Reference Guide

Table Of Contents
System Integrity
External applications must run in separate memory spaces.
Software validation
All downloadable files must be signed.
All file signatures must be validated 1) at time of file saving and 2) loading.
Signatures and validation shall apply to script files, e.g., Tcl, Python, as well as to binary
executables and Java .jar files.
It is highly desirable to validate system integrity on a running systemboot time is good, but
might not be sufficient.
Secure Upgrade
Updates and configuration changes are to be performed only with sufficient administrative
privilege
Updates must be logged, including both successful and non-successful attempts
129