GSEC · Question #211
Which of the following books deals with confidentiality?
The correct answer is B. Orange Book. The Orange Book (TCSEC - Trusted Computer System Evaluation Criteria) is the foundational DoD security publication that primarily addresses confidentiality through its security classification levels.
Question
Which of the following books deals with confidentiality?
Options
- APurple Book
- BOrange Book
- CRed Book
- DBrown Book
How the community answered
(34 responses)- A12% (4)
- B79% (27)
- C3% (1)
- D6% (2)
Why each option
The Orange Book (TCSEC - Trusted Computer System Evaluation Criteria) is the foundational DoD security publication that primarily addresses confidentiality through its security classification levels.
The Purple Book (Guidelines for Formal Verification Systems) addresses formal verification methods used in security evaluation, not confidentiality policy directly.
The Orange Book, formally known as the Trusted Computer System Evaluation Criteria (TCSEC), was published by the DoD in 1985 and established evaluation classes (D, C1, C2, B1, B2, B3, A1) focused on confidentiality requirements. It defines how systems should protect classified information from unauthorized disclosure. It is the core document of the Rainbow Series dealing with confidentiality as its primary security objective.
The Red Book (TNI - Trusted Network Interpretation) extends the Orange Book concepts specifically to network environments and trusted network components.
The Brown Book (Guidelines for Writing Trusted Facility Manuals) provides guidance on documenting security-relevant features of trusted systems, not confidentiality itself.
Concept tested: Rainbow Series Orange Book TCSEC confidentiality
Source: https://csrc.nist.gov/publications/detail/book/1985/department-of-defense-trusted-computer-system-evaluation-criteria
Topics
Community Discussion
No community discussion yet for this question.