Nortel-networks Nortel Network VPN Router and Client Workstation 7 Uživatelský manuál Strana 52
- Strana / 67
- Tabulka s obsahem
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
Security Target, Version 3.9
March 18, 2008
Nortel VPN Router v7.05 and Client Workstation v7.11
Page 52 of 67
© 2008 Nortel Networks
8 Rationale
This section provides the rationale for the selection of the security requirements, objectives, assumptions, and
threats. In particular, it shows that the security requirements are suitable to meet the security objectives, which in
turn are shown to be suitable to cover all aspects of the TOE security environment.
8.1 Security Objectives Rationale
This section provides a rationale for the existence of each assumption, threat, and policy statement that compose the
Security Target. Table 11 demonstrates the mapping between the assumptions, threats, and polices to the security
objectives is complete. The following discussion provides detailed evidence of coverage for each assumption,
threat, and policy.
Table 11 - Relationship of Security Threats to Objectives
TOE Objectives
Environmental Objectives
IT
Non-IT
O.I&A
O.AUDIT
O.SELFPROTECT
O.CONFIDENT
O.INTEGRITY
O.FILTER
O.FUNCTIONS
O.ADMIN
O.TEST
O.REPLAY
OE.TIME
OE.CERTIFICATE
OE.DOMSEP
OE.PHYS-SEC
OE.TRAINED
OE.DELIVERY
Threats
TOE
T.UNDETECT
T.AUTH-ERROR
T.DATA-MOD
T.HACK-CRYPTO
T.HACK
TOE
Environment
TE.PHYSICAL
TE.AUDIT_FAILURE
TE.BAD_CERT
Assumptions
A.TRAINED-ADMIN
A.TIMESTAMPS
A.PHYSICAL
A.CERTIFICATE
A.INSTALL
A.ACCESS
A.DOMSEP
T.UNDETECT An attacker may gain undetected access due to missing, weak, and/or incorrectly
implemented access controls for the restricted files or TSF Data in order to cause violations
of integrity, confidentiality, or availability of the information protected by and flowing
through the TOE.
The TOE identifies and authenticates users prior to allowing access to TOE functions and data
(O.I&A). The TOE records audit records for data accesses and use of the System functions
(O.AUDIT). The TOE provides functionality that enables only authorized user to establish VPN
sessions with the TOE using IPSec protocol (O.FUNCTIONS). The TOE provides functionality
that enables testing of its correct functioning and integrity (O.TEST).
O.I&A, O.AUDIT, O.FUNCTIONS, and O.TEST combined ensure that this threat is removed.
- Nortel Networks 1
- VPN Router v7.05 and Client 1
- Workstation v7.11 1
- Security Target 1
- Revision History 2
- Table of Contents 3
- Table of Figures 4
- Table of Tables 4
- 1.1 Purpose 5
- 1.3.1 Conventions 6
- 1.3.2 Terminology 6
- 2 TOE Description 8
- Page 9 of 67 9
- 2.3.1 Physical Boundary 10
- 2.3.2 Logical Boundary 11
- © 2008 Nortel Networks 12
- Security Target, Version 3.9 12
- March 18, 2008 12
- Page 12 of 67 12
- Page 13 of 67 13
- Page 14 of 67 14
- Page 15 of 67 15
- 3 TOE Security Environment 16
- Page 17 of 67 17
- 4 Security Objectives 18
- Page 19 of 67 19
- 5 IT Security Requirements 20
- FAU_SAR.1 Audit review 22
- Page 23 of 67 23
- Page 24 of 67 24
- Page 25 of 67 25
- Page 26 of 67 26
- Page 27 of 67 27
- Page 28 of 67 28
- Page 29 of 67 29
- Page 30 of 67 30
- Page 31 of 67 31
- Page 32 of 67 32
- Page 33 of 67 33
- Page 34 of 67 34
- FMT_SMR.1 Security roles 35
- FMT_SMR.1.2 36
- FPT_RPL.1 Replay detection 37
- FPT_TST.1 TSF testing 37
- FTP_TRP.1 Trusted path 38
- Page 40 of 67 40
- 5.3 Assurance Requirements 41
- 6 TOE Summary Specification 42
- 6.1.1 Security Audit 43
- Page 44 of 67 44
- 6.1.2 Cryptographic Support 45
- 6.1.3 User Data Protection 46
- 6.1.5 Security Management 47
- Page 48 of 67 48
- 6.1.7 Trusted Path/Channels 49
- 7 Protection Profile Claims 51
- 8 Rationale 52
- Page 53 of 67 53
- Page 54 of 67 54
- Page 55 of 67 55
- Page 58 of 67 58
- Page 59 of 67 59
- 8.5 Dependency Rationale 60
- Requirements 62
- Page 64 of 67 64
- 8.7 Strength of Function 65
- 9 Acronyms 66
Související produkty a manuály pro Hardware Nortel-networks Nortel Network VPN Router and Client Workstation 7
Hardware Nortel-networks CWDM SFP Uživatelský manuál
(34 stránky)
(34 stránky)
Hardware Nortel-networks NN46110-602 Uživatelský manuál
(230 stránky)
(230 stránky)
Hardware Nortel-networks 4134 Uživatelský manuál
(40 stránky)
(40 stránky)
Hardware Nortel-networks 608(WL) Uživatelský manuál
(222 stránky)
(222 stránky)
Hardware Nortel-networks 5000i Uživatelský manuál
(54 stránky)
(54 stránky)
Hardware Nortel-networks 2332 Uživatelský manuál
(102 stránky)
(102 stránky)
Hardware Nortel-networks AS 5300 Uživatelský manuál
(54 stránky)
(54 stránky)
Hardware Nortel-networks 302403-B Uživatelský manuál
(21 stránky)
(21 stránky)
Hardware Nortel-networks N300 Uživatelský manuál
(72 stránky)
(72 stránky)
© 2020, manymanuals.cz. Všechna práva vyhrazena. | 0.049 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce