Security test and evaluation for multilevel-mode accreditation: Lessons learned

MITRE's experience and lessons learned in performing security test and evaluation (ST&E) for SPADOC 4B are described. ST&E drew on contractual testing but involved extensive government testing of the system. ST&E included testing in a representative stressed environment and in failure situations. ST&E also involved verification of safeguards from security disciplines other than COMPUSEC, including procedural and physical security. SPADOC 4B has been accredited to operate in multilevel mode.<
>