CertiGuide to Security+  9  Chapter 5:  Operational/Organizational Security (Domain 5.0; 15%)       9  5.2  Disaster Recovery

5.2.1.1  Off-Site Storage 1 5.2.2.1  Alternate Sites

Integrity is required to have a security guarantee. Typically, this is not found as part of the design of a computer system’s architecture. The University of Pennsylvania has developed a system they call AEGIS or Automated Recovery in a Secure Bootstrap Process.⁴²⁴ In brief, AEGIS assumes:

• The system board has not been compromised.
  
  
• A certificate authority is being used.
  
  
• A trusted host exists for recovery purposes.

With these assumptions, there are six goals for AEGIS. They are:

• Allow the AEGIS client and the trusted repository to mutually authenticate their identities with limited or no prior contact.
  
  
• Prevent man in the middle attacks.
  
  
• Prevent replay attacks.
  
  
• Mitigate certain classes of denial of service attacks.
  
  
• Allow the participating parties to agree upon a shared secret and secure manner in order to optimize future message authentication.
  
  
• Be as simple as possible: Complexity breeds design in an application.

5.2.1.1  Off-Site Storage 1 5.2.2.1  Alternate Sites