Cisco Cat4K NDPP ST
EDCS-1228241
S
ECURITY
3
The security problem definition (SPD) defines the security problem that is to be
addressed.
This document identifies assumptions as A.assumption with "assumption" specifying a
unique name. Threats are identified as T.threat with "threat" specifying a unique name.
3.1 Introduction
This section describes the security environment in which the TOE is intended to be used.
3.2 External Entities
The following human or IT entities possibly interact with the TOE from outside the TOE
boundary.
External Entities
Admin
Human who administers the TOE.
Administration tasks include starting the TOE, operating the TOE,
maintaining configuration data and inspection of security audit log
files.
administrators, all which are described in Section 6.1 and all
considered an Admin.
Attacker
A threat agent trying to undermine the security policy of the TOE.
3.3 Assets
The owner of the TOE presumably places value upon the following primary and
secondary entities as long as they are in the scope of the TOE.
3.3.1 Primary Assets
The owner of the TOE presumably places value upon the following primary entities. All
these primary assets represent user data in the sense of the CC.
Asset
Audit Data
Primary asset, audit data
P
D
ROBLEM
EFINITION
Table 7 External entities interacting with TOE
In this Security Target there are several levels of
Table 8 Primary assets to be protected
32
Entity Definition
Asset Description
11 March 2014