From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.1 required=5.0 tests=BAYES_00,
	PP_MIME_FAKE_ASCII_TEXT autolearn=no autolearn_force=no version=3.4.4
X-Google-Thread: 103376,a0833bbed8752e1f
X-Google-Attributes: gid103376,public
X-Google-Language: ENGLISH,ASCII
Path: 
 g2news1.google.com!news1.google.com!news.glorb.com!wns14feed!worldnet.att.net!204.71.34.3!newsfeed.cwix.com!news.binc.net!kilgallen
From: Kilgallen@SpamCop.net (Larry Kilgallen)
Newsgroups: comp.lang.ada
Subject: Re: variable length strings
Date: 28 Oct 2004 05:31:06 -0500
Organization: Berbee Information Networks Corporation
Message-ID: <ibDgvv1jcjOI@eisner.encompasserve.org>
References: <ba2f9c57.0410210952.438515d@posting.google.com>
 <1861614.TWv5A9FgVL@linux1.krischik.com>
 <4178e979_1@baen1673807.greenlnk.net>
 <1195374.UMjBCk7lO1@linux1.krischik.com>
 <UDSed.6962$d5.59024@newsb.telia.net>
 <1154613.ipZcUgduzp@linux1.krischik.com>
 <PaSdnX0j54BWCeDcRVn-jA@megapath.net> <ln2llc.e3u.ln@skymaster>
 <1174011.lJ1dcgRM3Q@linux1.krischik.com> <uwtxd9y9j.fsf@obry.org>
 <1098814048.280053@master.nyc.kbcfp.com> <u8y9tmea3.fsf@obry.org>
 <rlssm80bgp2.fsf_-_@jacob.crs4.it> <Ksd80nI9jwK$@eisnerOrganization: LJK
 Software
NNTP-Posting-Host: eisner.encompasserve.org
X-Trace: grandcanyon.binc.net 1098959401 23248 192.135.80.34 (28 Oct 2004
 10:30:01 GMT)
X-Complaints-To: abuse@binc.net
NNTP-Posting-Date: Thu, 28 Oct 2004 10:30:01 +0000 (UTC)
Xref: g2news1.google.com comp.lang.ada:5793
Date: 2004-10-28T05:31:06-05:00
List-Id: <comp.lang.ada>

In article <rlsoeinb9ag.fsf@jacob.crs4.it>, Jacob Sparre Andersen <sparre@nbi.dk> writes:
> Larry Kilgallen wrote:
>> In article <rlssm80bgp2.fsf_-_@jacob.crs4.it>, Jacob Sparre Andersen
>> <sparre@nbi.dk> writes:
> 
>> > Please distinguish between security (unauthorized access) and
>> > denial-of-service.
>> 
>> Since the time of the Orange Book, security has long been divided
>> into three segments in discussions:
>> 
>> 	Confidentiality
>> 	Integrity
>> 	Availability
>> 
>> Denial-of-service issues clearly fall under Availability.
>> Unauthorized access is just a tiny part of Confidentiality.
> 
> I stand corrected, apologise to Pascal, and go to the library to have
> a look at the �Orange Book� (what's its real title?).

Reverse engineering "TCSEC", I believe it is "Trusted Computer Security
Evaluation Criteria".

But I did not promise those exact words are in the Orange Book, just
that the _timing_ of that terminology matched that of the Orange Book :-)

While those words were widely used at the time, NSA employees might
have felt it inappropriate to use three terms with that acronym.
But it was the way the rest of us remembered them.