+SI-15 Information Output Filtering
|
SI-15 Information Output Filtering
Control
Validate information output from the following software programs and/or applications to ensure that the information is consistent with the expected content: [Assignement: software programs and/or applications].
Discussion
Certain types of attacks, including SQL injections, produce output results that are unexpected or inconsistent with the output results that would be expected from software programs or applications. Information output filtering focuses on detecting extraneous content, preventing such extraneous content from being displayed, and then alerting monitoring tools that anomalous behavior has been discovered.
Assessment Objective
information output from [Assignement: software programs and/or applications] is validated to ensure that the information is consistent with the expected content.
Assessment Method
Examine
System and information integrity policy
system and information integrity procedures
procedures addressing information output filtering
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
Organizational personnel responsible for validating information output
organizational personnel with information security responsibilities
system/network administrators
system developer
1. Panoramica
1.1 Riferimenti
1.2 Requisiti identificati
1.3 Regolamentazioni correlate
2. Requisiti identificati
Requisiti
| Fonte |
Requisito |
3. Regolamentazioni correlate
Regolamentazioni
| Fonte |
Regolamentazione |
Ticket collegati
|