Network connectivity is allowed in the evaluated configuration. The TCB cannot be compromised by remote users or unusual network traffic, but the TCB itself, like most systems, does not prevent disclosure of, or loss of integrity by, data on the network. The PC card reader supports Fortezza cards. A PCL-5 laser printer is allowed in the evaluated configuration. Two SCSI host adapters and a total of 14 SCSI devices are allowed on the Pentium hardware base.
Individual accountability is provided with an auditing capability.
Data scavenging is prevented through object reuse prevention mechanisms. The separation of administrator and operator roles is enforced using the integrity policy. The audit log is protected from modification using integrity and subtype mechanisms. STOP also provides an alarm mechanism to detect the accumulation of events that indicate an imminent violation of the security policy. The TCB makes use of hardware features to provide process separation and TCB isolation and has been designed and implemented to resist penetration.