GRCA Planeth
Non hai effettuato l’accesso
Accedi
Inizio
Fonti
›
SC-31 Covert Channel Analysis
›
Standard - SC-31(02) Maximum Bandwidth
+SC-31(02) Maximum Bandwidth
SC-31(02) Maximum Bandwidth
Control
Reduce the maximum bandwidth for identified covert [Selection(one-or-more): storage; timing] channels to [Assignement: values].
Discussion
The complete elimination of covert channels, especially covert timing channels, is usually not possible without significant performance impacts.
Assessment Objective
the maximum bandwidth for identified covert [Selection(one-or-more): storage; timing] channels is reduced to [Assignement: values].
Assessment Method
Examine
System and communications protection policy procedures addressing covert channel analysis acquisition contracts for systems or services acquisition documentation system design documentation system configuration settings and associated documentation covert channel analysis documentation system audit records system security plan other relevant documents or records
Interview
System/network administrators organizational personnel with information security responsibilities organizational personnel with covert channel analysis responsibilities system developers/integrators
1. Panoramica
Titolo
Standard
1.1 Riferimenti
1.2 Requisiti identificati
1.3 Regolamentazioni correlate
2. Requisiti identificati
Requisiti
Fonte
Requisito
3. Regolamentazioni correlate
Regolamentazioni
Fonte
Regolamentazione
Ticket collegati
Collegamenti
Tipo di collegamento
Ticket
is blocked by
SC-31(02) Maximum Bandwidth – Assessment Procedure
NIST
-
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final