IT Baseline Protection Manual - The Information Warfare Site

Networked Systems
_________________________________________________________________________________________
- T 5.5 Vandalism
- T 5.6 Attack
- T 5.7 Line tapping
- T 5.8 Manipulation of lines
- T 5.9 Unauthorised use of IT systems
- T 5.18 Systematic trying-out of passwords
- T 5.28 Denial of services
- T 5.66 Unauthorised connection of IT systems to a network
- T 5.67 Unauthorised execution of network management functions
- T 5.68 Unauthorised access to active network components
Recommended Countermeasures (S)
To implement IT baseline protection, selection of the required packages of safeguards ("modules"), as
described in Sections 2.3 and 2.4, is recommended.
Here, it must be pointed out once again that adequate protection of a LAN from the perspective of IT
baseline protection can only be ensured if the packages of safeguards described in Chapter 4.2
Cabling, Chapter 6.1 Server-based networks and, if applicable, additional measures related to the
operating-system in use and Chapter 6.8 Network and system management are also implemented.
Furthermore, the active network components should be installed in rooms intended to accommodate
technical infrastructure (e.g. distributor rooms), this means that the safeguards described in Chapter
4.3.4 Technical infrastructure rooms also need to be taken into account.
The network administrator's workstation also requires special protection. In addition to the safeguards
described in Chapter 4.3.1 Offices, rules pertaining to the operating system in use must also be
specified here (refer to Chapter 6).
Secure operation of a heterogeneous network requires the implementation of a number of measures,
beginning with an analysis of the existing network environment, followed by the development of a
network management concept, and leading to the actual operation of a heterogeneous network. The
steps and measures involved are described below:
1. Analysis of the existing network environment (refer to S 2.139 Survey of the existing network
environment and S 2.140 Analysis of the existing network environment)
- Survey of load factors and analysis of traffic flow
- Determination of network bottlenecks
- Identification of critical areas
2. Conception
- Conception of a network (refer to S 2.141 Development of a network concept, S 2.142
Development of a network realisation plan and S 5.60 Selection of a suitable backbone
technology)
- Conception of a network management (refer to S 2.143 Development of a network
management concept and S 2.144 Selection of a suitable network management protocol)
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000