IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
addition, even where resident virus scanning programs are used it should be
possible to activate a program on a case-by-case basis on every client as the
need arises, for example to check e-mail attachments selectively before they
are opened.
Advantages:
- An appropriate, up-to-date and resident computer virus scanning program
ensures maximum protection while at the same time minimising effort and
complexity for the IT user.
Disadvantages:
- Procurement costs and administration work are applicable to every
terminal.
- Older IT systems may not have sufficient main memory. There may also be
complications with regard to interoperation with other programs.
Computer virus scanning programs on all terminals with external
interfaces
In networked IT systems a resident computer virus scanning program is only
installed on those IT systems which in addition to interfaces to their own
internal network also have other external interfaces (floppy disk drive, CD-
ROM, modem). Networked IT systems without direct external interfaces are
not equipped with computer virus scanning programs.
Advantages:
- Procurement costs and administration work are limited to those IT systems
with external interfaces.
Disadvantages:
- Changes to the IT systems which result in the setting up of new external
interfaces must be painstakingly followed up because it may become
necessary to retrofit IT systems with computer virus scanning programs.
- Encrypted files or programs which contain computer viruses and which are
not decrypted until they are on an unprotected terminal will cause
infections. This may also be true of compressed files in the same way, if
the scanning program is not suitable.
Computer virus scanning programs on all servers
In this case every server in a networked IT system is equipped with a resident
computer virus scanning program, but the terminals connected to the server
are not. This ensures that it is impossible for computer viruses to be
transferred from one terminal to another, and that therefore a possible
infection remains locally isolated.
Advantages:
- Procurement costs and administration work are restricted to the servers.
- Protecting the servers prevents re-infections, for example after archived
files are retrieved.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000