+Session Management

Session Management

To protect confidentiality, availability, integrity and authenticity during interactions with the cloud service, a suitable session management system is used that at least corresponds to the stateoftheart and is protected against known attacks. Mechanisms are implemented that invalidate a session after it has been detected as inactive. The inactivity can be detected by time measurement. In this case, the time interval can be configured by the Cloud Service Provider or if technically possible - by the cloud customer.
Additonal Criteria-
Supplementary Information - About the CriteriaKnown attacks include manipulation, forgery, session takeover, denial of service attacks, enveloping, replay and null cipher attacks.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations