Cisco IPS4345 Bedienungsanleitung PDF herunterladen (Seite 22)

Cisco Intrusion Prevention System Security Target

3.2 Threats

The following table lists the threats addressed by the TOE and the Operational Environment.

The assumed level of expertise of the attacker for all the threats identified below is Enhanced-

Basic.

Table 9: Threats

Threat

Threat Definition

Reproduced from the U.S. Government Protection Profile for Security Requirements for Network Devices

T.ADMIN_ERROR

An administrator may unintentionally install or configure the TOE

incorrectly, resulting in ineffective security mechanisms.

T.TSF_FAILURE

Security mechanisms of the TOE may fail, leading to a compromise of the

TSF.

T.UNDETECTED_ACTIONS

Malicious remote users or external IT entities may take actions that adversely

affect the security of the TOE. These actions may remain undetected and thus

their effects cannot be effectively mitigated.

T.UNAUTHORIZED_ACCESS

A user may gain unauthorized access to the TOE data and TOE executable

code. A malicious user, process, or external IT entity may masquerade as an

authorized entity in order to gain unauthorized access to data or TOE

resources. A malicious user, process, or external IT entity may misrepresent

itself as the TOE to obtain identification and authentication data.

T.UNAUTHORIZED_UPDATE

A malicious party attempts to supply the end user with an update to the

product that may compromise the security features of the TOE.

T.USER_DATA_REUSE

User data may be inadvertently sent to a destination not intended by the

original sender.

3.3 Organizational Security Policies

The following table lists the Organizational Security Policies imposed by an organization to

address its security needs.

Table 10: Organizational Security Policies

Policy Name

Policy Definition

P.ACCESS_BANNER

The TOE shall display an initial banner describing restrictions of use, legal agreements,

or any other appropriate information to which users consent by accessing the TOE.

1 2 ... 17 18 19 20 21 22 23 24 25 26 27 ... 60 61

Keine Kommentare

Cisco IPS4345 Bedienungsanleitung Seite 22