Global Command and Control System (GCCS). Mobile Code Security Policy Guidance For Browser Script Software Development (JavaScript, JScript, VBScript)

摘要

Information contained in classified computer systems requires protection above and beyond that required by commercial users. Hence, Web access, and the browsers that implement that access, must be closely monitored and guarded against both intentional and unintentional disclosure, alteration, and/or destruction of information. Global Command and Control System (GCCS) users also need protection from disruption and denial of service. This document defines policies for the use of browser script languages, including JavaScript, JScript and VBScript, in web pages developed for use on the GCCS, and defines procedures for the application of those policies to determine the suitability of code for use within classified enclaves manipulating highly sensitive information.