Integrity Brick

Anti-Virus. An effective anti-virus architecture uses a multi-tier (that is, desktop, server, and gateway) approach and is not necessarily reliant on a single vendor solution. The gateway tier can be implemented at the firewall, the SMTP gateway, the SMTP relay, or a combination of all three. Using a combination of techniques at the gateway level is prudent given the frequency and impact of malicious code attacks. NIH currently implements a multi-tier anti-virus architecture.

Configuration Management. Configuration management is the basis for all other management capabilities and is a critical aspect of maintaining confidentiality, integrity, and availability. Change management and software control and distribution must be properly integrated with a comprehensive configuration management system.

File Integrity Checking. File integrity checking is used to detect and correct unauthorized changes to a file or database.

• Tactical and strategic products were selected to leverage NIH's investment in products that are a proven fit for NIH's known future needs. Leveraging baseline products in the future will minimize the operations, maintenance, support and training costs of new products.
• Some baseline products have been designated retirement and containment. These products are either not as widely or successfully deployed at NIH, or they do not provide as much functionality, value, or Total Cost of Ownership as the selected tactical and strategic products

Relevant Standards

• IEEE 802.10: Interoperable LAN/MAN Security (SILS)
• ISO/IEC 10736 Information Technology -- Telecommunications and Information Exchange Between Systems -- Transport Layer Security Protocol (TLSP)
• ISO/IEC 11577 Information Technology -- Telecommunications and Information Exchange Between Systems -- Network Layer Security Protocol (NLSP)
• Security Architecture for the Internet Protocol (RFC 2401)
• NIST SP 800-40 Procedures for Handling Security Patches, September 2002

Relevant Policies

• CIT Security Handbook
• NIH Guidance for Securing Data on Portable Systems
• NIH Procedures for Handling Spam and Other Unwanted E-mail
• DHHS AISSP Handbook
• DHHS Prevention, Detection, Removal and Reporting of Malicious Software