03.14.14E Memory Protection

Statement

Implement the following safeguards to protect the system memory from unauthorized code execution: {{ insert: param, A.03.14.14E.ODP.01 }}.

Guidance

Some adversaries launch attacks with the intent of executing code in non-executable regions of memory or in memory locations that are prohibited. The safeguards used to protect memory include data execution prevention and address space layout randomization (ASLR). Data execution prevention safeguards can be hardware- or software-enforced with hardware enforcement providing the greater strength of mechanism. This requirement is sourced to a control tailored out of the SP 800-53B .13 moderate baseline in SP 800-171.

Statement

• (includes preempt) Ensure that the threat event does not have an impact.

  • Reduce likelihood of occurrence and/or reduce likelihood of impact.

  • The adversary’s efforts or resources cannot be applied or are wasted.

• (includes exert) Make it more difficult for threat events to cause adverse impacts or consequences.

  • Reduce likelihood of impact and reduce level of impact.

  • Adversary activities are restricted in scope, fail to achieve full effect, do not take place in accordance with adversary timeline, or require greater resources than adversary had planned.

Assessment objective

{{ insert: param, A.03.14.14E.ODP.01 }} are implemented to protect the system memory from unauthorized code execution.

Assessment method

• System and information integrity policy system and information integrity procedures procedures addressing memory protection for the system system design documentation system configuration settings and associated documentation list of security safeguards protecting system memory from unauthorized code execution system audit records system security plan other relevant documents or records

Assessment method

• Personnel responsible for memory protection personnel with information security responsibilities system/network administrators system developers

Assessment method

• Automated mechanisms supporting and/or implementing safeguards to protect the system memory from unauthorized code execution

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

3. Související regulace

Propojené úkoly

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final