Cisco IPS4345 Manual de usuario descargar pdf (Pagina 26)

Cisco Intrusion Prevention System Security Target

Objective

Rationale

O.VERIFIABLE_UPDATES

This security objective is necessary to counter the threat

T.UNAUTHORIZED_UPDATE to ensure the end user has not installed a

malicious update, thinking that it was legitimate.

O.SYSTEM_MONITORING

This security objective is necessary to counter the

T.UNDETECTED_ACTIONS to ensure activity is monitored so the security

of the TOE is not compromised.

O.DISPLAY_BANNER

This security objective is necessary to address the Organization Security

Policy P.ACCESS_BANNER to ensure an advisory notice and consent

warning message regarding unauthorized use of the TOE is displayed before

the session is established.

O.TOE_ADMINISTRATION

This security objective is necessary to counter the T.ADMIN_ERROR that

ensures actions performed on the TOE are logged so that indications of a

failure or compromise of a TOE security mechanism are known and

corrective actions can be taken.

O.RESIDUAL_INFORMATION_

CLEARING

This security objective is necessary to counter the threat

T.USER_DATA_REUSE so that data traversing the TOE could inadvertently

be sent to a user other than that intended by the sender of the original

network traffic.

O.RESOURCE_AVAILABILITY

This security objective is necessary to counter the threat:

T.RESOURCE_EXHAUSTION to mitigate a denial of service, thus ensuring

resources are available.

O.SESSION_LOCK

This security objective is necessary to counter the threat:

T.UNAUTHORIZED_ACCESS to ensure accounts cannot be compromised

and used by an attacker that does not otherwise have access to the TOE.

O.TSF_SELF_TEST

This security objective is necessary to counter the threat T.TSF_FAILURE to

ensure failure of mechanisms do not lead to a compromise in the TSF.

4.3.3 Security objectives conclusion

The tracing of the security objectives to assumptions, threats, and OSPs, and the justification of

that tracing showed that all the given assumptions are upheld, all the given threats are countered,

all the given OSPs are enforced, and the security problem as defined in the SPD is solved.

1 2 ... 21 22 23 24 25 26 27 28 29 30 31 ... 60 61

Sin comentarios

Cisco IPS4345 Manual de usuario Pagina 26