03.13.15 Session Authenticity

Statement

Protect the authenticity of communications sessions.

Guidance

Protecting session authenticity addresses communications protection at the session level, not at the packet level. Such protection establishes grounds for confidence at both ends of the communications sessions in the ongoing identities of other parties and the validity of the transmitted information. Authenticity protection includes protecting against adversary-in-the-middle attacks, session hijacking, and the insertion of false information into sessions.

Assessment objective

the authenticity of communications sessions is protected.

Assessment method

• system and communications protection policy and procedures procedures for session authenticity system design documentation system configuration settings system audit records system security plan other relevant documents or records

Assessment method

• personnel with information security responsibilities system administrators

Assessment method

• mechanisms for supporting or implementing session authenticity

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final