Options
2004
Report
Titel
CROCODILE® user manual
Titel Supplements
The cisco router configuration diligent evaluator
Abstract
The evaluation tool CROCODILE® analyzes router configurations and identifies potential security weaknesses implied therein. CROCODILE thus supports the user in performing security revisions of computer networks. This manual primarily addresses the user. It gives an overview of handling the tool and of its evaluation and support functions. Furthermore, CROCODILE users are sufficiently familiarized with the tool's structure and its basic program operation to be able to master minor application problems on their own. The manual also addresses not-yet users of the tool . i.e., people who are interested, but not yet sure if CROCODILE might be a useful building block for their security solution. We would like to provide the undetermined reader with sufficient information about the tool's capabilities and limits to make an informed decision either in favor of or against the CROCODILE approach. The tool is started from the command line, usually from a user shell, a console window or similar. Accordingly, users should be familiar with the command line interface of their operating system. On our part, we are not limited to a specific platform: The tool was developed partially under dialects of Unix (Solaris, Linux), and partially under various variants of Microsoft Windows. The evaluation results are formatted for display by an HTML browser. CROCODILE analyzes router configurations, or more exactly configuration descriptions for routers running the Internetworking Operating System (IOS) by Cisco Systems. It goes without saying, then, that the user must be familiar with routing problems and IOS in order to profit from the tool. Implementing adequate measures in reaction to the evaluation results requires routing expertise in any case. The tool employs evaluation criteria that are partially fixed and partially configurable. In order to formulate their own evaluation criteria, users must possess sufficient router and security knowledge.
Verlagsort
Kaiserslautern