ABSTRACT
A common misperception is that computer and network security began with the Internet. In fact, the
need for and interest in computer security or COMPUSEC have been around as long as computers.
Likewise, the Orange Book is often cited as the progenitor of the CC; actually, the foundation for the CC
was laid a decade earlier. One of the first COMPUSEC standards, DoD 5200.28-M,
Techniques and
Procedures for Implementing, Deactivating, Testing, and Evaluating Secure Resource-Sharing ADP Systems,
was issued in January 1973. An amended version was issued June 1979.
