Threats; Table 11 Threats; Edcs - Cisco Catalyst 4503-E Manual
Catalyst 4500 series
Hide thumbs
Also See for Catalyst 4503-E:
- Brochure (2 pages) ,
- Configuration manual (612 pages) ,
- Installation manual (172 pages)
Table of Contents
Advertisement
Cisco Cat4K NDPP ST
EDCS-1228241
Assumption
A.PHYSICAL
A.TRUSTED_ADMIN
3.5 Threats
The following table lists the threats addressed by the TOE and the IT Environment. The
assumed level of expertise of the attacker for all the threats identified below is Basic.
Threat
T.ADMIN_ERROR
T.RESOURCE_EXHAUSTION
T.TSF_FAILURE
T.UNDETECTED_ACTIONS
T.UNAUTHORIZED_ACCESS
T.UNAUTHORIZED_UPDATE A malicious party attempts to supply the end user
T.USER_DATA_REUSE
Assumption Definition
those services necessary for the operation,
administration and support of the TOE.
Physical security, commensurate with the value of
the TOE and the data it contains, is assumed to be
provided by the environment.
TOE Administrators are trusted to follow and
apply all administrator guidance in a trusted
manner.
Table 11 Threats
Threat Definition
An administrator may unintentionally install or
configure the TOE incorrectly, resulting in
ineffective security mechanisms.
A process or user may deny access to TOE services
by exhausting critical resources on the TOE.
Security mechanisms of the TOE may fail, leading
to a compromise of the TSF.
Malicious remote users or external IT entities may
take actions that adversely affect the security of the
TOE. These actions may remain undetected and
thus their effects cannot be effectively mitigated.
A user may gain unauthorized access to the TOE
data and TOE executable code. A malicious user,
process, or external IT entity may masquerade as an
authorized entity in order to gain unauthorized
access to data or TOE resources. A malicious user,
process, or external IT entity may misrepresent
itself as the TOE to obtain identification and
authentication data.
with an update to the product that may compromise
the security features of the TOE.
User data may be inadvertently sent to a destination
not intended by the original sender.
34
11 March 2014
Hide quick links:
Advertisement
Table of Contents
