Daniel Jumelet at 23:22, 11 November 2012

2012-11-11T23:22:21Z

New page

{{Maturity|3}}
{{Pageheaderbox
|pagetype=
|pagename=Integritity
|doctype=Quality Attribute
|version=0.1
|owner=J.A.H. Schoonderbeek
}}
__SHOWFACTBOX__
A facility's/products Integrity, denoted as a single [[Has type::string]], determines to what degree a facility/product is armed and protected against abuse, tampering, vandalism and/or malicious input. The more countermeasures are taken, the higher the degree of integrity is that can be guaranteed. However, applying many provisions to safeguard integrity often has an important drawback: The ease of use (the 'utility-value') of a facility/product will be reduced severely. Therefore, selecting a facility/product with a certain Integrity rating should be in line with the risks that are expected/applicable.

The following classes of Integrity are defined:
{| class="table" style="text-align:center" border="1" cellspacing="0" cellpadding="5"
!style="background:#{{BGColour03}};"|ordinal
!style="background:#{{BGColour03}};"|value
!style="background:#{{BGColour03}};"|meaning
|-
|{{QAlevelordinal|qa=Integrity|level=NS}}
|[[allows value::NS]]
|[[Quality Attribute NS|{{QAleveldescription|qa=Integrity|level=NS}}]]
|-
|{{QAlevelordinal|qa=Integrity|level=Low}}
|[[allows value::Low]]
|[[Integrity Low|{{QAleveldescription|qa=Integrity|level=Low}}]]
|-
|{{QAlevelordinal|qa=Integrity|level=Medium}}
|[[allows value::Medium]]
|[[Integrity Medium|{{QAleveldescription|qa=Integrity|level=Medium}}]]
|-
|{{QAlevelordinal|qa=Integrity|level=High}}
|[[allows value::High]]
|[[Integrity High|{{QAleveldescription|qa=Integrity|level=High}}]]
|}

The table below provides an overview of these classes, and summarily lists (some of) the provisions that should be made to get a facility or product rated in a certain class:
{| class="table" style="text-align:center" border="1" cellspacing="0" cellpadding="5"
!style="background:#{{BGColour03}};"|Provision
!style="background:#{{BGColour03}};"|1 - Low
!style="background:#{{BGColour03}};"|2 - Medium
!style="background:#{{BGColour03}};"|3 - High
|-
|Identity Validation
|none
|1-factor
|2-factor
|-
|Permission Validation
||-
|√
|√
|-
|Logging/auditing
|√
|√
|√
|-
|Alerting
||-
||-
|√
|-
|Hardening
||-
||-
|√
|-
|Physical protection (housing and/or construction)
||-
|√
|√
|-
|Management access
|In-band
|In-band encrypted
|Out-of-band
|-
|}

Property:Integrity - Revision history

Daniel Jumelet at 23:22, 11 November 2012