Home
Security Hardening
DISA STIG IBM DB2 V10.5LUW V1R4 OS Windows

DISA STIG IBM DB2 V10.5LUW V1R4 OS Windows

DB2X-00-003100 – Database software, including DBMS configuration files, must be stored in dedicated directories, separate from the host OS and other applications.
Details When dealing with change control issues, it should be noted any changes to the hardware, software, and/or firmware components...
DB2X-00-003400 – Default demonstration and sample databases, database objects, and applications must be removed.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
DB2X-00-003500 – Unused database components, DBMS software, and database objects must be removed.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
DB2X-00-003800 – DB2 must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.
Details In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e., embedding of data...
DB2X-00-003800 – DB2 must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments – SSL_SVCENAME
Details In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e., embedding of data...
DB2X-00-003800 – DB2 must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments – SVCENAME
Details In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e., embedding of data...
DB2X-00-004100 – If passwords are used for authentication, DB2 must transmit only encrypted representations of passwords – AUTHENTICATION
Details The DoD standard for authentication is DoD-approved PKI certificates. Authentication based on User ID and Password may be used...
DB2X-00-005100 – DB2 must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values – SSL
Details One class of man-in-the-middle, or session hijacking, attack involves the adversary guessing at valid session identifiers based on patterns...
DB2X-00-005100 – DB2 must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values – SSL_SVCENAME
Details One class of man-in-the-middle, or session hijacking, attack involves the adversary guessing at valid session identifiers based on patterns...
DB2X-00-005100 – DB2 must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values – SVCENAME
Details One class of man-in-the-middle, or session hijacking, attack involves the adversary guessing at valid session identifiers based on patterns...

Prev Next

DISA STIG IBM DB2 V10.5LUW V1R4 OS Windows

DB2X-00-003100 – Database software, including DBMS configuration files, must be stored in dedicated directories, separate from the host OS and other applications.

DB2X-00-003400 – Default demonstration and sample databases, database objects, and applications must be removed.

DB2X-00-003500 – Unused database components, DBMS software, and database objects must be removed.

DB2X-00-003800 – DB2 must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

DB2X-00-003800 – DB2 must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments – SSL_SVCENAME

DB2X-00-003800 – DB2 must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments – SVCENAME

DB2X-00-004100 – If passwords are used for authentication, DB2 must transmit only encrypted representations of passwords – AUTHENTICATION

DB2X-00-005100 – DB2 must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values – SSL

DB2X-00-005100 – DB2 must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values – SSL_SVCENAME

DB2X-00-005100 – DB2 must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values – SVCENAME