASCII Text. Available at Federation of American Scientists (FAS), Intelligence Resource Program. Alternative: csrc.nist.gov.
  • The Orange Book Site - Dynamoo.com
    First published in 1983, the US Department of Defense Trusted Computer System Evaluation Criteria, (DOD-5200.28-STD) known as the Orange Book was a de facto standard for computer security, now superseded by the Common Criteria Evaluation and Validation Scheme (CCEVS). Orange Book was part of NSA/DoD Rainbow Series.
    Orange Book Summary.
    USA Department of Defense Standard: Trusted Computer System Evaluation Criteria (DoD 5200.28-STD).

ISO/IEC 27000 series (formerly 17799, BS 7799) - Information Security Management

The British Standard 7799 (BS7799) was originally a code of practice issued by the UK Government (Department of Trade and Industry - DTI) in 1993, then published as standard in 1995 by the British Standards Institution (BSi) and revised in 1999. When initially published as an ISO international standard in December 2000, BS7799 part 1 (BS7799-1) became ISO 17799, because a standard called ISO 7799 already existed.

In October 2005, British Standard BS 7799 part 2 (BS7799-2) was adopted by ISO, re-badged beggining the new 27000 international information security standard series, released as ISO/IEC 27001:2005 standard.

From 2001 to 2004, the ISO 17799 (BS7799-1) international standard went throught a major revision, culminating in the new version ISO/IEC 17799:2005 published in June 2005. In July 2007, the 17799:2005 standard was renumbered to 27002:2005 (by ISO/IEC 17799:2005/Cor.1:2007), integrating the new 27000 series.

ISO/IEC 27000 series:
ISO 27001 [BS7799-2]: information security management systems (ISMS) requirements. ISO/IEC 27001:2005 = BS 7799-2:2005. Requirements (shall) to implement an information security management system.
ISO 27002 [BS7799-1]: code of practice for information security management. ISO/IEC 27002:2005 = ISO 17799:2005 = BS7799-1:2005. Recommendations (should) of information security controls.
ISO 27003 (expected for 2009): an ISMS implementation guide.
ISO 27004 (proposed): information security management measurement and metrics.
ISO 27005 [BS 7799-3], proposed: information security risk management. BS 7799-3:2006 - Risk Management Guidelines.
ISO 27006: requirements for bodies providing audit and certification of information security management systems. 2007-02-03.

Open Web Application Security Standards

Page Top   -   Home