+SI-15 Information Output Filtering

SI-15 Information Output Filtering

Control

Validate information output from the following software programs and/or applications to ensure that the information is consistent with the expected content: [Assignement: software programs and/or applications].

Discussion

Certain types of attacks, including SQL injections, produce output results that are unexpected or inconsistent with the output results that would be expected from software programs or applications. Information output filtering focuses on detecting extraneous content, preventing such extraneous content from being displayed, and then alerting monitoring tools that anomalous behavior has been discovered.

Assessment Objective

information output from [Assignement: software programs and/or applications] is validated to ensure that the information is consistent with the expected content.

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing information output filtering system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

Organizational personnel responsible for validating information output organizational personnel with information security responsibilities system/network administrators system developer

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
is blocked by SI-15 Information Output Filtering – Assessment Procedure
is blocked by Information Output Filtering