Trusted Computing Exemplar: Trusted Distribution Plan - Preliminary Design

Abstract

This document describes the Life Cycle Management Plan for the development of a high assurance secure product. A high assurance product is one for which its users have a high level of confidence that its security policies will be enforced continuously and correctly. Such products are constructed so that they can be analyzed for these characteristics. Lifecycle activities ensure that the product reflects the intent to ensure that the product is trustworthy and that vigorous efforts have been made to ensure the absence of unspecified functionality, whether accidental or intentional. This document describes the policy and high-level processes for the distribution of the TCX product to external users. This document is driven by the TCX Life Cycle Management Plan (LCMP), the Configuration Management Plan, and the Quality Assurance Plan. This document provides the framework for the Integration Procedures and the Delivery Procedures identified in the LCMP. Some of the concepts described in this document were developed in a student’s Masters thesis. This is a preliminary design for product distribution; it has not been tested with a product actually distributed to end-users.