Trusted Solaris 8 4/01 OE obtains marketplace first in security certification

Sun Microsystems announced that the Trusted Solaris 8 4/01 Operating Environment (Solaris OE) received security certification under the Common Criteria Labeled Security Protection Profile (LSPP) at Evaluation Assurance Level 4 (EAL4). The only operating system to achieve this level of certification, the Trusted Solaris 8 OE (http://sun.com/trustedsolaris) is an integrated platform expanding the capabilities of the Solaris 8 OE for customers who require enhanced security and strong access control in a highly secure environment.

The Trusted Solaris 8 OE is considered the de facto standard for protecting classified and sensitive information in military and government institutions. Providing multiple levels of security to control access and handling of data, the Trusted Solaris 8 OE provides extensive protection for servers and desktop systems that process highly sensitive information. The LSPP EAL4 independent evaluation assures customers that Trusted Solaris 8 OE meets the global standards for evaluating IT security set forth by Common Criteria. The LSPP EAL4 certification is equivalent to the Orange Book B1 standard published by the U.S. government. Trusted Solaris 8 OE is the only operating system to carry the Common Criteria Labeled Security Protection Profile at Evaluation Assurance Level 4 certification. (Press Release)

"Solaris already sets the standard for operating system security, but users who require multiple levels of security can turn to Trusted Solaris 8 OE, which provides the highest level of security in the marketplace," said Andy Ingram, vice president of marketing, Solaris software. "Our customers face an increasingly hostile environment where internal and external security threats are growing in frequency and sophistication. They need an operating system that can protect trade secrets, customer lists, litigation strategies and other confidential, mission-critical information from security breaches."

Today, companies and government agencies invite customers, citizens, employees, partners and suppliers into their networks as part of day-to-day operations. This type of access allows for increased productivity, but can also leave sensitive data and classified information exposed. As information security breaches continue unabated, the financial toll and liability is mounting for both private and public enterprises. The Solaris 8 OE provides industry-leading security features not commonly found in standard operating systems. To extend these capabilities even further, Sun developed Trusted Solaris 8 OE, which enables organizations to safeguard their most-critical information in a networked environment by processing and managing information at different levels of sensitivity. The Trusted Solaris 8 OE takes security to the next level with mandatory access control, which restricts or grants access to data only after verifying the clearance level of the user and comparing it to the security level of the data.

One organization that demands security clearance for classified information is Veridian, a provider of information-based systems and integrated solutions for the national intelligence community, the Department of Defense, law enforcement and other federal and local government agencies. Using the capabilities of the Trusted Solaris 8 OE, Veridian developed the Trusted Network Environment, a scalable suite of applications, servers, databases, gateways and services that ensure fully audited, controlled access to all information and services across the IT enterprise.

"We've built all of our Trusted Network Environment client and server applications to run on the Trusted Solaris 8 OE," said David Castillo, Veridian's director of TNE product and service development. "The Trusted Solaris 8 OE provides the powerful security features that our government customers require to protect our nation's most valuable information."

This article was originally published on May 8, 2002
Page 1 of 2

Thanks for your registration, follow us on our social networks to keep up-to-date