[comp.sys.misc] Security Issues

cmcdonal@wsmr10.arpa (Chris McDonald STEWS-SD 678-2814) (02/08/88)

I wonder if you can tell me the current status on the "supermicro" contract. 
Specifically, at the Micro Conference last August a representative from your
office discussed a plan to require security specifications in the purchase
description.  He stated that a "C-2" specification, as described in the DOD
Trusted Computer System Evaluation Criteria, was under consideration.  Is that
still a requirement?  If so, is it still the intent to require the vendor to
achieve certification "within 1 year from contract award" or at time of
award?

Could you also tell me if either the SMS contract or the Z-248 contracts have
any add-on security packages available for stand-alone PCs, such as WATCHDOG,
Sentinel, etc.  These packages typically provide user password authentication,
protection against booting the system from drive A, and other features.

It was my understanding in previous verbal discussions with a Mr. Sam Howard
that the original contracts did not include such features. 

Thanks,

Chris McDonald
White Sands Missile Range
Autovon 258-2814