FAS Homepage | Intelligence | NSA |||| Search | Join FAS
The Rainbow Series is six-foot tall stack of books on evaluating "Trusted Computer Systems" according to the National Security Agency. The term "Rainbow Series" comes from the fact that each book is a different color. The main book (upon which all other expound) is the Orange Book.
Note (2003): Portions of the Rainbow Series (e.g. the Orange book and the Red Book) have been superseded by the Common Criteria Evaluation and Validation Scheme (CCEVS). For background and further information, see the CCEVS web site here:
Information about the Common Criteria is available here:
http://csrc.nist.gov/cc/index.html
The NSA National Computer Security Center Trusted Products Evaluation Program also has some resources along these lines, including:
- NCSC-TG-001 [Tan Book]
- A Guide to Understanding Audit in Trusted Systems [Version 2 6/01/88]
- NCSC-TG-002 [Bright Blue Book]
- Trusted Product Evaluation - A Guide for Vendors [Version 1 3/1/88]
- NCSC-TG-003 [Orange Book]
- A Guide to Understanding Discretionary Access Control in Trusted Systems [Version 1, 9/30/87]
- NCSC-TG-004 [Aqua Book]
- Glossary of Computer Security Terms [Version 1, 10/21/88]
- NCSC-TG-005 [Red Book]
- Trusted Network Interpretation [Version 1 7/31/87]
- NCSC-TG-006 [Orange Book]
- A Guide to Understanding Configuration management in Trusted Systems [Version 1, 3/28/88]
- NCSC-TG-007 [Burgundy Book]
- A Guide to Understanding Design Documentation in Trusted Systems
- NCSC-TG-008 [Lavender Book]
- A Guide to Understanding Trusted Distribution in Trusted Systems [Version 1 12/15/88]
- NCSC-TG-009 [Venice Blue Book]
- Computer Security Subsystem Interpretation of the Trusted Computer System Evaluation Criteria
- NCSC-TG-010 [Teal Book]
- A Guide to Understanding Security Modeling in Trusted Systems
- NCSC-TG-011 [Red Book]
- Trusted Network Interpretation Environments Guideline - Guidance for Applying the Trusted Network Interpretation
- NCSC-TG-013 [Pink Book]
- Rating Maintenance Phase Program Document [Version 2 - 01 Mar 1995]
- NCSC-TG-014 [Purple Book]
- Guidelines for Formal Verification Systems [4/1/89]
- NCSC-TG-015 [Brown Book]
- A Guide to Understanding Trusted Facility Management [6/89]
- NCSC-TG-016 [Yellow-Green Book]
- Writing Trusted Facility Manuals
- NCSC-TG-017 [Light Blue Book]
- A Guide to Understanding Identification and Authentication in Trusted Systems
- NCSC-TG-018 [Light Blue Book]
- A Guide to Understanding Object Reuse in Trusted Systems
- NCSC-TG-019 [Blue Book]
- Trusted Product Evaluation Questionnaire [Version-2 - 2 May 1992]
- NCSC-TG-020A [Grey/Silver Book]
- Trusted UNIX Working Group (TRUSIX) Rationale for Selecting Access Control List Features for the UNIX System
- NCSC-TG-021 [Lavender/Purple Book]
- Trusted Database Management System Interpretation
- NCSC-TG-022 [Yellow Book]
- A Guide to Understanding Trusted Recovery
- NCSC-TG-023
- [NOT USED]
- NCSC-TG-024
- [NOT USED]
- NCSC-TG-025 [Forrest Green Book]
- A Guide to Understanding Data Remanence in Automated Information Systems (Ver.2 09/91)
- NCSC-TG-026 [Hot Peach Book]
- A Guide to Writing the Security Features User's Guide for Trusted Systems
- NCSC-TG-027 [Turquoise Book]
- A Guide to Understanding Information System Security Officer Responsibilities for Automated Information Systems
- NCSC-TG-028 [Violet Book]
- Assessing Controlled Access Protection
- NCSC-TG-029 [Blue Book]
- Introduction to Certification and Accreditation ( 09/94 )
- NCSC-TG-030 [ Light Pink Book]
- A Guide to Understanding Covert Channel Analysis of Trusted Systems (11/93 )
- United States Signals/Special Intelligence Directive USSID 702, "Automatic Data Processing Systems Security."
- NCSC-WA-002-85
- Personal Computer Security Considerations
- National Security Agency/CSS Degausser Products List [25 September 2001]
- NCSC ETL Endorsed Tools List
- NCSC OAS A Guideline on Office Automation Security [12/5/86]
- NCSC C-Technical Report-001 Computer Viruses: Prevention, Detection, and Treatment
- NCSC C-Technical Report 79-91 Integrity in Automated Information Systems (Sept 91)
- NCSC C-Technical Report 32-92 The Design and Evaluation of INFOSEC Systems: The Computer Security Contribution to the Composition Discussion
- CSL BULLETIN DISPOSITION OF SENSITIVE AUTOMATED INFORMATION October 1992
- NSA/CSS Manual 130-2 Media Declassification and Destruction Manual
- [ NSA ] Contractor Guidelines for AIS Processing of NSA SCI
- NSA/CSS Spec. L14-4-A55 - Section 5, Degaussing Level Performance Test Procedures
- [ NSA ] Information Systems Security Products and Services Catalogue
- NACSIM 5000 TEMPEST Fundamentals
- NACSEM 5201 TEMPEST Guidelines for Equipment/System Design Standard
- NACSIM 5203 Guidelines for Facility Design and Red/Black Installation
- NACSIM 7002 COMSEC Guidance for ADP Systems
- Personal Computer Security Considerations
- CSC-STD-001-83 [Orange Book]
- DOD Trusted Computer System Evaluation Criteria [DOD 5200.28]
- CSC-STD-002-85 [Green Book]
- DoD Password Management Guidelines
- CSC-STD-003-85 [Light Yellow Book]
- Guidance for Applying the DoD Trusted Computer System Evaluation Criteria in Specific Environments
- CSC-STD-004-85 [Yellow Book II]
- Technical Rationale Behind CSC-STD-003-85: Computer Security Requirements
- CSC-STD-005-85
- DoD Magnetic Remanence Security Guideline
NSA/NCSC Rainbow Series
Other NSA/NCSC Publications
Defense Department Rainbow Series
FAS Homepage | Intelligence | NSA |||| Search | Join FAS
http://www.fas.org/irp/nsa/rainbow.htmCreated by John Pike
Maintained by Steven Aftergood
Updated August February 6, 2006