Configuring a trusted system using the TNI

The authors summarize a study performed to identify and evaluate alternatives for achieving an acceptable level of risk in a distributed system by utilizing computer components with the lowest TCSEC (trusted computer system evaluation criteria) ratings acceptable under DoD guidelines. The security implications of connecting equipments that handle differing sensitivity levels of data are examined together with the consequences of using equipments using trusted system technology, utilizing personnel with higher clearances, and separating data by sensitivity level as ways of achieving a desired level of trust in a multilevel system. The rationale for choosing this system is that it is large enough to demonstrate the implications of the guidelines given in the trusted network interpretation (TNI), yet small enough to easily verify the validity of the results