The Teradata Database is a relational database management system (RDBMS) that is designed to access, store, and operate on data using Teradata Structured Query Language (Teradata SQL), which is compatible to ANSI SQL with extensions. The database was developed to allow users to view and manage data as a collection of related tables. The database executes as a trusted parallel application (TPA) on a symmetric multiprocessing (SMP) or massively parallel processing (MPP) database server.
\r\n\r\n
The Teradata Database includes security functionality for parallel database environments supporting multiple concurrent users. The security functionality includes:
\r\n\r\n
\r\n
The Teradata Database functions as a database server in a traditional client/server environment. Access requests are made via the Teradata Tools and Utilities that provide connectivity to the database and submit Teradata SQL statements to the database. For any access to the database through its defined external interfaces, the database ensures that all security enforcement functions are invoked and succeed before any access request is allowed to proceed.
\r\n\r\n
The Teradata Database operates as a trusted parallel application executing as a set of cooperating processes on an underlying host operating system. The host operating system is not part of the TOE but rather part of the supporting IT Environment. The IT Environment provides several supporting security mechanisms to prevent compromise of the TOE security functions including:
\r\n\r\n
\r\n
The operating system included in the evaluation is SUSE LINUX Enterprise Server 9.(x86_64).
","evaluation_configuration":null,"security_evaluation_summary":"The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Teradata Database TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 r2. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the NCR Teradata Database TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 r2. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 r2. Science Applications International Corporation (SAIC) determined that the evaluation assurance level (EAL) for the product is EAL 4 augmented with ALC_FLR.3. The product, when delivered preconfigured as identified in the Teradata Database Security Administration, Appendix B, B035-1100-067A, September 2007, satisfies all of the security functional requirements stated in the Teradata Database Version 12.0 Security Target (Version 1.7). Validators on behalf of the CCEVS Validation Body monitored the evaluation carried out by SAIC and the project underwent two Validation Oversight Panel (VOR) panel reviews. The evaluation was completed in July 2009. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report, (report number CCEVS-VR-VID10328-2009, dated 21 August 2009) prepared by CCEVS.
","environmental_strengths":"The logical boundaries of Teradata Database can be characterized as the set of security functions available at its interfaces. Each of these security functions is summarized below.
\r\n\r\n
Security Audit: The Teradata Database automatically audits all successful and failed user logon attempts in the event log. An authorized administrative user may search and sort logon/logoff records using SQL statements to query a defined system view. Additionally, an authorized administrative user may control the monitoring of access rights checks performed by Teradata Database and may search and sort access log records using SQL statements to query a defined system view.
\r\n\r\n
User Data Protection: The Teradata Database enforces a Discretionary Access Control (DAC) policy for object access based on user identities, object ownership, and active roles. All access to database objects subject to the DAC policy is controlled using access rights. The Teradata Database supports three types of access rights. Implicit rights (ownership rights) are implicitly granted to the immediate owner of a database or database object. Automatic rights are granted automatically by the system to the creator of a database, user, or object, and to a newly created user or database. Explicit rights are granted by any user having the WITH GRANT OPTION privilege for that right. The database ensures that the requestor has the appropriate access rights before access to a database object is allowed. Upon initial installation of the Teradata Database, it has only one user. This user is called user DBC and will own all other databases and users in the system. User DBC has access rights on all objects within the database. The administrator guidance recommends that an administrative user be created under user DBC and granted access rights for creating and managing other databases and objects. An administrator will log on as that user rather than as user DBC to perform normal administrative tasks.
\r\n\r\n
Identification and Authentication: The Teradata Database provides user identification and authentication through the use of user accounts and the enforcement of password policies. Users must provide a valid username and password before they can access any database objects or resources. Once identified and authenticated, all subsequent actions allowed within that user’s session are based on the user’s identity, access rights, and active roles.
\r\n\r\n
TOE Access: The Teradata Database allows authorized administrative users to restrict access to the database based on user identities.
\r\n\r\n
Security management: The Teradata Database provides security management functions that enable authorized administrative users to manage the secure operation of the database. These functions include management of users, user security attributes, access rights, security roles, and the audit facilities.
\r\n\r\n
Resource Utilization: The Teradata Database enforces maximum quotas and limits on various resources to ensure that those resources are protected from monopolization by any individual database user. Specifically, an authorized administrator can configure the database to enforce limits on permanent database space allocation, temporary database space usage, and spool database space usage.
","features":[]}