Honeywell AUTOCUBE 8200, Руководство пользователя

Страница: 50 / 56

42 AutoCube 8200 User Guide
Unauthorized Internal Access
This threat encompasses unauthorized access from people or systems within the
business network. This threat is the most difficult to counter since attackers may
have legitimate access to part of the system and are simply trying to exceed their
permitted access.
Unauthorized internal access can result in:
• Loss of system availability.
• Incorrect execution of controls causing the failure of the AutoCube system.
• Incorrect execution of controls causing the failure of search and rescue.
• The capture, modification, or deletion of data.
Theft or damage of system contents.
Audit Log
All captured data (measurements), events and errors are stored into the Log (see
Log on page 23). The log serves as product history for Weight and Measure certifi-
cation audit on customer site. It is read-only for all users including system admin-
istrators of the computer. Content of the log is protected from modifications using
a software protection algorithm.
The log can stored up to 10K entries. When storage capacity is reached, the oldest
entry is replaced by the new one.
Mitigation Steps
Steps
Set the minimum level of privilege for all accounts, and enforce a strong password policy, both for
Windows user accounts and AutoCube user accounts.
Restrict access to the AutoCube system to authorized user only.
Use a firewall at the interface between other networks and AutoCube devices.
Mitigation Steps
Steps
Ensure AutoCube software security.
Do not allow the use of unauthorized removable media (for example, DVDs or memory sticks) on any
computer connected to AutoCube system.
Use strong passwords on network equipment.
Use and enforce a strong password policy.