ÿÿ€ €€‚Write$£€ÉDECwrite V3.1 <39>¡€ €0€Ô Write$DD_PGR¥€ u5`ï0€Ô Write$DD_PGF0€Ô Write$DD_2S€0€Ô Write$DD_2LF€0€Ô Write$DD_2HOF€0€Ô Write$DD_2FOF€0€Ô Write$DF_PF€0€Ô Write$DF_RM0€Ô Write$DF_CB0€Ô Write$D_SG_RT0€Ô Write$C_FR¢€ÉIn-Column Centered0€Ô Write$C_TA¢€ÉTable0€Ô Write$C_FN¢€ÉGeneral Footnote0€Ô Write$C_PG¢€É Body Page-L0€Ô Write$C_M1¢€É Title Page0€Ô Write$C_P¢€ÉInclude Paragraph Tab-10€Ô Write$C_TR¢€ÉGeneral Textblock0€Ô Write$C_TTL¢€É Main Head0€ÔW$HT0€ÔW$HU0€ÔW$HV0€ÔW$HW¡€ÉSystem Security Capabilities¢€ÉGlenn C. Everhart„19960510170205¥€Ô$STSÔ$LO1Ô$FMTD¦€0€€+ ‡s¡€ÉDDIF‚%cda$library_en_us:wr_slidt.doc_styleƒ$RMS„§€€en_US€en_GB€fr_FR€fr_CA€de_DE€de_CH€sv_SE€es_ES€it_IT€da_DK€nl_NL€pt_PT€no_NO€fi_FI€ja_JP€zh_CN€zh_TW€ko_KR€fr_CH€it_CH€fr_BE€iw_IL en_Medical en_Businessˆ¢€b€£€‚$T¤€0€€$PG¡€0€€$PG.ru¡€£€€0€€$PG.rl¡€£€€0€€$PG.au¡€£€€0€€$PG.al¡€£€€‡©€€ ¡€É centipoints«€ €¡€"€«€0€ €€€¬€0€€ã8-ADOBE-Helvetica-Medium-R-Normal--*-80-*-*-P-*-ISO8859-10€€á9-ADOBE-Helvetica-Medium-R-Normal--*-120-*-*-P-*-ISO8859-10€€Ý9-ADOBE-Helvetica-Medium-R-Normal--*-140-*-*-P-*-ISO8859-10€€Ø9-ADOBE-Helvetica-Medium-R-Normal--*-180-*-*-P-*-ISO8859-10€€Ù9-ADOBE-Helvetica-Medium-R-Normal--*-240-*-*-P-*-ISO8859-10€€ä6-ADOBE-Helvetica-Bold-R-Normal--*-80-*-*-P-*-ISO8859-10€€â7-ADOBE-Helvetica-Bold-R-Normal--*-120-*-*-P-*-ISO8859-10€€å7-ADOBE-Helvetica-Bold-R-Normal--*-140-*-*-P-*-ISO8859-10€€Ü7-ADOBE-Helvetica-Bold-R-Normal--*-180-*-*-P-*-ISO8859-10€€ß7-ADOBE-Helvetica-Bold-R-Normal--*-240-*-*-P-*-ISO8859-10€€à7-ADOBE-Helvetica-Bold-O-Normal--*-140-*-*-P-*-ISO8859-10€€Þ7-ADOBE-Helvetica-Bold-O-Normal--*-180-*-*-P-*-ISO8859-10€€Ú5-ADOBE-Times-Medium-R-Normal--*-120-*-*-P-*-ISO8859-10€€Û5-ADOBE-Times-Medium-I-Normal--*-120-*-*-P-*-ISO8859-1­€0€€ƒ¡€ €€‚¤€0€ÔWrite$ColorName¢€ÉBlack0€€„¡€ €€@@‚@¤€0€ÔWrite$ColorName¢€ÉWhite0€€…¡€ €€@þ‚¤€0€ÔWrite$ColorName¢€ÉRed0€€†¡€ €€@þ‚¤€0€ÔWrite$ColorName¢€ÉGreen0€€‡¡€ €€‚@þ¤€0€ÔWrite$ColorName¢€ÉBlue0€€ˆ¡€ €€@þ@þ‚¤€0€ÔWrite$ColorName¢€ÉYellow0€€‰¡€ €€@þ‚@þ¤€0€ÔWrite$ColorName¢€ÉCyan0€€Š¡€ €€@þ‚@þ¤€0€ÔWrite$ColorName¢€ÉMagenta0€€‹¢€€¡€0€€Œ¢€€¡€0€€¢€€¡€0€€Ž¢€€¡€°€±€0€€Flow¢€¡€Ô$DB‚$T£€Ô$FLOW¤€0€€ $TTL.tab.1¡€€ $TTL.tab.10€€$FN.PG¡€€$FN£€¡€É*0€€ $TTL.fig.1¡€€ $TTL.fig.10€€S1¢€£€Ô$S.10€€S2¢€£€Ô$S.20€€S3¢€£€Ô$S.30€€S4¢€£€Ô$S.40€€Body Textblock¢€£€Ô$G³€ €€dƒ„…‡‰µ€%€ €€,¡€€,¢€€,£€€,£€0€Ô Write$TR_DH0€Ô Write$TR_TYP0€Ô Write$TR_B€0€Ô Write$TR_F€0€Ô Write$TR_VA€0€Ô Write$TR_AC€0€€Include List ...¢€£€Ô$P«€ € €!€€‚€ƒ„…¡€"€‚„¥€€¦€€§€€¨€€©€€誀¡€€È«€0€ €€D0€ €€,ˆ0€ €€BÌ0€ €€Y0€ €€oT0€ €€…˜0€ €€›Ü0€ €€² 0€ €€Èd0€ €€Þ¨0€ €€ôì0€ €€ 00€ €€!t0€ €€7¸0€ €€Mü²€€ƒÙ¢€£€€ `¦€É.0€€Include List >¢€£€Ô$P«€ € €!€€‚€ƒ„…¡€"€‚„¥€€¦€€§€€¨€€©€€誀¡€€È«€0€ €€D0€ €€,ˆ0€ €€BÌ0€ €€Y0€ €€oT0€ €€…˜0€ €€›Ü0€ €€² 0€ €€Èd0€ €€Þ¨0€ €€ôì0€ €€ 00€ €€!t0€ €€7¸0€ €€Mü²€€ƒÙ¢€£€€ `¦€É.0€€Include Paragraph Tab-1¢€£€Ô$P«€ € €!€€‚€ƒ„…¡€"€‚„¥€€¦€€§€€¨€€©€€誀¡€€È«€0€ €€D0€ €€,ˆ0€ €€BÌ0€ €€Y0€ €€oT0€ €€…˜0€ €€›Ü0€ €€² 0€ €€Èd0€ €€Þ¨0€ €€ôì0€ €€ 00€ €€!t0€ €€7¸0€ €€Mü²€€ƒÙ¢€£€€ `¦€É.0€€Include Paragraph Tab-2¢€£€Ô$P«€ € €!€€‚€ƒ„…¡€"€‚„¥€€¦€€§€€¨€€©€€誀¡€€È«€0€ €€D0€ €€,ˆ0€ €€BÌ0€ €€Y0€ €€oT0€ €€…˜0€ €€›Ü0€ €€² 0€ €€Èd0€ €€Þ¨0€ €€ôì0€ €€ 00€ €€!t0€ €€7¸0€ €€Mü²€€ƒÙ¢€£€€ `¦€É.0€€Include Paragraph Text¢€£€Ô$P«€ € €!€€‚€ƒ„…¡€"€‚„¥€€¦€€§€€¨€€©€€誀¡€€È«€0€ €€D0€ €€,ˆ0€ €€BÌ0€ €€Y0€ €€oT0€ €€…˜0€ €€›Ü0€ €€² 0€ €€Èd0€ €€Þ¨0€ €€ôì0€ €€ 00€ €€!t0€ €€7¸0€ €€Mü²€€ƒÙ¢€£€€ `¦€É.0€€Trim Textblock¢€£€Ô$G³€ €€dƒ„…‡‰µ€%€ €€,¡€€,¢€€,£€€,£€0€Ô Write$TR_DH0€Ô Write$TR_TYP0€Ô Write$TR_B€0€Ô Write$TR_F€0€Ô Write$TR_VA€0€Ô Write$TR_AC€¤€€¡€0€€ Body Page¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUMÿ0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FIT€£€€ Body Page¡€ € €€ï¡€ €€5`‚¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.1¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ$¤€Ô$DBÔ$RL…GLY$Body Page.1Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€£€³€ €€K„…l€¢€€=€€€…€€Ab€£€³€ €€K„…l€¢€€=€×Ú€…€×ÚAb€‚Flow£€‚$T«€ €¡€"€GLY$Body Page.1b€‚S1£€b€‚S2£€b€‚S3£€b€‚ Main Head£€£€Ô $TTL.hd.3IAAAAAb€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGAC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1AIAAAA0€€ Body Page-L¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€è0€Ô Write$PG_NUMÿ0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€È0€Ô Write$PG_FIT€£€€ Body Page-L¡€ € €€ï¡€ €€5`¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€ï¡€€5`£€ €€€5`€€€ï€€ï€5`¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€dµ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page-L.1¡€ € €€ ¡€€ ¡€ €€Òð¡€€ 0ƒ$¤€Ô$DBÔ$RL…GLY$Body Page-L.1Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€dµ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page-L.ftr.1¡€ € €€ ¡€€¡€ €€Òð¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€dµ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page-L.hdr.1¡€ € €€ ¡€€@¡€ €€Òð¡€€'Pƒ ¤€Ô$HDRÔ$RL‡Ab€£€³€ €€K„…‰l€¢€€5€€€Ó"€€Ab€£€³€ €€K„…‰l€¢€€5€*€Ó"€*Ab€‚Flow£€‚$T«€ €¡€"€GLY$Body Page-L.1b€‚S1£€b€‚S2£€b€‚S3£€b€‚ Main Head£€ €0€Ô Write$TTL_PG¢€É Body Page-L£€Ô $TTL.hd.3IAAAAAb€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page-L.ftr.1b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€C- b€£€¥€‚$PGAC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page-L.hdr.1b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1AIAAAA0€€ Title Page¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NXT¢€É Body Page0€Ô Write$PG_NUMÿ0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FIT€£€€ Title Page¡€ € €€ï¡€ €€5`‚¤€b€£€‚$2D£€Ô$F³€ €€ƒ„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€dƒµ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Title Page.1¡€ € €€ ¡€€ýဠ€€@¡€€Äàƒ$¤€Ô$DBÔ$RL…GLY$Body Page.1Ab€£€³€ €€Kƒ„…‰l€¢€€ €×”€h€×”Ab€£€³€ €€Kƒ„…‰l€¢€€ €W€h€WAb€‚Flow£€‚$T«€ €¡€"€GLY$Title Page.1b€‚S1£€b€‚Presentation Title£€£€Ô $TTL.hd.1CTitleIAb€‚S2£€b€‚Presentation Subtitle£€£€Ô $TTL.hd.2CSubtitleIAb€‚Author£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ `CPresenter's NameIAAb€‚Author£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ `CPresenter's AffiliationIAAb€‚Date£€ €£€Ô $TTL.p1.1CDateIAAAAA¥€ € €€0¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NXT¢€É Body Page0€Ô Write$PG_BRK¢€É Title Page0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€0¡€ € €€ï¡€ €€5`‚ƒ Title Page¤€b€£€‚$2D£€Ô$F­€0€€¢€€¡€ƒƒ³€ €€ƒ„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€dƒµ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$TKWWXDJG¡€ € €€ ¡€€ýဠ€€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$TBBBXDJGAA €€1¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€1¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-2¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-2¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-2b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC2AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-2b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$TBBBXDJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$TBPKXDJGAA €€2¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€2¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-3¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-3¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-3b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC3AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-3b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$TBPKXDJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$TPXXXDJGAA €€3¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€3¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-4¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-4¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-4b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC4AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-4b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$TPXXXDJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MWPKDJJGAA €€4¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€4¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-5¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-5¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-5b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC5AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-5b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MWPKDJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MXTMJJJGAA €€5¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€5¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-6¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-6¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-6b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC6AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-6b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MXTMJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MMMGJJJGAA €€6¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€6¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-7¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-7¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-7b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC7AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-7b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MMMGJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MTBGJJJGAA €€7¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€7¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-8¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-8¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-8b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC8AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-8b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MTBGJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MJJTJJJGAA €€8¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM 0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€8¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-9¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-9¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-9b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC9AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-9b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MJJTJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MWGDJJJGAA €€9¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM 0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€9¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-10¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-10¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-10b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC10AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-10b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MWGDJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MMGMJJJGAA €€10¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM 0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€10¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-11¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-11¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-11b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC11AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-11b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MMGMJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MXGGJJJGAA €€11¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM 0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€11¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-12¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-12¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-12b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC12AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-12b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MXGGJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MXMTJJJGAA €€12¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM 0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€12¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-13¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-13¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-13b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC13AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-13b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MXMTJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MXKTJJJGAA €€13¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€13¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-14¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-14¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-14b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC14AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-14b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MXKTJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MWJMJJJGAA €€14¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€14¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-15¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-15¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-15b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC15AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-15b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MWJMJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MJPGJJJGAA €€15¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€15¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-16¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-16¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-16b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC16AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-16b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MJPGJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MMXTJJJGAA €€16¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€16¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-17¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-17¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-17b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC17AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-17b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MMXTJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MJWMJJJGAA €€17¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€17¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-18¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-18¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-18b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC18AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-18b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MJWMJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MWTTJJJGAA €€18¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€18¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-19¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-19¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-19b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC19AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-19b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MWTTJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MTKKDJJGAA €€19¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€19¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-20¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-20¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-20b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC20AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-20b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MTKKDJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MTWTJJJGAA €€20¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€20¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-21¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-21¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-21b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC21AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-21b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MTWTJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MWDGJJJGAA €€21¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€21¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-22¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-22¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-22b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC22AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-22b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MWDGJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MTXMJJJGAA €€22¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€22¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-23¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-23¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-23b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC23AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-23b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MTXMJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MMKGJJJGAA €€23¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€23¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-24¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-24¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-24b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC24AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-24b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MMKGJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MJBKDJJGAA €€24¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€24¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-25¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-25¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-25b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC25AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-25b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MJBKDJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL† GLY$MJDDJJJGAA €€25¡€0€Ô Write$PG_FMT¢€É#0€ÔWrite$PG_PTFMT¢€É.#0€Ô Write$PG_CB¥€Ü0€Ô Write$PG_NUM0€ÔWrite$PG_POINT0€Ô Write$PG_NSTY0€Ô Write$PG_PSTY0€Ô Write$PG_MG¥€ *0    0€Ô Write$PG_FN¥€°0€Ô Write$PG_FR€£€€25¡€ € €€ï¡€ €€5`‚ƒ Body Page¤€b€£€‚$2D£€Ô$F³€ €€„…‡‰·€€¡€ € €€¡€€¡€ €€5`¡€€ï£€ €€€ï€€€5`€€5`€ï¤€ €€¡€€b€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.ftr.1-26¡€ € €€ ¡€€¡€ €€@¡€€ƒ ¤€Ô$FTRÔ$RL‡Ab€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€GLY$Body Page.hdr.1-26¡€ € €€ ¡€€Òð¡€ €€@¡€€áƒ ¤€Ô$HDRÔ$RL‡Ab€‚Flow£€¡€Ô$FTR‚$T«€ €¡€"€GLY$Body Page.ftr.1-26b€‚ Running Foot£€ €£€Ô$P«€ €¡€"€«€0€ €€ùáC- b€£€¥€‚$PGC26AC -IAAb€‚Flow£€¡€Ô$HDR‚$T«€ €¡€"€GLY$Body Page.hdr.1-26b€‚ Running Head£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ b€£€¥€‚ $TTL.NAM1b€£€²€£€€†ACSystem Security CapabilitiesCand UsesAIAAAb€‚General Textblock£€ €0€Ô Write$TR_DH0€Ô Write$TR_PGF¢€É Body Text0€Ô Write$TR_TYP£€Ô$G³€ €€d‰µ€%€ €€ ¡€€ ¢€€ £€€ #€$€€ GLY$MJDDJJJG¡€ € €€ ¡€€ ¡€ €€@¡€€Äàƒ ¤€Ô$DBÔ$RL…GLY$Body Page.1AAb€€Flow.1‚Flow£€‚$T«€ €¡€"€ GLY$TKWWXDJGb€‚S1£€b€‚Presentation Title£€£€Ô $TTL.hd.1CSystem Security CapabilitiesICand UsesIAb€‚S2£€b€‚Presentation Subtitle£€£€Ô $TTL.hd.2CSE001ICGlenn C. EverhartIb€£€²€£€€CDigital Equipment Corp.ICEverhart@star.enet.DEC.comIC(Everhart@GCE.com)IAAJb€‚Include Paragraph Text£€ €£€Ô$P«€ €¡€"€b€£€²€£€€CSecuring A SystemIAAb€‚Include Paragraph Text£€ €£€Ô$P«€ €¡€"€b€£€²€£€€C?Facets: Authentication (being sure a user is who he says he is)IC IC%Access Control (What the user may do)IIC2Audit (Record keeping in case "something happens")IAAb€‚Include Paragraph Text£€ €£€Ô$P«€ €¡€"€b€£€²€£€€C6...all in accordance with a policy and security model.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC&(Dominant security model is military.)IAAb€‚Include Paragraph Text£€ €£€Ô$P«€ €¡€"€b€£€²€£€€CAuthentication:IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC1VMS, Unix, WNT all use passwords for local systemIICNetworks pose a threat.IAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ICThreat: IIC5Wiretaps (including ethernet "hardware assisted tap")IIIC&(also Tempest types, for completeness)IIICUntrustworthy hostsIIICUntrustworthy protocolsIIICUntrustworthy programsIAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC:Ethernet packet grabbers are the most common wiretap classIICthreat. IAAb€‚Include Paragraph Tab-2£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IICCountermeasures:IIICTDR (to find unauthorized taps)IIICroutersIIIC+Use of FDDI (which has no promiscuous mode)IIICSpecialty boxes like DESNCIAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ICUntrustworthy hosts: IIIC4Any host with a dishonest person who can control it.IIIC4Can spoof addresses or protocols. Many attacks on IPIIIC1exist at the routing level. DECnet host names canIIIC be forged:IAAb€‚Include Paragraph Tab-2£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IICCountermeasures:IIIC4For DECnet, node SEND and RECEIVE passwords for eachIIIICnode.IIIC)Kerberos or similar authentication suitesIAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ICUntrustworthy protocols:IIIC4Many common protocols like NIS (YP), NFS, have holesIIIC6which permit anyone who can access them to gain systemIIIC3access. The X windows protocols can be particularlyIIIC5vulnerable (depending on transport and authenticationIIIC options.)IAAIb€‚Include Paragraph Text£€ €£€Ô$P«€ €¡€"€b€£€²€¢€£€€xC8(from a recent vmsnet.networks.tcp-ip.multinet article:)IAAb€‚Include Paragraph Text£€ €£€Ô$P«€ €¡€"€b€£€²€¢€£€€xCcAccess to files via NFS is via Unix-style UID/GID. An NFS client learns the UID/GID that a user is JCYsupposed to use by (1) a local file which contains username to UID/GID mappings (such as JC_passwd on Unix, or the NFS configuration information on a MultiNet for OpenVMS client), or (2) JCOby sending a username/password to a PCNFSD server, which authenticates the userJC+name/password and replies with the UID/GID.IAAb€‚Include Paragraph Text£€ €£€Ô$P«€ €¡€"€b€£€²€¢€£€€xC_Now, if someone with lots of time on their hands (a student, let's say) pokes around on their JCZNFS client enough, they'll eventually find some way of causing the NFS client to emit any JCHUID/GID they wish. Exact methods are left as an exercise for the reader.IAAb€‚Include Paragraph Text£€ €£€Ô$P«€ €¡€"€b€£€²€¢€£€€xC`The "solution" is to setup mount restrictions, so only "trusted" NFS clients can access certain JCmountpoints (directory trees).IAAb€‚Include Paragraph Tab-2£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IICCountermeasures:IIIC4Cryptographic authentication options and systems, toIIIC4handle authentication. Securing data really requiresIIIC9encryption if any part of the data travels over untrustedIIIC5wires. Ethernets are very frequently not trustworthy.IAAb€‚Include Paragraph Tab-2£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC4Some protocols have optional authentication which isIIICnot widely used.IAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ICUntrustworthy programs:IIIC:This refers to programs with covert behavior, particularlyIIIC7"Trojan horse" apps that do secret things when they areIIICrun with privs.IIIIICCountermeasures:IIICKNOW YOUR SOURCES !!!IAAb€‚Include Paragraph Tab-2£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC6Run in a nonprivileged environment, and use tools likeIIIC3SET WATCH (shows file accesses tried), FTS (on VAX)IIIC7to show what system services are used (and fake $setprvIIIC1optionally), or system service intercept by BrianIIIC4Schenkenberger (see S96 sigtapes, upcoming) which isIIIC7suitable for $setprv, $gettim, and other intercepts forIIIC4selected processes. Watch for $getjpi, $setprv callsIIIC/to set privs, or ask why $gettim may be called.IAAIb€‚Include Paragraph Tab-2£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC5In hard cases, DISM32 or similar tools can be used toIIICrecreate MACRO-32 if on VAX.IAAb€‚Include Paragraph Tab-2£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC2Try to arrange never to run untrusted code under aIIIC3priv'd process. An access ACE and an audit listenerIIIC1mailbox client can be built to attempt to enforceIIIC1this. (A pre-activation checker is better still.)IAAb€‚Include Paragraph Tab-2£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC6Authentication of scripts for tampering is a good ideaIIIC'if you can do it. Network-1 has a tool.IAAb€‚Include Paragraph Tab-2£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC6Run a system checker periodically to look for tamperedIIIC5with code. Won't stop access, but will tell you aboutIIIC8it before you're exposed for months. Polycenter has one.IAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ICUser Authentication:IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC:The key to system access is to have an identity the systemIICknows.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC>* Passwords when interactive. (Challenges, secure channels...)IIIIC,-> USE the "evasion" features in your systemIIIIC0-> if you have them. USE password policy modulesIIIIC0-> and checkers to be sure passwords are strong.IIIIC0-> Pick good pass-phrases; do not force frequentIIIIC,-> change (becomes algorithmic or is writtenIIIIC -> down).IAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC4* Some distributed trust mechanisms exist. Examples:IIIC* DECnet proxiesIIIIC*-> EXTREME care in proxy access with privsIIIIC-> Use FAL$LOG=1/disable=8IIIC(* "R" utilities (trusted users or hosts)IIIIC*-> EXTREME care in this for anyone who canIIIIC-> become superuserIIIC)* Routing information (network firewalls)IIIIC+-> Several CERT advisories about this. SomeIIIIC.-> documented IP attacks still exist that haveIIIIC!-> not yet been seen in the wild.IIIC--> Trust hosts b€£€²€¢€C sparingly.IAIC=* Most systems assume programs run under a user's name are toIIIC#be treated as agents of that user. b€£€²€¢€CFor the most partIAIIC6VMS, Unix, and NT check user access, not user/program.IIIIC--> Extended checking software features can beIIIIC'-> helpful with the most critical data.IAIb€£€²€£€€IC="Social Engineering" (i.e., plain old deception of humans) isIIIC4a serious threat. (Watch someone type a password, orIIIC5get a password changed over the phone or print & mailIIICa document...)IIIIC,-> Some forms of these threats can be helpedIIIIC,-> where clerks are duped, IF the clerks areIIIIC)-> themselves limited in how they can getIIIIC*-> information. Education and auditing areIIIIC-> needed too.IAIb€£€²€£€€ICThreats:IIIC* Idle account reuseIIIIC1-> Clean out all residues of accounts (including IIIIC.-> ACEs) promptly. NT user ID is never reused.IIIIC1-> (DISUSERing an acct can be better sometimes toIIIIC-> detect attempts at reuse.)IIIC7* Spoofing or untrustworthiness of something on anotherIIIICmachineIIIIC0-> Authenticators can be added for some types ofIIIIC,-> access, to ensure you're dealing with theIIIIC.-> user and machine you think. The better onesIIIIC2-> encrypt their traffic. They can also be used toIIIIC2-> permit safe access by category to data you wantIIIIC)-> to share internally but not all over. IIIIC3-> Firewalls internally can be very helpful if workIIIIC-> community topology allows.IAIb€£€²€£€€IIC* Weak default protectionsIIIIC.-> Run checkers like COPS or any of several onIIIIC0-> the sigtapes for VMS, or the Polycenter toolsIIIIC -> to test.IIIIC1-> Volume protections to isolate classes of usersIIIIC1-> work like mandatory controls. If someone can'tIIIIC0-> access the volume, they can't get any file onIIIIC/-> it. Virtual disks help here. On VMS you can IIIIC0-> use volume ACLs to isolate volumes from, say,IIIIC-> network access.IIIIC2-> If information is private, use a cryptodisk andIIIIC'-> keep the key value locked in a safe.IAAIb€‚Include Paragraph Text£€ €£€Ô$P«€ €¡€"€b€£€²€£€€CAccess Control:IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC>Access control means the facilities the system uses to controlIIC%who gets what access to what objects.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC:VMS, Unix, and WNT all rely on a user name which becomes aIIC magic cookie.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC?* In Unix and WNT, a user can belong to many groups (sometimes IIC:limited to a fixed maximum number like 8 or 16). Access toIIC1objects can be as the user, or as a group member.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC?* VMS allows a user to hold many rights identifiers (as many asIIC8desired). Access can be as the user or as a holder of anIIC identifier.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC:* Both VMS and WNT have notions of privileges which bypassIIC>security checks; details are different and some WNT privilegesIIC9are relevant to certain utilities only. Unix has a singleIIC;privilege, "Superuser" for all functions. VMS and Unix haveIICAnotions of specially-trusted applications (install with privilegeIICa user or group number. VMS and some modern Unix versions alsoIIC support ACLs.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC7* WNT has no "UIC" heritage but inherits the MSDOS fileIIC9protection scheme in addition to its ACLs. This overridesIICACL protections if present.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC7* VMS allows files in a directory to have a default ACLIIC£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC3> VMS approach means the security information comesIIIC6> "along for the ride" during file access. Thus accessIIIC > is fast.IIIC6> When trying to remove a user, removing all ACLs thatIIIC#> mention that user can be a chore.IAAb€‚Include List >£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC'> WNT approach makes management easier.IIIC3> Cache can attempt to reduce overhead of lookup ofIIIC> security information.IIIC9> Where a file has no security information, its ancestorsIIIC5> are examined. Thus only one ACL might cover a largeIIIC/> part of a volume, many directory levels deep.IAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC* Access controls:IAAb€‚Include Paragraph Tab-2£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC&Unix: Read, Write, Execute, SUID, SGIDIIIC*VMS: Read, Write, Execute, Delete, ControlIIIC:WNT: Read, Write, Execute, Delete, Control, TakeOwnership,IIIICRead-ACLIAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ICB* Impersonation services exist in both systems, for use by trustedIIIC+servers. Capabilities are generally similarIAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC+* Correct setup rules of thumb, VMS OR WNT:IAAb€‚Include List >£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC1> Back up data often enough and GUARD the BACKUPSIIIC*> Protect what is important most carefullyIIIC/> Be sure default accesses correspond to policyIAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC3Important Differences of Detail between VMS and WNTIAAb€‚Include Paragraph Tab-2£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC(* Registry vs. security info with objectIIIC0* ACLs only, with inheritance and user defaults,IIIICvs. ACLs and UICsIIIC'* Details of ACLs and privileges differIIIC7* WNT default if no ACLs are present is completely openIIIICaccess.IIIC5* WNT also defaults to a "guest" account requiring noIIIICprior authentication at all.IAAIb€‚Include Paragraph Text£€ €£€Ô$P«€ €¡€"€b€£€²€£€€CWNT Security Under VMSIAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC>* An experiment I have done...not a product nor even a projectIIC@* Done to see what was needed to handle a "foreign" model in VMSIAIb€£€²€£€€IC#* Uses my I/O intercept technology:IAAb€‚Include List >£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC;> For files, intercept disk driver FDT ahead of file systemIIC9> Where appropriate read tags on files in a kernel threadIIIC1and use kernel data to ensure nothing that shouldIIICbe examined is omittedIIC?> Notify a server (which winds up acting as registry or talkingIIIC2to it) when open/create/delete/close etc. are doneIIIC3and pass it the current request info, where to sendIIIC(a SKAST. Make the proces wait for reply.IIC;> Server runs, does additional checks as needed and returnsIIIC"yea" or "nay"IIC8> Server sends SKAST to the address (in the process) andIIIC0the SKAST causes the process to be unwaited, andIIIC2its control thread then resumes context and eitherIIICdoes the I/O or fakes failureIAAb€‚Include List >£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC:> Similar schemes for generic system services are feasibleIIICand would work much the same.IAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC>* The server contains logic to read a user database containingIIIC1groups, default ACLs (user and system) and also aIIIC4default command (an added hook, to be replaced laterIIIC'by a more general notification scheme).IIC<* The server reads a file database containing NT informationIIIC3on file security ACLs etc., or chains up to parent IIIC3directories (uses backpointers) to find any defaultIIIC ACL with inheritable ACEs if anyIIC.* Access is tested according to NT type rules.IIC6* Create handled by access for all NT - security usersIIIC2and will flag a file as using default ACL for userIIIC0or inherited from above if appropriate. Does notIIIC4need to propagate records, but will use user defaultIIIC1ACL if present. Also will fill in a fully generalIIIC,system ACL, which is tested before user ACL.IIC;* User and system databases are only permitted to be editedIIIC0by an editing app, which enforces permissions onIIIC0who can do what. The intercept itself is used toIIIC3control this, "knows" where these databases are andIIICwhat apps may access them.IAAJb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC9In addition the intercept allows access controls based onIAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC * User IdIIC* What time of day it isIIC* Where the user is physicallyIIC* What image is being usedIIC6* What privileges are present (denies access if EXCESSIIIICprivs are present)IIC)* Whether the file has been tampered withIIC9* Whether the file is tagged for passwords and a passwordIIIChas been pre-enteredIIC"* What kind of access is requestedIIC8* Replacement privilege masks (to lower privileges whileIIIC doing access)IAAb€‚Include List ...£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC'... In addition to normal VMS security.IAAb€‚Include List ...£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IICCAccess failure is logged, and files can be hidden from unauthorizedIIICaccess.IAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC=Note that the access controls here are not the usual militaryIIC;model. The idea is to MACHINE ENCODE "need to know" so thatIIC:normal activities tend to be permitted, but access outsideIIC:those activities can be controlled and audited. Control ofIIC=excess privileges is important since privileges otherwise canIICbecome a total security bypass.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC;This sort of control is appropriate to major corporate dataIIC;bases, customer lists, bank account records, payroll files,IIC:future plans, etc., where the files need to be shared, butIIC7where loss or damage can harm the data owner seriously.IAAIb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€CAuditIAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IICB*VMS and WNT have facilities for audit of security relevant eventsIAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC#* VMS facilities are well developedIAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC%* Problem of audit is volume of data.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC>* Several products exist to use the "listener mailbox" featureIIIIC2of VMS Audit to report suspicious actions in closeIIIICto real time. IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC<* Audit can tell when the horse leaves the barn and what wasIIIIC8going on. This is only useful for some threats, not all.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC@* Pattern matching in console input watchers can also give cluesIIIIC to snoopingIAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIC1* A "security patrol" is worth having if you can.IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€ICG-> Keep audit trails, offsite if possible. Keeping audits on write-onceIIIC$configurations worth thinking about.IIC Conclusion:IAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IC;* Know and control your user population and its permissionsIIC* Avoid untrusted protocolsIICA* Check your security against local policy with tools, commercialIIICor freeIIC,* "Walk the beat" to look for strange thingsIIC9* Set up access permissions, especially on critical data,IIIC to allow b€£€²€¢€ConlyAC& what is needed for people to do theirIIICjobsIIC>* Consider resetting default permissions if they are too looseIIICfor your policy.IIAAb€‚Include Paragraph Tab-1£€ €£€Ô$P«€ €¡€"€b€£€²€£€€IIAAAAAA