HP A-Series Especificações descarregar pdf (Página 31)

Security Target Version 1.02, 08/16/2013

Assurance Activity – Design

Assurance Activity - Guidance

Assurance Activity - Testing

FAU_STG_EXT.1.1

The evaluator shall examine the TSS to

ensure it describes the amount of audit

data that are stored locally; what happens

when the local audit data store is full;

and how these records are protected

against unauthorized access.

The evaluator shall examine the TSS to

ensure it describes the means by which

the audit data are transferred to the

external audit server, and how the trusted

channel is provided.

The evaluator shall also examine the operational

guidance to determine it describes the

relationship between the local audit data and the

audit data that are sent to the audit log server

(for TOEs that are not acting as an audit log

server). For example, when an audit event is

generated, it is simultaneously sent to the

external server and the local store, or the local

store is used as a buffer and “cleared”

periodically by sending the data to the audit

server.

The evaluator shall also examine the operational

guidance to ensure it describes how to establish

the trusted channel to the audit server, as well as

describe any requirements on the audit server

(particular audit server protocol, version of the

protocol required, etc.), as well as configuration

of the TOE needed to communicate with the

audit server.

Testing of the trusted channel mechanism will be

performed as specified in the associated assurance

activities for the particular trusted channel

mechanism.

The evaluator shall perform the following test for this

requirement:

The evaluator shall establish a session between the

TOE and the audit server according to the

configuration guidance provided. The evaluator shall

examine the traffic that passes between the audit

server and the TOE during several activities of the

evaluator’s choice designed to generate audit data to

be transferred to the audit server. The evaluator shall

observe that these data are not able to be viewed in

the clear during this transfer, and are successfully

received by the audit server. The evaluator shall

record the particular software (name, version) used on

the audit server during testing.

FCS_CKM.1.1

In order to show that the TSF complies

with 800-56A and/or 800-56B,

depending on the selections made, the

evaluator shall ensure that the TSS

contains the following information:

The TSS shall list all sections of the

appropriate 800-56 standard(s) to

which the TOE complies.

For each applicable section listed in the

TSS, for all statements that are not

"shall" (that is, "shall not", "should",

and "should not"), if the TOE

implements such options it shall be

described in the TSS. If the included

functionality is indicated as "shall not"

or "should not" in the standard, the

TSS shall provide a rationale for why

this will not adversely affect the

security policy implemented by the

TOE;

For each applicable section of 800-56A

and 800-56B (as selected), any

omission of functionality related to

"shall" or “should” statements shall be

described;

Any TOE-specific extensions, processing

that is not included in the documents, or

alternative implementations allowed by

the documents that may impact the

security requirements the TOE is to

enforce shall be described.

The evaluator shall use the key pair generation

portions of "The FIPS 186-3 Digital Signature

Algorithm Validation System (DSA2VS)", "The FIPS

186-3 Elliptic Curve Digital Signature Algorithm

Validation System (ECDSA2VS)", and "The RSA

Validation System (RSA2VS)" as a guide in testing

the requirement above, depending on the selection

performed by the ST author. This will require the

evaluator have a trusted reference implementation of

the algorithms can produce test vectors that are

verifiable during the test.

1 2 ... 26 27 28 29 30 31 32 33 34 35 36 ... 65 66

Comentários a estes Manuais

Sem comentários

HP A-Series Especificações Página 31

Comentários a estes Manuais

Manuais e produtos relacionados com Barebones PC/estação de trabalho HP A-Series