SD 2.2: Realization of Efficiency Analysis



		SD 2.2: Realization of Efficiency Analysis

Contents		Product Flow Handling Roles		Tools Requirements External Norms Pre-Tailoring forms

From		Product		to		Methods	Tool Req.	Ext. Norms
Activity	State	Chapter	Title	Activity	State	Methods	Tool Req.	Ext. Norms
SD1	accepted	Existing	User Requirements	-	-
SD2.1	being proc.	Existing	System Architecture	-	-
-	-	4	System Architecture. IT Security Concept	SD2.1	being proc.

+ "Chapter" are extra columns from the original printed version of GD 250

For the IT measures (functions and concepts) to be effective it is necessary to demonstrate in as far they are/have

able to cooperate without conflicts and if they can support each other-by demonstration and analysis of all relationships between the IT measures,

realized by means of sufficiently strong mechanisms-by analysis of the algorithms, principles and characteristics of the mechanisms used, according to the following aspects:
- inherent weak points,
- effort for overcoming them (e. g. overcoming them is not possible according to the state of the art or presently available technical resources),

no exploitable weak points-by the generation of a list of the design weak points, with an explanation why they cannot be exploited for attacks in the application environment.

These efficiency proofs also require the analysis of covert channels, i. e. if information flow control is one of the IT security requirements.

Apart from these weak point analyses, penetration analyses may also be used to prove the efficiency.

The execution of tests might be required for the efficiency analysis too.

Role	Participation
IT Security Representative	responsible

Being defined

Being defined

Pre-tailoring Forms	SD Products																		Implementing Conditions
Pre-tailoring Forms
Small Administrative IT Projects
Medium Administrative IT Projects
Large Administrative IT Projects
Small/Medium Technical-Scientific IT Projects
Large Technical-Scientific IT Projects
Selection, Procurement and Adjustment of Off-the-Shelf Products