19.12.2012 Views

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Threats Catalogue Deliberate Acts Remarks<br />

____________________________________________________________________ .........................................<br />

T 3.36 Misinterpretation of events<br />

When a management system is used, it is the task of the system administrator<br />

in charge to analyse and interpret the messages of the management system in<br />

order to take appropriate measures. As a rule, the messages of the<br />

management system are based on monitoring mechanisms which<br />

automatically search system protocols of various types according to certain<br />

rules. In the process, it is not easy to automatically recognise abnormalities<br />

from the wide range of auditing data that occurs and to produce relevant<br />

messages for the system administrator. In addition, an error here may not be<br />

discovered. <strong>The</strong> incoming messages must therefore always be viewed and<br />

interpreted by the system manager, as the messages (in the case of an error)<br />

are based on symptoms of errors and their (automatic) interpretation. A system<br />

administrator must also be able to recognise false alarms and incorrect<br />

messages. If the administrator incorrectly interprets system messages,<br />

countermeasures intended to correct the situation may actually make things<br />

worse.<br />

____________________________________________________________________ .........................................<br />

<strong>IT</strong>-<strong>Baseline</strong> <strong>Protection</strong> <strong>Manual</strong>: Oktober 2000

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!