IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Hardware & Software Remarks
____________________________________________________________________ .........................................
For example, Ingres databases allow the imposition of limits on the maximum
input and output, as well as the maximum number of records for queries
issued by users and user groups.
It is also possible to limit the number of users who can access the database
simultaneously. The restriction of this number via parameter settings in the
database management system ensures that the maximum number of licenses
available for the database software is not exceeded. Simultaneous access by a
large number of users might also result in an excessively high operational load
on the database server, thus increasing the average transaction times. If, for
some reason, an extension of the resources of the database system is not
possible or desirable, limiting the number of simultaneous access attempts
also helps alleviate the situation.
The related requirements should already be clarified during selection of the
standard database software, to allow the preparation of a concept for imposing
limitations on resources, should this become necessary (refer to S 2.124
Selection of suitable database software).
Additional controls:
- Have upper limits been specified for applications, and is adherence to them
being monitored?
- Have unrestricted searches in the applications been disabled in principle?
- Have requirements for restricting database resources been formulated and
documented?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000