Belkin®
Secure
DVI
KVM
Switch,
Secure
KM
Switch
and
Secure
Windowing
KVM
EAL
4
augmented
ALC_FLR.3
Security
Target
Rev.
1.01
Page
|
33
T.INFECTED
TOE
may
be
attacked
by
a
coupled
COMPUTER
that
was
infected
by
a
malicious
code
inserted
by
an
unidentified
threat
agent
causes
the
TOE
to
change
its
functionality
and
subsequent
compromise
of
the
data
flowing
through
the
TOE
or
the
NETWORKS
connected
to
its
coupled
COMPUTERS.
O.ROM
TOE
software/firmware
shall
be
protected
against
unauthorized
modification.
Embedded
software
must
be
contained
in
mask
‐
programmed
or
one
‐
time
‐
programmable
read
‐
only
memory
or
fuse
protected
flash
permanently
attached
(non
‐
socketed)
to
a
circuit
assembly.
O.USBDETECT
The
TOE
shall
detect
any
USB
connection
that
is
not
a
pointing
device,
keyboard,
user
authentication
device
or
display
and
will
perform
no
interaction
with
that
device
after
the
initial
identification.
O.ROM
This
Objective
assures
that
TOE
software/firmware
will
be
protected
against
unauthorized
modification.
Embedded
software
must
be
contained
in
mask
‐
programmed,
fuse
protected
flash
or
one
‐
time
‐
programmable
read
‐
only
memory
permanently
attached
(non
‐
socketed)
to
a
circuit
assembly.
O.USBDETECT
This
objective
will
ensure
detection
of
the
connection
of
an
unauthorized
device
to
the
TOE
Console
USB
port.
Information
from
this
port
would
be
ignored
and
not
be
passed
on
to
a
connected
computer.
This
objective
also
ensures
that
invalid
connections
are
recognized
on
the
keyboard,
pointing
device,
User
Authentication
device
and
display
console
ports.
T.SPOOF
Via
intentional
or
unintentional
actions,
a
USER
may
think
the
set
of
SHARED
PERIPHERALS
are
CONNECTED
to
one
COMPUTER
when
in
fact
they
are
connected
to
a
different
one.
O.INDICATE
The
AUTHORIZED
USER
shall
receive
an
unambiguous
indication
of
which
SWITCHED
COMPUTER
has
been
selected.
O.SELECT
An
explicit
action
by
the
AUTHORIZED
USER
shall
be
used
to
select
the
COMPUTER
to
which
the
shared
set
of
PERIPHERAL
DEVICES
is
CONNECTED.
Single
push
button,
multiple
push
button,
or
rotary
O.INDICATE
:
The
USER
must
receive
positive
confirmation
of
SWITCHED
COMPUTER
selection.
O.SELECT
:
The
USER
must
take
positive
action
to
select
the
current
SWITCHED
COMPUTER.