Military Communications and Information Technology: A Trusted ...

388 Military Communications and Information Technology...
Policy Reasoning and Rules Analysis Service in order to make a decision about
potential granting or denial of the access.
2) Trusted Platform Services
Several TOE services play a role in establishing the initial secure state for
the TOE Security Functionality (TSF). After secure initialization, the TSF enforces
the configured security policy. The non-TSF functions playing role in establishing
the initial secure state of the TSF include Trusted Delivery, Trusted Load, Trusted
Initialization, and Trusted Configuration.
3) Content Inspection and Policy Enforcement (CIPE)
Content Inspection Policy Enforcement (CIPE) is a capability that enables
the inspection of structured data that is to be mediated by the HAAG. The goal
is to identify and remove malicious software (such as viruses, network worms
and Trojan horses) and active content, combined with a verification of file format
type and a white list of allowed file formats. The CIPE capability is to be provided
as a component of the HAAG in order to improve the protection for confidentiality,
integrity and availability of NATO CIS against malicious software and active
content that may be imported from other information systems.
Figure 8. Relationship between the Content Inspection Policy Enforcement and the HAAG PP
The CIPE capability is provided by the CIPE Service which is one of the components
of the Information Exchange Architecture. The CIPE Service consists
of the following components, which are illustrated in Figure 8:
• Content Inspection Policy Enforcement Framework (CIPEF)
• Content Filters for supported data format content types
• Content Filter Rules for each content filter