Threats; Table 11 Threats; Edcs - Cisco Catalyst 4503-E Manual

Cisco Cat4K NDPP ST

EDCS-1228241

Assumption
A.PHYSICAL
A.TRUSTED_ADMIN

3.5 Threats

The following table lists the threats addressed by the TOE and the IT Environment. The
assumed level of expertise of the attacker for all the threats identified below is Basic.
Threat
T.ADMIN_ERROR
T.RESOURCE_EXHAUSTION
T.TSF_FAILURE
T.UNDETECTED_ACTIONS
T.UNAUTHORIZED_ACCESS
T.UNAUTHORIZED_UPDATE A malicious party attempts to supply the end user
T.USER_DATA_REUSE
Assumption Definition
those services necessary for the operation,
administration and support of the TOE.
Physical security, commensurate with the value of
the TOE and the data it contains, is assumed to be
provided by the environment.
TOE Administrators are trusted to follow and
apply all administrator guidance in a trusted
manner.

Table 11 Threats

Threat Definition
An administrator may unintentionally install or
configure the TOE incorrectly, resulting in
ineffective security mechanisms.
A process or user may deny access to TOE services
by exhausting critical resources on the TOE.
Security mechanisms of the TOE may fail, leading
to a compromise of the TSF.
Malicious remote users or external IT entities may
take actions that adversely affect the security of the
TOE. These actions may remain undetected and
thus their effects cannot be effectively mitigated.
A user may gain unauthorized access to the TOE
data and TOE executable code. A malicious user,
process, or external IT entity may masquerade as an
authorized entity in order to gain unauthorized
access to data or TOE resources. A malicious user,
process, or external IT entity may misrepresent
itself as the TOE to obtain identification and
authentication data.
with an update to the product that may compromise
the security features of the TOE.
User data may be inadvertently sent to a destination
not intended by the original sender.
34
11 March 2014