Cisco Cat4K NDPP ST
11 March 2014
EDCS-1228241
36
4
S
ECURITY
O
BJECTIVES
The security objectives are a concise and abstract statement of the intended solution to
the security problem defined by the SPD.
This document identifies objectives of the TOE as O.objective with objective specifying
a unique name. Objectives that apply to the operational environment are designated as
OE.objective with objective specifying a unique name.
4.1
Security Objectives for the TOE
The security objectives for the TOE consists of a set of objectives the TOE should
achieve to solve its part of the security problem.
Table 13 Security Objectives for the TOE
TOE Objective
TOE Security Objective
Definition
O.PROTECTED_COMMUNICATIONS
The TOE will provide protected
communication channels for
administrators, other parts of a
distributed TOE, and authorized IT
entities.
O.VERIFIABLE_UPDATES
The TOE will provide the
capability to help ensure that any
updates to the TOE can be verified
by the administrator to be
unaltered and (optionally) from a
trusted source.
O.SYSTEM_MONITORING
The TOE will provide the
capability to generate audit data
and send those data to an external
IT entity.
O.DISPLAY_BANNER
The TOE will display an advisory
warning regarding use of the TOE.
O.TOE_ADMINISTRATION
The TOE will provide mechanisms
to ensure that only administrators
are able to log in and configure the
TOE, and provide protections for
logged-in administrators.
O.RESIDUAL_INFORMATION_CLEARING The TOE will ensure that any data
contained in a protected resource
is not available when the resource
is reallocated.