LWN.net Logo

MS-SQL worm - open source not needed for B1 rating

MS-SQL worm - open source not needed for B1 rating

Posted Jan 30, 2003 20:27 UTC (Thu) by wittenberg (guest, #4473)
In reply to: A look at the MS-SQL worm by philips
Parent article: A look at the MS-SQL worm

You don't need to open source to get B1 certification. Ten years ago I worked on a product that was to have been certified A1. We had to show our code to NCSC, but only under a non-disclosure agreement. So you need other people to look at the code, but you don't let everyone look at it.


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds