Belkin®
Secure
DVI
KVM
Switch,
Secure
KM
Switch
and
Secure
Windowing
KVM
EAL
4
augmented
ALC_FLR.3
Security
Target
Rev.
1.01
Page
|
34
selection
methods
are
used
by
most
(if
not
all)
current
market
products.
Automatic
switching
based
on
scanning
shall
not
be
used
as
a
selection
mechanism.
T.PERIP
A
USER
may
connect
to
the
TOE
a
qualified
PERIPHERAL
DEVICE
that
has
a
security
vulnerability
which
allows
the
transfer
of
USER
or
NETWORK
information
through
the
coupled
TOE,
thereby
violating
the
confidentiality
of
information.
O.ROM
TOE
software/firmware
shall
be
protected
against
unauthorized
modification.
Embedded
software
must
be
contained
in
mask
‐
programmed
or
one
‐
time
‐
programmable
read
‐
only
memory
or
fuse
protected
flash
permanently
attached
(non
‐
socketed)
to
a
circuit
assembly.
O.UNIDIR
The
TOE
circuitry
shall
assure
that
USER
KEYBOARD,
USER
POINTING
DEVICE
and
EDID
data
will
flow
only
from
PERIPHERAL
DEVICES
to
the
SWITCHED
COUPLED
COMPUTER.
O.ROM
This
Objective
assures
that
TOE
software/firmware
will
be
protected
against
unauthorized
modification
by
ensuring
that
embedded
software
is
contained
in
read
‐
only
memory.
This
ensures
that
any
ROM
used
in
the
TSF
to
hold
embedded
TSF
data
may
not
be
re
‐
programmed.
O.UNIDIR
This
objective
will
ensure
that
console
KEYBOARD
and
POINTING
DEVICE
data
will
only
flow
through
the
TOE
in
one
direction
from
PERIPHERAL
DEVICES
to
the
SWITCHED
COUPLED
COMPUTER,
thereby
preventing
data
transfer
from
connected
COMPUTERS
or
NETWORKS
to
peripheral
devices.
T.TRANSFER
A
CONNECTION,
via
the
TOE,
between
COMPUTERS
may
allow
information
transfer.
O.CONF
The
TOE
shall
not
violate
the
confidentiality
of
information,
which
it
processes.
Information
generated
within
any
PERIPHERAL
GROUPCOMPUTER
CONNECTION
shall
not
be
accessible
by
any
other
PERIPHERAL
GROUP
‐
COMPUTER
CONNECTION.
O.CONF
If
the
PERIPHERALS
can
be
CONNECTED
to
more
than
one
COMPUTER
at
any
given
instant,
then
a
channel
may
exist
which
would
allow
transfer
of
information
from
one
to
the
other.
This
is
particularly
important
for
DEVICES
with
bi
‐
directional
communications
channels
such
as
KEYBOARD
and
POINTING
DEVICES.
Since
many
PERIPHERALS
now
have