C.24.2.3 Security Considerations for Encapsulated Documents (Informative)

C.24.2.3 Security Considerations for Encapsulated Documents (Informative) (Current)
Prev	C.24.2 Encapsulated Document Module	Next

The encapsulated documents may conform to another standard, e.g., PDF, or may be in a proprietary format. Many of these formats have had their own security issues, both with the format itself and with common implementations for processing the format.

Implementations that support encapsulated documents may need to:

Perform input validation and sanitation to detect and perhaps remove invalid or malicious content.
Perform output validation to ensure safe compliance with format specification.
Monitor library implementations for vulnerability reports, updates, and have a process for managing these updates.

Tracking, notification, and remediation of these security problems will normally be in the context of the encapsulated format and not in the context of DICOM. This means those implementing and deploying the encapsulated format must consider security issues from those other contexts.

Prev	Up	Next
C.24.2.2 Content Sequence	Home	C.24.2.4 Relative URI Reference Within Encapsulated Document