IT Baseline Protection Manual - The Information Warfare Site

Data Transmission Systems Firewall
_________________________________________________________________________________________
Organisational shortcomings:
- T 2.24 Loss of confidentiality of sensitive data of the network to be protected
Human Failure:
- T 3.3 Non-compliance with IT security measures
- T 3.9 Improper IT system administration
- T 3.38 Errors in configuration and operation
Technical Failure:
- T 4.8 Discovery of software vulnerabilities
- T 4.10 Complexity of access possibilities to networked IT systems
- T 4.11 Lack of authentication possibilities between NIS Server and NIS Client
- T 4.12 Lack of authentication possibilities between X Server and X Client
- T 4.20 Data loss due to exhausting storage medium
- T 4.22 Vulnerabilities or errors in standard software
- T 4.39 Software conception errors
Deliberate Acts:
- T 5.2 Manipulation of data or software
- T 5.9 Unauthorised use of IT systems
- T 5.18 Systematic trying-out of passwords
- T 5.24 Replay of messages
- T 5.25 Masquerade
- T 5.28 Denial of services
- T 5.39 Infiltrating computer systems via communication cards
- T 5.48 IP spoofing
- T 5.49 Abuse of Source Routing
- T 5.50 Abuse of the ICMP Protocol
- T 5.51 Abuse of Routing Protocols
- T 5.78 DNS spoofing
Recommended Countermeasures (S)
For the implementation of IT baseline protection, selection of the required packages of safeguards
("modules") as described in chapters 2.3 and 2.4, is recommended.
A firewall protects the internal network against attacks from outside. In order to protect the internal
network against attacks from inside, all necessary safeguards should also be taken even when a
firewall is in place. If the internal network is a UNIX or a PC network, for example, the safeguards
described in Chapter 6.1 and 6.2 should also be implemented.
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000