+SYS.1.1.A37 Encapsulation of Security-Critical Applications and Operating System Components (S)

SYS.1.1.A37 Encapsulation of Security-Critical Applications and Operating System Components (S)

In order to prevent an attacker from accessing the operating system or other applications and prevent access from the operating system to files that are particularly sensitive, applications and operating system components (such as authentication or certificate verification) SHOULD be specially encapsulated according to their protection needs or isolated from other applications and operating system components. Particular attention SHOULD be paid to security-critical applications that work with data from insecure sources (e.g. web browsers and office communication applications).

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar

Länkade ärenden

Länkar
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.39 Malware
blocks G 0.45 Data Loss