IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
taken into account. In the case of over-encryption, consideration must be
given to how the accompanying key is protected.
In addition, the following points can be considered: which file changes if a
key is changed? By comparing this file before and after the change in the
code, the point can be determined at which this key is stored. Is it possible
to make changes at this point to activate new keys which are then
employed by the user, without the latter noticing the illicit change?
- Are there keys which have been pre-set by the manufacturer which have to
be changed before the first use of the program?
- What happens if an incorrect key is entered during decryption?
- Following the encryption of a file, is the unencrypted variant deleted? If so,
is it reliably overwritten? Is a check made before deletion as to whether the
encryption was successful?
Logging:
- Is access to protocol data denied to unauthorised persons?
- Are the activities to be logged fully recorded?
- Does the administrator have the option, by virtue of his privileged rights, of
obtaining access to protocol data without authorisation and unobserved, or
can he deactivate the logging without being noticed?
- How does the program react if the logging memory overruns?
In addition to this it must be ascertained whether, as a result of the new
product, security features will be circumvented elsewhere. Example: the
product to be tested offers an interface to the operating system environment,
previously however, the IT system was configured in such a way that no such
interfaces existed.
Pilot application
Following the conclusion of all other tests a pilot application, i.e. use under
real conditions, might still be considered necessary.
If the test is carried out in the production environment using actual data, the
correct and error-free operating method of the program must have been
confirmedto begin with a sufficient number of tests, in order not to jeopardise
the availability and integrity of the production environment. For example, the
product may be installed at the premises of selected users who will then use it
for a set period in actual production conditions.
Test evaluation
Using the decision criteria specified, the test results must be assessed and all
results must be assembled and submitted along with the test documentation to
the procurer, or the person responsible for the test.
With the aid of the test results a final judgement should be made regarding a
product to be procured. If no product has passed the test, consideration must
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000