IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection of Generic Components
_________________________________________________________________________________________
7.6 Remote Access
In order for a user to be able to access a remote computer network from his local computer,
appropriate remote access services must be established. This module explains how to protect the
individual RAS system components and draw up a corresponding RAS security concept.
8.1 Telecommunications System (Private Branch Exchange, PBX)
This module considers private branch exchanges (PBX) based on ISDN. A PBX is typically a complex
IT system whose administration requires a number of safeguards if it is to operate securely.
8.2 Fax Machine
The transmission of information over a stand-alone fax machine opens up a new area of threats. The
safeguards required to ensure IT baseline protection when using fax machines are described. These
include the disposal of fax consumables, the appropriate positioning of the fax machine and, if
appropriate, any communication between sender and receiver.
8.3 Answering Machine
Modern answering machines with remote access capabilities can be thought of as IT systems which
store speech information. They are at risk from abuse of the remote replay facility. IT baseline
protection measures for answering machines are described, also specifically in regard to this threat.
8.4 LAN connection of an IT system via ISDN
This module considers the integration of an IT system into a remote LAN by means of an ISDN
adapter card with S0-interface. It is assumed that this LAN contains a router which is connected to the
public telephone network via an S2M-interface.
8.5 Fax Servers
This module concentrates on fax transmissions using a fax server. A fax server in this sense is an
application which is installed on an IT system and provides services on a network enabling other IT
systems to send and/or receive faxes.
8.6 Mobile Telephones
This section presents a set of security safeguards for the components mobile phone, base station and
fixed network and their mutual interaction, which are aimed at ensuring that use of digital mobile
telephone systems based on the GSM standard (D and E networks) is secure.
9.1 Standard Software
A procedure is described as to how the life cycle of standard software can be structured, i.e.
requirements catalogue, selection, testing, approval, installation and deinstallation. Aspects such as
functionality tests and security characteristics, installation instructions and the approval process are
described.
9.2 Databases
Safeguards relating to the selection, installation, configuration and ongoing operation of a database
system are described. These include the development of a database concept, provisions for the creation
of database users and user groups, and guidelines for database queries.
9.3 Telecommuting
The procedures for installing telecommuting workstations are described from an organisational and
personnel point of view. The security-relevant requirements for telecommuting which need to be
implemented through the use of suitable IT components are described.
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000