User guide

Aruba Networks Security Target
Page 3 of 67
Table of Contents
1 Introduction ........................................................................................................................... 5
1.1 Overview ........................................................................................................................ 5
1.2 Conformance Claims ...................................................................................................... 5
1.3 Terminology .................................................................................................................... 6
1.4 References ..................................................................................................................... 6
2 TOE Description .................................................................................................................... 8
2.1 Type ............................................................................................................................... 8
2.2 TOE Architecture ............................................................................................................ 8
2.3 Usage ............................................................................................................................. 9
2.4 Security Functions ........................................................................................................ 10
2.5 Physical Scope ............................................................................................................. 11
2.6 Logical Scope ............................................................................................................... 13
3 Security Problem Definition ............................................................................................... 14
3.1 Threats ......................................................................................................................... 14
3.2 Organizational Security Policies ................................................................................... 14
3.3 Assumptions ................................................................................................................. 14
4 Security Objectives ............................................................................................................. 16
4.1 Objectives for the Operational Environment ................................................................ 16
4.2 Objectives for the TOE ................................................................................................. 16
5 Security Requirements ....................................................................................................... 18
5.1 Conventions ................................................................................................................. 18
5.2 Extended Components Definition ................................................................................. 18
5.3 Functional Requirements ............................................................................................. 19
5.4 Assurance Requirements ............................................................................................. 31
6 TOE Summary Specification .............................................................................................. 32
6.1 Security Functions ........................................................................................................ 32
6.2 Cryptography ................................................................................................................ 38
7 Rationale .............................................................................................................................. 48
7.1 Conformance Claim Rationale ..................................................................................... 48
7.2 Security Objectives Rationale ...................................................................................... 48
7.3 Security Requirements Rationale ................................................................................. 48
7.4 TOE Summary Specification Rationale ........................................................................ 48
Annex A: NDPP Assurance Activities ....................................................................................... 51
List of Tables
Table 1: Evaluation identifiers ......................................................................................................... 5
Table 2: Terminology ....................................................................................................................... 6
Table 3: TOE chassis and appliance models ................................................................................ 11
Table 4: Threats drawn from NDPP .............................................................................................. 14
Table 6: OSPs drawn from NDPP ................................................................................................. 14
Table 7: Assumptions drawn from NDPP ...................................................................................... 15
Table 9: Operational environment objectives drawn from NDPP .................................................. 16
Table 11: Objectives drawn from NDPP ........................................................................................ 16
Table 13: Extended Components .................................................................................................. 18