Table of Contents Table of Contents
Previous Page  146 / 177 Next Page
Information
Show Menu
Previous Page 146 / 177 Next Page
Page Background

144

FFI-RAPPORT 16/00707

Security mechanisms

Integrity

The integrity of the piqlFilm that is being printed was never intact to

begin with, as the complete file of original information was never printed

onto the film in its entirety. The integrity of the logical information

stored in the Piql IT system was compromised when the alterations due

to sabotage took place.

Availability

The availability of the information is forever lost, unless the data owner

has backup copies.

Confidentiality

The confidentiality of the information was also breached the moment

state X broke through the security software of the Front-End code and

was able to access the client information to see which parts it wanted to

alter.

Immunity (against

attacks on the above

mentioned)

The Piql Preservation Services is not immune to attacks against

confidentiality, integrity and availability.

Recommendations

Recommended

protective measures

The IT security measures already in place are sound. Only a highly

resourceful threat actor would be able to perform the sabotage outlined

here. An option is to create a true air gap between the two computers’

CPUs. Although this will not stop the threat actor from gaining access

into the Piql IT system, it will make it impossible to alter the received

client data undetected. However, such a measure is an unlikely feature in

a production process, as it would make the production too inefficient.

References

Relevant literature