Endpoint AV Software Security Requirements
Events and data flow from kernel driver to AV Engine only (never from engine to kernel).
Only the AV engine may open the kernel driver, and only on system startup. “Open” is the only control operation allowed from user mode to kernel driver. No other component may communicate with the kernel driver.
The kernel driver startup and initialization code must validate, sanitize, and put into canonical form inputs from AV engine.
Kernel driver initialization and startup must occur during the operating system startup sequence and must complete before users are allowed to log on to the system.
Kernel driver initialization must complete before user logon to the system.
Kernel driver initialization must occur as early as is possible during operating system startup.
Before communications are allowed to proceed between any two or more modules in the system, validation must be performed on the identity and integrity of the calling process/module/binary. The preferred mechanism is validation of a digital signature over the binary. The signature must be signed by the private key of the software manufacturer.
Every other component except the kernel driver must run in user mode.
Endpoint AV Software Security Requirements
Installation should confine the reading and writing of the configuration files to the User Interface only.
The system must have the ability to encrypt communications from/to the management console. This must be system administrator configurable.
The management console must contain a user authentication system.
The management console must contain a user authorization system.
The management console must be able to authenticate to an LDAP.
Management console authorization must be able to be performed by LDAP group membership.
The administrator must be able to configure the management console to use any combination of:
Local authentication
LDAP authentication
Local authorization
LDAP group membership
The user interface must re-authenticate the user before allowing changes.
The management console will be able to run in a hardened state. There will be a customer document describing the hardened configuration. Hardening is configurable at customer discretion.
