Information security involves many components, including communication security, computer security, physical security, and personnel security. This paper deals only with communication and computer security. In systems that involve either communications systems or monolithic computer systems (but not both) the overall requirements for information security are relatively straightforward, or at least relatively well understood. However, in distributed processing systems that usually involve both communications and computer components, there is a need for both communications as well as computer security techniques. This paper addresses communications security, computer security, and their relationship in information protection in the distributed processing environment.

This paper describes a major goal of the DOD Computer Security Center, which is to encouraqe the easy availability of computer products with enhanced security features. The mechanisms by which this is to be accomplished are described. There are detailed explanations of the Preliminary and Final Product Evaluation processes. The paper then takes a pragmatic view, from three perspectives, of how the process is actually working. Finally, an update is included, which describes the present status of the evaluation efforts underway.