+SYS.1.1.A37 Encapsulation of Security-Critical Applications and Operating System Components (S)

SYS.1.1.A37 Encapsulation of Security-Critical Applications and Operating System Components (S)

In order to prevent an attacker from accessing the operating system or other applications and prevent access from the operating system to files that are particularly sensitive, applications and operating system components (such as authentication or certificate verification) SHOULD be specially encapsulated according to their protection needs or isolated from other applications and operating system components. Particular attention SHOULD be paid to security-critical applications that work with data from insecure sources (e.g. web browsers and office communication applications).

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.39 Malware
blocks G 0.45 Data Loss