{"product_id":10105,"v_id":10105,"product_name":"Los Altos Technologies UniShred Pro® Version 3.3.2","certification_status":"Not Certified","certification_date":"2006-11-22T00:11:00Z","tech_type":"Sensitive Data Protection","vendor_id":{"name":"Los Altos Tecnologies","website":"http://www.lat.com"},"vendor_poc":"Rich Mahn","vendor_phone":"919.233.9889","vendor_email":"rich@lat.com","assigned_lab":{"cctl_name":"Arca CCTL"},"product_description":"<p>Los Altos Technologies UniShred Pro&reg; Version 3.3.2 (UniShred Pro&reg;) provides the capabilities to securely overwrite existing information residing on either a disk, disk partition, or specified range of disk blocks. This product also provides the capability to securely overwrite electronic media or specified portions within such as USB flash drives. This product is more robust than utility overwrite programs, which often erase only the pointer to a file. UniShred Pro Version 3.3.2 provides the means to permanently erase information for complete, non-recoverable elimination of data. </p>\r\n<p>Los Altos Technologies UniShred Pro&reg; Version 3.3.2 provides a verifying capability that tests for successful completion of the overwrite function. There is also a reporting capability to track the status and outcome of the various process steps. The reports that are generated are displayed on-screen and can be archived to a file or printed at a later time.</p>\r\n<p>Los Altos Technologies UniShred Pro&reg; Version 3.3.2 is compatible with, and has been evaluated to operate, with the following operating systems:</p>\r\n<ul type=\"disc\">\r\n    <li>HP/UX 10 and 11 </li>\r\n    <li>IBM AIX 4 and 5 </li>\r\n    <li>Linux w/ kernels 2.2, 2.4, and 2.6 </li>\r\n    <li>IRIX 6.5 </li>\r\n    <li>Solaris 2.3 through 10 on Sparc </li>\r\n    <li>Solaris 8 through 10 on x86 </li>\r\n</ul>\r\n<p>In addition to these defined operating systems, Los Altos Technologies UniShred Pro&reg; Version 3.3.2 also can be operated using a hardened version of GNU Linux on any Intel platform PC loaded in memory resident mode from bootable media such as floppy diskette or CD-R.</p>","evaluation_configuration":null,"security_evaluation_summary":"<p>The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS). The evaluation demonstrated that the Los Altos UniShred Pro&reg; Version 3.3.2 meets the security requirements contained in the Security Target. The criteria against which the Los Altos UniShred Pro&reg; Version 3.3.2 TOE was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 2.2, and the International Interpretations effective on 27 June 2005. The evaluation methodology used by the Evaluation Team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.2. ARCA determined that the evaluation assurance level (EAL) for the product is EAL 2. The product, when configured as specified in the installation guide appropriate to the operating system platform, satisfies all of the security functional requirements stated in the Los Altos UniShred Pro&reg; Version 3.3.2 Security Target, Version 2.4. A validator on behalf of the CCEVS Validation Body monitored the evaluation carried out by ARCA. The evaluation was completed in September 2006. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report, (report number CCEVS-VR-06-0039).</p>","environmental_strengths":"<p>Los Altos Technologies UniShred Pro&reg; Version 3.3.2 is a software utility that overwrites data on disks or electronic media in order to eliminate the threat of data compromise when computers are reassigned to different programs, departments, or people; when using portable computers; when computers are returned at end-of-lease; when computers have reached end-of-life and are being donated; and when computers are in poorly secured areas. Without overwriting, simple computer data-recovery programs in widespread use could read, copy, or even undelete the original files.</p>\r\n<p>Consumers of the product are expected to do the following:</p>\r\n<ul type=\"disc\">\r\n    <li>Place the processing platform on which the Los Altos Technologies UniShred Pro&reg; Version 3.3.2 is installed in a controlled access facility that mitigates unauthorized, physical access to that platform and to the electronic media stored therein. </li>\r\n    <li>Protect other electronic media (e.g., thumb drive, CD ROM) on which sensitive information is stored from unauthorized access. </li>\r\n    <li>Ensure that system operating requirements (e.g., acceptable UNIX variant; power, disk space, and RAM requirements) and installation requirements (e.g., applicable floppy, tape, or CD drive) are met. </li>\r\n    <li>Define and follow a policy and procedures that meet the applicable regulations or requirements for disposing and sanitizing the consumer&lsquo;s electronic media and for verifying the sanitization effort. </li>\r\n    <li>Ensure that administrators have been trained on the security policies and practices of the environment in which the product will operate. </li>\r\n    <li>Ensure that administrators are knowledgeable of the UNIX commands required for the installation and operation of the product. </li>\r\n    <li>Allow only trustworthy administrators with root (UID 0) privileges to execute the product and to access the configuration file and any saved audit reports (generated by the overwrite and verify functions) that have been stored on the processing platform. </li>\r\n</ul>\r\n<p>Consumers should be aware that the Los Altos Technologies UniShred Pro&reg; Version 3.3.2 is a software application that relies on the underlying UNIX operating system to do the following:</p>\r\n<ul type=\"disc\">\r\n    <li>Identify and authenticate users. </li>\r\n    <li>Control access to the product&lsquo;s executables, configuration file, and saved audit reports. </li>\r\n    <li>Perform the read and write operations that the product&lsquo;s overwrite and verify functions request from the file system. </li>\r\n    <li>Retrieve the disk information that the product provides in audit reports and in response to the <em>list</em> and <em>show</em> commands </li>\r\n    <li>Perform any available operating system auditing of the execution of the product. </li>\r\n</ul>\r\n<!-- InstanceEndEditable -->","features":[]}