Security for the Paranoid

[catch]

NT is a single level system, so this means that it can be used to deal with any level of data classification, but only that level.

So if it has been labeled a secret system. It can only have data (objects) and users (subjects) labeled as secret. This is inclusive of all system components.

Essentially this means that the system access must be controlled by a multi-level secure (MLS) processor if you want this machine to access data of different levels. To say it is verified to deal with classified data is rather misleading, although it does have an assurance rating of 2 under the TCSEC so it is good enough for secure environments. (Linux in all thus far evaluated manners would only score an assurance rating of 1, though Linux has only been evaluated against ISO-15408 and not the TCSEC.)

cheers,

catch

[RoadClosed]

since decreased usability increases cost

I think the opposite could be true. Decreasing usability simplifies the system. It requires less code, less time testing, less support because there are less options, etc. However decreasing usability could decrease demand therefore making the OS more expensive from a volume standpoint.

[catch]

Usability: The effectiveness, efficiency, and satisfaction with which users can achieve tasks in a particular environment of a product. High usability means a system is: easy to learn and remember; efficient, visually pleasing and fun to use; and quick to recover from errors.

- dictionary.com

You are speaking of design simplicity, not usability.

cheers,

catch

[RoadClosed]

I would argue design complexity and usability are proportional. Regarless of what dictionary.com has to say. Less complex systems would be inherently less usable and systems "quick to recover from errors" would be more complex and therefore more costly.

[catch]

I would argue design complexity and usability are proportional. Regarless of what dictionary.com has to say. Less complex systems would be inherently less usable and systems "quick to recover from errors" would be more complex and therefore more costly.

I'm not sure what you are on about... which system is more usable, a Mac or a Cray? Now, which system is more complicated?

The same can be said for many things... tax law for example... would a simpler law be more usable? Which recovers from errors more easily, simple modular code or complicated spaghetti code?

cheers,

catch