View Issue Details

IDProjectCategoryView StatusLast Update
000225310000-010: ProgramsSpecpublic2014-09-16 20:03
ReporterJim Luth Assigned ToKarl Deiretsbacher  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Target Version1.03Fixed in Version1.03 
Summary0002253: Program related issues
Description

From NIST security review the following suggestion has been made. Programs and method invocations provide important functionality, but this functionality can be misused if not governed in some manner. Execution of program (or Methods) should be limited to appropriate personnel and the concurrent invocation of these should also be monitored and restricted

TagsNo tags attached.
Commit Version
Fix Due Date

Relationships

related to 0002237 closedPaul Hunkar 10000-002: Security Program related issues 

Activities

Jim Luth

2012-11-06 18:21

administrator   ~0004210

Suggestion is to add diagnostic counters for each running program.

Karl Deiretsbacher

2013-07-16 17:54

developer   ~0004822

Fixed in "IEC 62541-10 - Programs [Pre-CDV] 1.02.02.doc".

Added a paragraph that suggests proper user authorisation for programs.
Also, some diagnostic information is already defined.

Jim Luth

2014-09-16 20:03

administrator   ~0005487

Previously reviewed change in the IEC version is now in the current 1.03 draft.

Issue History

Date Modified Username Field Change
2012-11-02 16:19 Jim Luth New Issue
2012-11-02 16:19 Jim Luth Issue generated from: 0002237
2012-11-02 16:19 Jim Luth Relationship added related to 0002237
2012-11-02 16:19 Jim Luth Project 10000-002: Security => 10000-010: Programs
2012-11-06 18:21 Jim Luth Note Added: 0004210
2012-11-06 18:21 Jim Luth Status new => assigned
2012-11-06 18:21 Jim Luth Assigned To => Karl Deiretsbacher
2013-07-16 17:54 Karl Deiretsbacher Status assigned => resolved
2013-07-16 17:54 Karl Deiretsbacher Resolution open => fixed
2013-07-16 17:54 Karl Deiretsbacher Note Added: 0004822
2014-08-19 17:35 Jim Luth Category (No Category) => Spec
2014-08-19 17:35 Jim Luth Target Version => 1.03
2014-09-16 20:03 Jim Luth Note Added: 0005487
2014-09-16 20:03 Jim Luth Status resolved => closed
2014-09-16 20:03 Jim Luth Fixed in Version => 1.03