Slashdot Mirror
Building Secure Computers?
maotx asks: "Growing into the job of a system administrator, I've been tasked with something I'm not quite prepared for: purchase or build a computer that meets DoD compliance for classified 'Secret' information. Several vendors, including Dell our primary supplier, offers computers that will work, but being new to the criteria I want to make sure the right computer is purchased. The computer will be used to create secure CAD drawings (Solidworks, OrCAD, etc) and must have, from what I can tell, a removable hard drive and security stickers to prevent tampering. What is you're experience in setting up a secure computer and is it better to have a vendor do it, or yourself?"
Even if anyone reading this did know, I'm pretty sure it's illegal for them to give you details.
Come to think of it, I'm pretty sure it's illegal for you to even disclose the fact that you're building computers for a classified project...
Quite.
Security level?
FOUO, Secret, Top Secret, Other
Physical security?
Is the actual room secure, or just the hardware?
What platform?
Win/Lin/Mac/Other?
Fingerprint scanner? SmartCard reader?
Some sort of secure LAN, or standalone workstations?
And this is just scratching the surface. You need to find out these answers, and far more. But don't ask in here.
Call your person who set up the contract, the DoD program manager, and your building security manager
Then call Dell. Especially if you need a basic plan soon.
A removeable HD and a sticker does not a secure system make.
El oh el!