Cisco Cat4K NDPP ST
11 March 2014
EDCS-1228241
32
3
S
ECURITY
P
ROBLEM
D
EFINITION
The security problem definition (SPD) defines the security problem that is to be
addressed.
This document identifies assumptions as A.assumption with “assumption” specifying a
unique name. Threats are identified as T.threat with “threat” specifying a unique name.
3.1 Introduction
This section describes the security environment in which the TOE is intended to be used.
3.2 External Entities
The following human or IT entities possibly interact with the TOE from outside the TOE
boundary.
Table 7 External entities interacting with TOE
External Entities
Entity Definition
Admin
Human who administers the TOE.
Administration tasks include starting the TOE, operating the TOE,
maintaining configuration data and inspection of security audit log
files. In this Security Target there are several levels of
administrators, all which are described in Section 6.1 and all
considered an Admin.
Attacker
A threat agent trying to undermine the security policy of the TOE.
3.3 Assets
The owner of the TOE presumably places value upon the following primary and
secondary entities as long as they are in the scope of the TOE.
3.3.1 Primary Assets
The owner of the TOE presumably places value upon the following primary entities. All
these primary assets represent user data in the sense of the CC.
Table 8 Primary assets to be protected
Asset
Asset Description
Audit Data
Primary asset, audit data
