Fischer International Watchdog Version 4.1
Abstract
Watchdog can be installed with various combinations of its security mechanisms implemented, and still offer the user some degree of security. However, in order to give the user maximum assurance that Watchdog's Security mechanisms can be maintained, the NCSC recommends that Watchdog be configured in the mode tested (i.e., the optional high security configuration mode). This involves configuring both the Watchdog system software and hardware such that all non-privileged users are denied access to all DOS commands (IBM PC DOS system functions, especially direct I/O commands). In addition, the system administrator must ensure that the application programs (including memory resident type) run by the non-privileged user do not allow him access to these DOS commands. In this configuration, there is some assurance that Watchdog security features will not be circumvented. However, the PC's functionality is reduced. Non-privileged users are no longer able to run compilers, assemblers, debuggers or any type of program which gives them access to IMB DOS system functions (e.g., DOS commands, direct I/O, etc.). Keywords: Computer security: Computer programs; Personal computers.
Document Details
- Document Type
- Technical Report
- Publication Date
- Oct 24, 1986
- Accession Number
- ADA208005
Entities
People
- Leon Neufeld
- Mark Gabriele
- Paul Hager