Eval History 1

Nation UK Germany Germany Germany UK UK UK UK UK Germany UK UK UK UK UK UK UK UK Germany UK UK UK UK UK UK Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Canada Canada US US US

Scheme ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP AISEP CC CC CC CC CC

Level Generic Certifier Product Type E6 7 Admiral Communications E3 4 Admiral Misc E3 4 Admiral Misc E3 4 Admiral Misc E2 3 Admiral Access Control E3 4 Admiral Communications E3 4 Admiral Communications E3 4 Admiral DBMS E1 2 Admiral Misc E2 3 Admiral Misc E3 4 Admiral OS E3 4 Admiral OS E3 4 Admiral OS E2 3 Admiral OS E3 4 Admiral Cards E2 3 Admiral DBMS E3 4 Admiral Communications E3 4 Admiral Communications E3 4 Admiral Networking E3 4 Admiral Access Control E3 4 Admiral Communications E3 4 Admiral OS E3 4 Admiral Networking E3 4 Admiral OS E3 4 Admiral OS E1 2 Admiral Australia Networking E1 2 Admiral Australia Networking E1 2 Australia Networking E1 2 Australia Networking E1 2 Australia Public key E3 4 Australia Networking E3 4 Australia Networking E3 4 Australia Networking EAL4 (E3) 4 Australia Networking E3 4 Australia Networking E3 4 Australia Networking E3 4 Australia Networking E3 4 Australia Networking E3 4 Australia Public key E3 4 Australia Public key E5 6 Australia Networking E6 7 Australia Networking E6 7 Australia Networking E6 7 Australia Networking E6 7 Australia OS E2 F-C2 3 Australia OS EAL3 3 Canada Networking EAL3 3 Canada Networking EAL2 2 COACT Networking EAL2 2 CSC Networking EAL2 2 CSC Networking

Year Model 1990 ICL One Way Regulator 1993 Guardian 90 Version C20 with SAFEGUARD Version C22L 1993 Guardian 90 Version C20 with SAFEGUARD Version C22L 1993 Guardian 90 Version C20 with SAFEGUARD Version 22L 1994 Platinum Technologies Access Manager 250, Level 2, Increment 6 1994 Racal RAMBUTAN SAFE 64K Versions 1.00, 1.09 and 1.10 1994 Racal RAMBUTAN SAFE X.25 1995 INFORMIX-OnLine/Secure-B1 and C2 Versions 1996 BrainTree AUDITOR Plus Version 1.4-03 revision S 1996 HML 825 Version 3.2 1996 Argus Systems Group Release 1.2 of the B1/CMW and C2/TMW for Solaris 2.4 on Specified SPARCstati 1996 DEC MLS+ V3.1A 1996 MAXION/OS Version 1.2 1997 Banyan VINES Version 7.0 1997 Motorola Smartcard Chip 1998 INFORMIX-OnLine Dynamic Server version 7.23 1998 OMEGA Version 7.12 Increment 9 1998 Racal SafeDial Version 1.27 1999 Check Point FireWall-1 Version 4.0 Stateful Inspection 1999 KILGETTY V1.2h & KILGETTY PLUS V1.2h 1999 Datacryptor 2000 (Synchronous Line Encryptor) 1999 HP-UX Version 10.20 2000 MailGuard Bastion 1.0 2000 Argus Systems Group Release 1.3 of the C2/TMW and B1/CMW for Solaris 2.4 on a range of SPARC 2000 OpenVMS and SEVMS for VAX and ALPHA, Version 6.2-1H3 1997 SNS RANDATA SecurPAC IEM 1.01 1997 SNS RANDATA SecurNET HSP 1.02 2000 Nortel WAN Encryption Option Ver 12.20 2000 Authentic8 Pty Secure Network (SNET) Ver 2.4.2 2000 Authentic8 Pty Card & Key Management System (CKMS) Ver 2.3 2000 Check PointFirewall-1 Ver 4.0 2000 IBM Firewall Ver 3.1.1 2000 Gauntlet Internet Firewall Ver 5.0 2000 CTAM Cyphercell ATM Encryptor Ver 1.0 2000 SNS RANDATA SMS Secure Management System Ver2.1 2000 SNS RANDATA SecurNET HSP Series Ver 1.02 2000 SNS RANDATA SecurPAC IEM Series Ver 1.01 2000 SNS RANDATA SecurPAC PC Series Ver 1.1 2000 Baltimore Pty UniCERT Ver 3.0 2000 Baltimore Pty MailSecure Ver 2.5 2000 British Aerospace Trusted Filter Ver 1.0 2000 Vision Abell Interactive Link Ver 1.0 2000 Vision Abell Data Diode Device Ver 1.0 2000 Vision Abell Interactive Link Multiple Computer Switch 2000 Keycorp MULTOS 1.0 Fujitsu RACF V11L10 under MSP/E20, MSP/EX 1997 Black Hole (SecurIT) Firewall Version 3.01E2 1997 Black Hole Firewall version 3.01 E2 for SPARCstations 1999 Voltaire Advanced Data Security 2in1 PC(TM) 1998 Cisco PIX Firewall 520 - Compliant with U.S. Government Protection Profile 1999 Lucent Managed Firewall

US Australia Australia Australia Australia US Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia Australia UK UK UK UK UK UK UK UK UK UK UK UK Australia France France France France Australia Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany

CC EAL2 AISEP E1 AISEP E1 AISEP E1 AISEP E3 CC EAL2 AISEP E1 AISEP E1 AISEP E1 AISEP E1 AISEP E1 AISEP E1 AISEP E1 AISEP E1 AISEP E1 UK ITSEC UKL2 UK ITSEC E3 UK ITSEC UKL3 AISEP E6 ITSEC E2 ITSEC E3 ITSEC E3 ITSEC E3 ITSEC E3 ITSEC E3 ITSEC E3 ITSEC E4 ITSEC E2 ITSEC E3 ITSEC E3 ITSEC E3 AISEP E1 ITSEC E2 ITSEC E3 ITSEC E3 ITSEC E3 German ITSECF1 Q1 ITSEC E1 ITSEC E2 ITSEC E2 ITSEC E2 ITSEC E1 ITSEC E1 ITSEC E2 ITSEC E2 ITSEC E2 ITSEC E2 ITSEC E2 ITSEC E2 ITSEC E2 ITSEC E2 ITSEC E2

2 CSC 2 CSC Australia 2 CSC Australia 2 CSC Australia 4 CSC Australia 2 CygnaCom 2 DSD 2 DSD 2 DSD 2 DSD 2 DSD 2 DSD 2 DSD 2 DSD 2 DSD 3 DSD 4 DSD 4 DSD 7 DSD 3 EDS 4 EDS 4 EDS 4 EDS 4 EDS 4 EDS 4 EDS 5 EDS 3 EDS 4 EDS 4 EDS 4 EDS 2 ERACOM 3 France 4 France 4 France 4 France 2 German 2 Germany 3 Germany 3 Germany 3 Germany 2 Germany 2 Germany 3 Germany 3 Germany 3 Germany 3 Germany 3 Germany 3 Germany 3 Germany 3 Germany 3 Germany

Networking Networking Networking Networking Networking Communications Misc Misc PC security PC security PC security PC security PC security PC security PC security OS DBMS OS Networking OS OS Misc Networking OS OS DBMS Communications OS Access Control Networking OS PC security PC security Misc Misc Misc PC security Access Control Misc Misc Misc Access Control Access Control Access Control Access Control Access Control Cards Misc Misc Misc Misc Misc

2000 Check Point FireWall-1 Version tbd 1996 Sun SPF-100G 1.0 1997 Cisco IOS 11.2(16),P,AA1,T,T1 w/Remote Management 1998 Cisco PIX Firewall 4.0 1998 Softway Secure-IT Gauntlet 1998 Dragonfly Guard Model G1.2 1998 ERACOM PCASM Ver 2.12, 2.13 1998 ERACOM CSA7000 Ver 2.13 Norman Data Defense BlockIt! Ver 2.1 Australian CustomLoc Hi-Speed Ver 3.05 Australian CustomLoc Access Ver 3.10 Australian CustomLoc PC Card Ver 1.31 Australian CustomLoc Smart Security V3.10 Kinetic Access II+ Ver 1.71 Mozaic Touchlock V6.4 Amdahl Multiple Domain Feature, Version ML2.1, Ver 14X033B Computer Associates Secure INGRES ES 6.3/03 Hitachi HDS EX Series Multiple Logical Processor Facility (MLPF) Phase 5, Version 05-00-53 Compucat CSX-100 Ver 1.0 1995 Sun Solaris 2.4SE for a range of SPARC and Intel platforms 1996 Microsoft Windows NT Workstation and Windows NT Server version 3.51 1997 Trusted EDI on Trusted Solaris 1.2 1997 Gauntlet Internet Firewall Version 3.2 1997 BEST-X/B1 (Bull Enhanced Security Technology) Version 1.1.1.9 1997 BEST-X/C2 (Bull Enhanced Security Technology) Version 1.1.1.9 1998 Trusted Oracle7 Release 7.1.5.9.3 1998 CERBERUS Guard Processor LSS Variant (Version 1.0) 1999 SCO UnixWare2.1.0 on Fujitsu-ICL C530i and G550i Teamservers 1999 KILGETTY PLUS NT4 Version 1.0 1999 Gauntlet Internet Firewall for Windows NT Version 3.01 2000 SCO CMW+ Release 3.0 2000 ERACOM PC Vault Ver 4.20 1996 PC Product SECU-C V2.00 1996 Component ST 16601 G/SKG using banking application B4/B0' V2 1997 Commercial System PC 2.3 Version 2 using component ST 16SF48A 1997 MICRO-SAMFLEX Version 1.0 using component ST Gelosia Safeguard Pro v3.1Z 1993 SCANLANG v12.1 Update 02b/93 vom 15.05.1993 1993 GCR550 v2.22 1993 HML 500 Version 2.6 1993 KVT1 V2.03A 1994 PC-SAFE B I V Version 9.1 1994 WISO-Crypt 1.2 1994 Firmloc 2.11 1994 Safeguard Professional 4.1A 1994 Safeguard Professional 4.1A (English Version) 1994 Cardreader PC-Chip -KVK Version 6.50 1994 G80 - 1501HAD Index /09 1994 G80-1501 HAD, Index /04 bis Index/08 1994 IBM 5937-B05 S/N 51066 1994 KV-CKT 1994 MEDItype Version with PC-Interface E004/006

Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany Germany UK UK UK UK UK UK UK UK UK UK UK UK UK UK UK UK UK UK

ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC CC CC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC CC ITSEC CC CC

E2 E2 E1 E2 E2 E2 E2 E2 E3 E3 E2 E2 E2 E2 E2 E2 E2 E3 E4 E4 E1 E1 E2 E2 E3 E3 E3 E4 E1 E2 E2 E2 E3 E4 E3 E3 EAL1 EAL1 E3 E3 E3 E3 E3 E3 E3 E3 E3 E3 EAL2 E2 EAL3 EAL3

3 Germany Misc 3 Germany Misc 2 Germany Access Control 3 Germany Access Control 3 Germany Cards 3 Germany Communications 3 Germany Misc 4 Germany Cards 4 Germany Cards 4 Germany Cards 3 Germany Cards 3 Germany Cards 3 Germany Cards 3 Germany Cards 3 Germany Misc 3 Germany Misc 3 Germany Misc 4 Germany Access Control 5 Germany Misc 5 Germany Misc 2 Germany Access Control 2 Germany Access Control 3 Germany Misc 3 Germany Misc 4 Germany Communications 4 Germany Misc 4 Germany OS 5 Germany Misc 2 Germany Communications 3 Germany Cards 3 Germany Cards 3 Germany Cards 4 Germany Misc 5 Germany Misc 4 IBM Global Services Communications 4 IBM Global Services Communications 1 IBM Global Services Access Control 1 IBM Global Services Networking 4 IBM Global Services DBMS 4 IBM Global Services Access Control 4 IBM Global Services Access Control 4 Logica DBMS 4 Logica OS 4 Logica OS 4 Logica OS 4 Logica Access Control 4 Logica Networking 4 Logica OS 2 Logica Protection profile 3 Logica OS 3 Logica Protection Profile 3 Logica Protection Profile

1994 MEDItype Version without PC-Interface 1994 PE 115 1995 PC-Safe privat v9.1 1995 Safeguard Easy for DOS v2.0 1995 CARD STAR/medic Article Number 4211 1995 KryptoGuard X.25 Version 1.0 1995 SINIX V5.42/AUDIT V1.0 1995 Walther Cardtype Version E004/006 1995 CARD STAR/medic Version 2.4 1995 CARD STAR/visit Version 2.4 1996 CARD STAR/medic Version 2.5 1996 CARD STAR/memo 1996 CARD STAR/visit Version 2.5 1996 MediCard handy 1996 CKL-125 Version 1.0 1996 EWS II, Version 01 1996 MAWIS Mulltonnenidentifikationssystem Rev. 1.0 1996 SIKOM-TIBIS Version 002.05 1996 Setcad 202 1996 Setcos 3.1 Version 3.11 1997 D-V-S Release 2.0 1997 SFile 4.0 1997 HML 825 Version 3.3 1997 Mobile Datenerfassung Versichertenkarte Version 1.1 1997 X PRESSO Security Package 1.1 1997 AIX V4.2 1997 Reliant UNIX 5.43 with AUDIT 2.0 1997 Setcos 3.1 Version 3.1.1.1 1998 DORKRYPT 4.0 1998 B1 Chipcard-reader, B1 KLC, V4.0 (Firmware) 1998 PSR2 Firmware Rev. 2.27 1998 SNI B1 PC-Card Rev. 2.27 1998 AIX Version 4.3 1998 Setcad 202 Software Version 1.43 1996 ED2048R3 RAMBUTAN Data Encryption Unit 1997 ED8000RL RAMBUTAN LAN Interconnect IP Encryptor Version G1A 1998 Sentry 2020 1998 VCS Firewall Version 3.0 1999 CA-Open INGRES and OpenINGRES/Enhanced Security Release 1.1 2000 HARDWALL 2000 Latches 95 Version 5.0 1994 Oracle7 and Trusted Oracle7 Release 7.0.13.6 1994 VME Operating System with Government Security Option, Version SV294, running on series 39 proces 1994 VME Operating System with High Security Option, Version SV294, running on series 39 processors 1995 Trusted Solaris Version 1.2 ITSEC(E) running on specified models of SPARCstations 5, 10 and 20 1996 STOPLOCK V Version 2.23a, STOPLOCK V\SC Version 2.23 & STOPLOCK V SCenSOS v2.23a 1997 CyberGuard Firewall Version 2.2.1e 1997 Sequent DYNIX/ptx Unix Version 4.1 SLS and 4.1a SLS on Symmetry 5000 Systems (models SE30 and SE 1998 Role-Based Access Control Protection Profile Version 1 1998 Sun Solaris 2.5.1SE 1998 Oracle Commercial Database Management System Protection Profile 1998 Oracle Government Database Management System Protection Profile

UK UK UK UK UK UK UK UK UK UK UK UK UK UK UK UK UK US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US

ITSEC CC ITSEC ITSEC ITSEC ITSEC ITSEC CC CC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC CC ITSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC

E3 EAL4 E3 E3 E3 E3 E2 EAL3 EAL3 E3 E3 E3 E3 E3 E3 EAL4 E3 C1 C2 A1 C2 B2 C2 C2 C2 C2 C2 C2 C2 C2 C2 B1 B1 C2 B1 B1 B2 B1 B1 B1 C2 C2 B1 B1 B2 B3 C2 B1 B1 B1 B2 C2

4 Logica 4 Logica 4 Logica 4 Logica 4 Logica 4 Logica 3 Logica 3 Logica 3 Logica 4 Logica 4 Logica 4 Logica 4 Logica 4 Logica 4 Logica 4 Logica 4 Logica 2 NCSC 3 NCSC 7 NCSC 3 NCSC 5 NCSC 3 NCSC 3 NCSC 3 NCSC 3 NCSC 3 NCSC 3 NCSC 3 NCSC 3 NCSC 3 NCSC 4 NCSC 4 NCSC 3 NCSC 4 NCSC 4 NCSC 5 NCSC 4 NCSC 4 NCSC 4 NCSC 3 NCSC 3 NCSC 4 NCSC 4 NCSC 5 NCSC 6 NCSC 3 NCSC 4 NCSC 4 NCSC 4 NCSC 5 NCSC 3 NCSC

Communications DBMS DBMS DBMS OS OS Access Control Protection Profile Protection Profile DBMS Networking Networking Networking OS OS DBMS OS OS Access Control OS Access Control OS OS OS OS OS Access Control OS OS OS OS OS OS OS OS OS Communications OS OS OS OS OS OS OS OS OS OS OS OS OS OS DBMS

1998 CASM CryptServe Version 1.02 1998 Oracle7 Release 7.2.2.4.13 1998 Oracle7 Release 7.3.4 on NT 4.0 1998 Oracle7, Release 7.2.2.4.13 1998 Sequent DYNIX/ptx Version 4.4.2 running on Symmetry 5000 1998 Trusted Solaris 2.5.1 1999 Disknet NT Version 1.70 1999 UK Controlled Access Protection Profile 1999 UK Labelled Security Protection Profile 1999 Trusted Oracle7 Release 7.2.3.0.4 1999 CyberGuard Firewall for UnixWare 4.1 1999 CyberGuard Firewall for Windows NT 4.1 1999 StorageTek DXE Router (label based) 1999 Microsoft Windows NT Workstation and Windows NT Server version 4.0 1999 Sun Solaris 2.6 2000 Oracle8 Release 8.0 2000 Multiple Logical Processor Feature Version 3.3.0 1984 IBM RACF Version 1 Release 5 w/MVS 1984 Computer Associates ACF2 running with MVS/SP 1984 Honeywell SCOMP Version STOP Release 2.1 1985 Computer Associates TOP SECRET running with MVS 1985 Honeywell Multics Version MR11.0 1986 Control Data Network Operating System (NOS) 1986 Digital VAX/VMS 4.3 1986 Encore Computer UTX/32S Release 1.0 1986 Hewlett Packard MPE V/E, Release G.03.04 1987 Computer Associates ACF2/VM running with VM/SP 1987 Unisys MCP/AS w/Infoguard Version 3.7 1988 IBM MVS/XA with RACF 1988 Prime Computer Primos Revision 21.0.1.DODC2A 1989 IBM VM/SP with RACF 1989 Unisys OS 1100 Security Release I 1989 AT&T System V/MLS, Release 1.1.2 1990 Wang SVS/OS CAP 1.00 1990 AT&T System V/MLS, Release 1.2.0 1990 IBM MVS/ESA 1990 Cryptek VSLAN 5.0 1991 Unisys OS 1100/2200 Release SB3R6 1991 Unisys OS 1100/2200 Release SB3R8 1991 SecureWare CMW + for A/UX Version 1.0 1992 Concurrent Computer Trusted OS/32 Release 08-03.3S 1992 ConvexOS/Secure V10.0 1992 Unisys OS 1100/2200 Release SB4R2 1992 AT&T System V/MLS, Release 1.2.0u 1992 Trusted XENIX 3.0 1992 Wang XTS-200 STOP 3.1.E 1993 Tandem Guardian-90 w/Safeguard S00.01 1993 Harris CX/SX with LAN/SX 6.1.1 1993 Harris CX/SX 6.1.1 1993 Hewlett Packard HP-UX BLS release 8.04 1993 Trusted XENIX 4.0 1994 INFORMIX-OnLine/Secure 4.1

US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US US UK UK UK UK UK UK UK UK UK UK

TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC TCSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC ITSEC CC CC

C2 C2 C2 C2 C2 B1 B1 B1 B1 B1 B1 B1 B2 B3 A1 A1 C2 C2 C2 B1 B1 B1 B1 B1 B2 B3 B3 C2 C2 B1 B1 C2 C2 C2 C2 C2 B1 C2 C2 C2 B1 B3 E2 E3 E3 E3 E3 E4 E3 E2 EAL3 EAL4

3 NCSC 3 NCSC 3 NCSC 3 NCSC 3 NCSC 4 NCSC 4 NCSC 4 NCSC 4 NCSC 4 NCSC 4 NCSC 4 NCSC 5 NCSC 6 NCSC 7 NCSC 7 NCSC 3 NCSC 3 NCSC 3 NCSC 4 NCSC 4 NCSC 4 NCSC 4 NCSC 4 NCSC 5 NCSC 6 NCSC 6 NCSC 3 NCSC 3 NCSC 4 NCSC 4 NCSC 3 NCSC 3 NCSC 3 NCSC 3 NCSC 3 NCSC 4 NCSC 3 NCSC 3 NCSC 3 NCSC 4 NCSC 6 NCSC 3 Syntegra 4 Syntegra 4 Syntegra 4 Syntegra 4 Syntegra 5 Syntegra 4 Syntegra 3 Syntegra 3 Syntegra 4 Syntegra

DBMS DBMS OS OS OS DBMS DBMS DBMS OS OS OS OS Communications OS Networking Networking OS OS OS OS OS OS OS OS Communications OS OS OS OS OS OS DBMS OS OS OS OS DBMS OS OS OS OS OS Communications Communications Communications Communications Communications OS Communications Access Control Access Control Networking

1994 INFORMIX-OnLine/Secure 5.0 1994 Oracle7 1994 Data General AOS/VS II, Release 3.01 1994 Data General AOS/VS II, Release 3.10 1994 Digital OpenVMS VAX Version 6.0 1994 INFORMIX-OnLine/Secure 4.1 1994 INFORMIX-OnLine/Secure 5.0 1994 Trusted Oracle7 1994 Amdahl UTS/MLS, Version 2.1.5+ 1994 Digital SEVMS VAX Version 6.0 1994 Hewlett Packard HP-UX BLS release 9.0.9+ 1994 Unisys OS 1100/2200 Release SB4R7 1994 Cryptek VSLAN/VSLANE 5.1 1994 Wang XTS-200 STOP 3.2.E 1994 Boeing MLS LAN V 2.1 1994 Gemini Trusted Network Processor V1.01 1995 Digital OpenVMS VAX Version 6.1 1995 IBM AS/400 with OS/400 V2R3M0 1995 Microsoft Corporation Windows NT, Version 3.5 1995 Cray Trusted UNICOS 8.0 1995 Harris CX/SX with LAN/SX 6.2.1 1995 Digital SEVMS VAX Version 6.1 1995 Harris CX/SX 6.2.1 1995 Silicon Graphics Trusted IRIX/B release 4.0.5EPL 1995 Cryptek DiamondLAN/DiamondLANe (formerly VSLAN/VSLANE 6.0) 1995 Wang XTS-300 STOP 4.1 1995 Wang XTS-300 STOP 4.1a 1996 Digital OpenVMS VAX and Alpha Version 6.1 1996 IBM AS/400 with OS/400 V3R0M5 1996 Digital SEVMS VAX and Alpha Version 6.1 1996 Digital ULTRIX MLS+ Version 2.1 on VAX Station 3100 1997 Sybase SQL Server version 11.0.6 1997 Novell NetWare 4 Network System Architecture & Design 1997 Novell NetWare 4.11 1997 SISTex Assure EC 4.11 for Novell 1997 IBM AS/400 V3R2 Feature Code 1920 Version 2 Hardware 1997 Sybase Secure SQL Server version 11.0.6 1998 Computer Associates CA-ACF2 MVS Release 6.1 1998 IBM AS/400 with OS/400 V4R1M0 with Feature Code 1920 1998 IBM RS/6000 Distributed System 1998 CA-ACF2 MVS Release 6.1 with CA-ACF2 MAC 1998 Wang XTS-300 STOP 4.4.2 1992 ED600 RAMBUTAN Data Encryption Unit 1994 ED2048R RAMBUTAN Data Encryption Unit 1995 ED2048RU RAMBUTAN Data Encryption Unit 1995 ED600RTS RAMBUTAN Synchronous Link Encryptor 1995 Racal RAMBUTAN SAFE 2M Version 2.01 1995 IBM Processor Resource Systems Manager 1997 NETWORK SECURITY WORKSTATION Automated Security Management 1998 GUARDIAN ANGEL Version 5.01D1 1999 Entrust/Admin & Entrust/Authority from Entrust/PKI 4.0a 2000 BorderWare Version 6.1 Firewall Server

US and Overseas Evaluations 1 0.95 0.9 0.85 0.8 0.75

Product Evaluations

0.7 0.65 0.6 0.55

Column E Column F

0.5 0.45 0.4 0.35 0.3 0.25 0.2 0.15 0.1 0.05 0 1984

1985

1986

1987

1988

1989

1990

1991

1992

Year of Evaluation

1993

1994

1995

1996

1997

1998

Column E Column F

Evaluations in Network Security Areas 1 0.95 0.9 0.85 0.8 0.75

Product Evaluations

0.7 0.65 0.6 0.55

Column D Column C Column B

0.5 0.45 0.4 0.35 0.3 0.25 0.2 0.15 0.1 0.05 0 1992

1993

1994

1995

1996

1997

Year of Evaluations

1998

1999

2000

Column D Column C Column B

Evaluation Levels Achieved 1 0.95 0.9 0.85 0.8

New Product Evaluations

0.75 0.7 0.65

Column H Column G Column F

0.6 0.55 0.5

Column E Column D Column C Column B

0.45 0.4 0.35 0.3 0.25 0.2 0.15 0.1 0.05 0 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 Year of Evaluation

olumn H olumn G olumn F

olumn E olumn D olumn C olumn B

Evaluation Levels Achieved 1 0.95 0.9 0.85 0.8

Products Evaluated

0.75 0.7 0.65 0.6 0.55 0.5 0.45 0.4 0.35 0.3 0.25 0.2 0.15 0.1 0.05 0 1984

1985

1986

1987

1988

1989

1990

1991

1992

1993

1994

1995

Year of Evaluation Column B

Column C

Column D

Column E

1996

1997

1998

1999

2000

1999

2000

Security Evaluations by Year 1 0.95 0.9 0.85 0.8 0.75

Product Evaluations

0.7 0.65 0.6 0.55

Column E Column F

0.5 0.45 0.4 0.35 0.3 0.25 0.2 0.15 0.1 0.05 0 1 984

1 985

1 986

1 987

1 988

1 989

1 990

1 991

1 992

1 993

1 994

Year of Evaluation

1 995

1 996

1 997

1 998

1 999

2 000

Column E Column F

OS and DBMS Product Evaluations 1 0.95 0.9 0.85 0.8 0.75 0.7

Evaluations

0.65 0.6 0.55

Column J Column I

0.5 0.45 0.4 0.35 0.3 0.25 0.2 0.15 0.1 0.05 0 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000

Year

lumn J lumn I

Evaluations of Network Security Products 1 0.95 0.9 0.85 0.8

Products Evaluated

0.75 0.7 0.65 0.6

Column D Column C Column B

0.55 0.5 0.45 0.4 0.35 0.3 0.25 0.2 0.15 0.1 0.05 0 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000

Year

umn D umn C umn B

OS/DBMS vs Network Product Evaluations 1 0.95 0.9 0.85 0.8 0.75 0.7

Evaluations

0.65 0.6 0.55 Network Security

0.5

OS/DBMS

0.45 0.4 0.35 0.3 0.25 0.2 0.15 0.1 0.05 0 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000

Evaluation Year

Security

S

Year

Year 259 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 Year

Year

Total Evals 259 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

Nation US

Year

Year

US Evals Non-US 82 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

82 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000

Product Type

Networking Access Control Communications OS DBMS 259 Networking Access Control Communications OS DBMS 1984 Err:504 Err:504 Err:504 Err:504 Err:504 1985 Err:504 Err:504 Err:504 Err:504 Err:504 1986 Err:504 Err:504 Err:504 Err:504 Err:504 1987 Err:504 Err:504 Err:504 Err:504 Err:504 1988 Err:504 Err:504 Err:504 Err:504 Err:504 1989 Err:504 Err:504 Err:504 Err:504 Err:504 1990 Err:504 Err:504 Err:504 Err:504 Err:504 1991 Err:504 Err:504 Err:504 Err:504 Err:504 1992 Err:504 Err:504 Err:504 Err:504 Err:504 1993 Err:504 Err:504 Err:504 Err:504 Err:504 1994 Err:504 Err:504 Err:504 Err:504 Err:504 1995 Err:504 Err:504 Err:504 Err:504 Err:504 1996 Err:504 Err:504 Err:504 Err:504 Err:504 1997 Err:504 Err:504 Err:504 Err:504 Err:504 1998 Err:504 Err:504 Err:504 Err:504 Err:504 1999 Err:504 Err:504 Err:504 Err:504 Err:504 2000 Err:504 Err:504 Err:504 Err:504 Err:504

1984 1985 1986

OS/DBMS Network Security Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

Year Year

OS OS 1984 Err:504 1985 Err:504 1986 Err:504 1987 Err:504 1988 Err:504 1989 Err:504 1990 Err:504 1991 Err:504 1992 Err:504 1993 Err:504 1994 Err:504 1995 Err:504 1996 Err:504 1997 Err:504 1998 Err:504 1999 Err:504 2000 Err:504

1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000

Year

Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

Generic

Year 259 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000

1 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Low

1984 1985 1986 1987 1988 1989 1990 1991 1992

Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

2 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

3 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

4 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

Moderate High Superior Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

5 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

6 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

7 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

Err:504

1993 1994 1995 1996 1997 1998 1999 2000

Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504

DBMS DBMS Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504 Err:504