Oracle pursued and successfully
completed TCSEC evaluations of its Oracle7 and Trusted Oracle7
database server products.
Oracle does not participate in
the TCSEC any longer as TCSEC has been superseded by Common
Criteria.
For a matrix of Oracle security
evaluations currently in progress as well as those completed
please read the go to Oracle
Security Evaluations Status.
Overview
of the TCSEC
Published first in 1983,
the US Trusted Computer System Evaluation Criteria ( TCSEC, also
known as the "Orange Book") has been used since then for
the evaluation of operating systems. In April 1991, the US
National Computer Security Center (NCSC) published the Trusted
Database Interpretation (TDI) which sets forth an interpretation
of these evaluation criteria for database management systems and
other layered products. Products are evaluated against the TCSEC
and the TDI at predefined classes from D (lowest) up to A1
(highest). |