+SI-16 [M] Memory Protection

SI-16 [M] Memory Protection

Control

Implement the following controls to protect the system memory from unauthorized code execution: [Assignement: controls].

Discussion

Some adversaries launch attacks with the intent of executing code in non-executable regions of memory or in memory locations that are prohibited. Controls employed to protect memory include data execution prevention and address space layout randomization. Data execution prevention controls can either be hardware-enforced or software-enforced with hardware enforcement providing the greater strength of mechanism.

Assessment Objective

[Assignement: controls] are implemented to protect the system memory from unauthorized code execution.

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing memory protection for the system system design documentation system configuration settings and associated documentation list of security safeguards protecting system memory from unauthorized code execution system audit records system security plan other relevant documents or records

Interview

Organizational personnel responsible for memory protection organizational personnel with information security responsibilities system/network administrators system developer

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by SI-16 [M] Memory Protection – Assessment Procedure
is blocked by Memory Protection