CyberStrikeus/CyberStrike - Page 138

sc-19-voice-over-internet-protocol

Technology-specific;

sc-2-1-interfaces-for-non-privileged-users

Prevent the presentation of system management functionality at interfaces to non-privileged users.

sc-2-2-disassociability

Store state information from applications and software separately.

sc-2-separation-of-system-and-user-functionality

Separate user functionality, including user interface services, from system management functionality.

sc-20-1-child-subspaces

Child Subspaces

sc-20-2-data-origin-and-integrity

Provide data origin and integrity protection artifacts for internal name/address resolution queries.

sc-20-secure-nameaddress-resolution-service-authoritative-source

Provide additional data origin authentication and integrity verification artifacts along with the authoritative name resolution data the system ret...

sc-21-1-data-origin-and-integrity

Data Origin and Integrity

sc-23-1-invalidate-session-identifiers-at-logout

Invalidate session identifiers upon user logout or other session termination.

sc-23-2-user-initiated-logouts-and-message-displays

User-initiated Logouts and Message Displays

sc-23-3-unique-system-generated-session-identifiers

Generate a unique session identifier for each session with [organization-defined] and recognize only session identifiers that are system-generated.

sc-23-4-unique-session-identifiers-with-randomization

Unique Session Identifiers with Randomization

sc-23-5-allowed-certificate-authorities

Only allow the use of [organization-defined] for verification of the establishment of protected sessions.

sc-23-session-authenticity

Protect the authenticity of communications sessions.

sc-24-fail-in-known-state

Fail to a [organization-defined] for the following failures on the indicated components while preserving [organization-defined] in failure: [organizat

sc-25-thin-nodes

Employ minimal functionality and information storage on the following system components: [organization-defined].

sc-26-1-detection-of-malicious-code

Detection of Malicious Code

sc-26-decoys

Include components within organizational systems specifically designed to be the target of malicious attacks for detecting, deflecting, and analyzing

sc-27-platform-independent-applications

Include within organizational systems the following platform independent applications: [organization-defined].

sc-28-1-cryptographic-protection

Implement cryptographic mechanisms to prevent unauthorized disclosure and modification of the following information at rest on [organization-defined]:

sc-28-2-offline-storage

Remove the following information from online storage and store offline in a secure location: [organization-defined].

sc-28-3-cryptographic-keys

Provide protected storage for cryptographic keys [organization-defined].

sc-28-protection-of-information-at-rest

Protect the [organization-defined] of the following information at rest: [organization-defined].

sc-29-1-virtualization-techniques

Employ virtualization techniques to support the deployment of a diversity of operating systems and applications that are changed [organization-defined

sc-29-heterogeneity

Employ a diverse set of information technologies for the following system components in the implementation of the system: [organization-defined].

sc-3-1-hardware-separation

Employ hardware separation mechanisms to implement security function isolation.

sc-3-2-access-and-flow-control-functions

Isolate security functions enforcing access and information flow control from nonsecurity functions and from other security functions.

sc-3-3-minimize-nonsecurity-functionality

Minimize the number of nonsecurity functions included within the isolation boundary containing security functions.

sc-3-4-module-coupling-and-cohesiveness

Implement security functions as largely independent modules that maximize internal cohesiveness within modules and minimize coupling between modules.

sc-3-5-layered-structures

Implement security functions as a layered structure minimizing interactions between layers of the design and avoiding any dependence by lower layers o

sc-3-security-function-isolation

Isolate security functions from nonsecurity functions.

sc-30-1-virtualization-techniques

Virtualization Techniques

sc-30-2-randomness

Employ [organization-defined] to introduce randomness into organizational operations and assets.

sc-30-3-change-processing-and-storage-locations

Change the location of [organization-defined] [organization-defined]].

sc-30-4-misleading-information

Employ realistic, but misleading information in [organization-defined] about its security state or posture.

sc-30-5-concealment-of-system-components

Employ the following techniques to hide or conceal [organization-defined]: [organization-defined].

sc-30-concealment-and-misdirection

Employ the following concealment and misdirection techniques for [organization-defined] at [organization-defined] to confuse and mislead adversaries:

sc-31-1-test-covert-channels-for-exploitability

Test a subset of the identified covert channels to determine the channels that are exploitable.

sc-31-2-maximum-bandwidth

Reduce the maximum bandwidth for identified covert [organization-defined] channels to [organization-defined].

sc-31-3-measure-bandwidth-in-operational-environments

Measure the bandwidth of [organization-defined] in the operational environment of the system.