Specifications

Samsung MFP Security Kit Type_B V1.5 Security Target



O.IMAGE_OVERWRITE

The TOE provides an Image Overwrite function to enhance the security of

the MFP. The Automatic Image Overwrite function overwrites temporary

document image data at the completion of each copy, print, network scan,

or scan-to-email job. The appropriate sections on the hard disk drive are

overwritten one to seven times.

O. HANDLING_AUTHENTICATION_FAILURE

To block attacks, the TOE must take a proper action once 3 invalid login

attempts have been detected.

O.STORAGE_DATA_ENCRYPTION

The TOE should provide data encryption by using a key generated in TOE

to prevent overflow and camouflaging/forgery of stored data on the HDD

by threat agents.

O.FAXLINE

The TOE should not allow the access of non-standard fax data from the

fax modem.

4.2 Security Objectives for the Environment

The security objectives for the operating environment are to support

technical and procedural ways for the TOE to provide SFR (security

functional requirements).

OE.PHYSICAL_SECURITY

The TOE will be located in an office environment where it will be

monitored by the office personnel for unauthorized physical connections,

manipulation or interference.

OE.TRUSTED_ADMIN

The system administrator of the TOE is assumed not to disclose their

authentication credentials. The system administrator is not careless,

willfully negligent, nor hostile, and will follow and abide by the

instructions provided by the TOE documentation. The local administrator

manages a 4~8 digit PIN for security and changes the PIN at least once

every 40 days.

OE.TRUSTED_NETWORK