Home     Blog

Rainbow Books

The Rainbow Books are a set of Department of Defense documents on computer security.

The Rainbow Books are called that because each book is bound in brightly colored paper.

Orange Book
DoD 5200.28-STD
Department of Defense Trusted Computer System Evaluation Criteria.

Green Book
CSC-STD-002-85
Department of Defense Password Management Guideline.

Yellow Book
CSC-STD-003-85
Computer Security Requirements — Guidance for Applying the Department of Defense Trusted Computer System Evaluation Criteria in Specific Environments.

Rainbow Books Rainbow Books

Yellow Book
CSC-STD-004-85
Technical Rationale Behind CSC-STD-003-85: Computer Security Requirements. Guidance for Applying the Department of Defense Trusted Computer System Evaluation Criteria in Specific Environments.

Tan Book
NCSC-TG-001
A Guide to Understanding Audit in Trusted Systems.

Bright Blue Book
NCSC-TG-002
Trusted Product Evaluation – A Guide for Vendors.

Neon Orange Book
NCSC-TG-003
A Guide to Understanding Discretionary Access Control in Trusted Systems.

Teal Green Book
NCSC-TG-004
Glossary of Computer Security Terms.

Red Book
NCSC-TG-005
Trusted Network Interpretation of the Trusted Computer System Evaluation Criteria.

Orange Book
NCSC-TG-006
A Guide to Understanding Configuration Management in Trusted Systems.

Burgundy Book
NCSC-TG-007
A Guide to Understanding Design Documentation in Trusted Systems.

Dark Lavender Book
NCSC-TG-008
A Guide to Understanding Trusted Distribution in Trusted Systems.

Venice Blue Book
NCSC-TG-009
Computer Security Subsystem Interpretation of the Trusted Computer System Evaluation Criteria.

Aqua Book
NCSC-TG-010
A Guide to Understanding Security Modeling in Trusted Systems.

Dark Red Book
NCSC-TG-011
Trusted Network Interpretation Environments Guideline — Guidance for Applying the Trusted Network Interpretation.

Pink Book
NCSC-TG-013
Rating Maintenance Phase — Program Document.

Purple Book
NCSC-TG-014
Guidelines for Formal Verification Systems.

Brown Book
NCSC-TG-015
A Guide to Understanding Trusted Facility Management.

Yellow-Green Book
NCSC-TG-016
Guidelines for Writing Trusted Facility Manuals.

Light Blue
NCSC-TG-017
A Guide to Understanding Identification and Authentication in Trusted Systems.

Light Blue Book
NCSC-TG-018
A Guide to Understanding Object Reuse in Trusted Systems.

Blue Book
NCSC-TG-019
Trusted Product Evaluation Questionnaire.

Gray Book
NCSC-TG-020-A
Trusted Unix Working Group (TRUSIX) Rationale for Selecting Access Control List Features for the Unix System.

Lavender Book
NCSC-TG-021
Trusted Data Base Management System Interpretation of the Trusted Computer System Evaluation Criteria.

Yellow Book
NCSC-TG-022
A Guide to Understanding Trusted Recovery in Trusted Systems.

Bright Orange Book
NCSC-TG-023
A Guide to Understandng Security Testing and Test Documentation in Trusted Systems.

Purple Book
NCSC-TG-024 (Volume 1/4)
A Guide to Procurement of Trusted Systems: An Introduction to Procurement Initiators on Computer Security Requirements.

Purple Book
NCSC-TG-024 (Volume 2/4)
A Guide to Procurement of Trusted Systems: Language for RFP Specifications and Statements of Work – An Aid to Procurement Initiators.

Purple Book
NCSC-TG-024 (Volume 3/4)
A Guide to Procurement of Trusted Systems: Computer Security Contract Data Requirements List and Data Item Description Tutorial.

Purple Book
NCSC-TG-024 (Volume 4/4)
A Guide to Procurement of Trusted Systems: How to Evaluate a Bidder's Proposal Document – An Aid to Procurement Initiators and Contractors.

Green Book
NCSC-TG-025
A Guide to Understanding Data Remanence in Automated Information Systems.

Hot Peach Book
NCSC-TG-026
A Guide to Writing the Security Features User's Guide for Trusted Systems.

Turquiose Book
NCSC-TG-027
A Guide to Understanding Information System Security Officer Responsibilities for Automated Information Systems.

Violet Book
NCSC-TG-028
Assessing Controlled Access Protection.

Blue Book
NCSC-TG-029
Introduction to Certification and Accreditation.

Light Pink Book
NCSC-TG-030
A Guide to Understanding Covert Channel Analysis of Trusted Systems.

C1 Technical Report-001
Computer Viruses: Prevention, Detection, and Treatment.

C Technical Report 79-91
Integrity in Automated Information Systems.

C Technical Report 39-92
The Design and Evaluation of INFOSEC systems: The Computer Security Contributions to the Composition Discussion.

C Technical Report 111-91
Integrity-Oriented Control Objectives: Proposed Revisions to the TCSEC, October 1991.

NCSC Technical Report 002
Use of the TCSEC for Complex, Evolving, Multipolicy Systems.

NCSC Technical Report 003
Turning Multiple Evaluated Products Into Trusted Systems.

NCSC Technical Report 004
A Guide to Procurement of Single Connected Systems – Language for RFP Specifications and Statements of Work – An Aid to Procurement Initiators – Includes Complex, Evolving, and Multipolicy Systems.

NCSC Technical Report 005 Volume 1/5
Inference and Aggregation Issues In Secure Database Management Systems.

NCSC Technical Report 005 Volume 2/5
Entity and Referential Integrity Issues In Multilevel Secure Database Management.

NCSC Technical Report 005 Volume 3/5
Polyinstantiation Issues In Multilevel Secure Database Management Systems.

NCSC Technical Report 005 Volume 4/5
Auditing Issues In Secure Database Management Systems.

NCSC Technical Report 005 Volume 5/5
Discretionary Access Control Issues In High Assurance Secure Database Management Systems.

NTISSAM COMPUSEC/1-87
Advisory Memorandum on Office Automation Security Guideline.

You can find the Rainbow Books in electronic form at Rainbow Series Library

VN:F [1.9.17_1161]
Rating: 6.0/10 (1 vote cast)
Rainbow Books, 6.0 out of 10 based on 1 rating
Follow Daniel Memetic on

Leave a Reply

Related Posts

  • How to Buy Books for the Kindle

    A kindle is a portable electronic device that Amazon developed. It allows users to store and access e-books from anywhere. Kindles are capable of storing thousands of books at once and include functions that aid the user to organize his/her e-books as well as search through them for specific content. Though Kindles are still relatively [...]...


  • How Many Books Can a Kindle Hold?

    A Kindle is an e-reader that Amazon produced, which also includes tablet PC features that allow users to browse the Internet, check their email, and use a variety of built-in applications. Kindles are available in a variety of different models including the original Kindle, the Kindle DX, and the Kindle Fire, just to name a [...]...


  • How Much do Books Cost on the Nook?

    A Nook is an e-reader/tablet PC that Barnes & Noble produced. It can be used to read e-books from both Barnes & Noble and third party sources, browse the Internet, and even run third party applications. There are several different types of Nooks available that mimic other e-readers such as the Kindle, Sony Reader, and [...]...


  • Where to Read Free Books Online

    On-line books On-line books are a type of eBook that can be accessed and read via the Internet. Online books are available as free and paid versions. They are different from traditional e-books as they can be read online. Before the advent of the Internet, e-books were in CD format which had to be inserted  [...]...


  • How to Get Free Books on Kindle

    A Kindle is a portable electronic device that allows users to read and access e-books from anywhere. Amazon provides Kindles, which include Internet access and can be charged via any USB port. Likewise, Kindles are able to store thousands of books simultaneously and allow users to modify the e-books they access by changing the font, [...]...