IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
Furthermore, functions must be available which allow losses, additions or
alterations to be detected when transferring data between various
processes, users and objects, and which make it impossible to alter the
supposed or actual origin or destination of the data transmission.
- Reliability
For many products it will be necessary to ensure that time-critical tasks are
carried out at precisely the required point in time, i.e. not earlier and not
later. It is also necessary that tasks which are not time-critical are not
transferred into time-critical tasks. Furthermore, it is necessary for many
products to ensure that access is possible at the relevant moment and that
resources are not unnecessarily called up or withheld.
- Transmission security
This term comprises all functions designed for the protection of data during
transmission via communication channels:
- Authentication
- Access control
- Data confidentiality
- Data integrity
- non-repudiation
Some of these functions are implemented by means of cryptographic
processes.
Further security requirements in addition to ITSEC can be placed on standard
software.
- Data backup
Great demands are placed on the availability of data processed with the
product. This includes functions integrated in the product which serve to
prevent data loss, such as the automatic saving feature or the automatic
creation of backups before making major alterations.
- Encryption
Encryption serves as a preserver of data confidentiality. For many products
it will be necessary to encrypt data before transmission or after processing
and to decrypt information after receipt or before rerouting. An accepted
encryption algorithm should be used for this purpose. It should be ensured
that the parameters required for decrypting (e.g. key) are protected in such
a way that unauthorised access to this data is not possible.
- Functions for the preservation of data integrity
In case of data whose loss of integrity could lead to damage, functions can
be used which are able to detect or even correct errors by means of
redundancy. In most cases, integrity tests are used which can reliably
detect intentional manipulation of the product or data and any unauthorised
replay of data. These tests are based on cryptographic mechanisms (see S
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000