Risk assessment of LAN communications

Abstract

The National Computer Security Center's (NCSC) Computer Security Requirements -- Guidance for Applying the DoD TCSEC in Specific Environments (CSC-STD-003-85) describes an environmental evaluation process which can be utilized to determine the level of trust required in a given Local Area Network (LAN) system for processing sensitive information. This thesis investigates the environmental evaluation process and applies it to the LAN environment of a hypothetical naval aviation squadron.