03.13.15 Session Authenticity
NIST SP 800-171 Rev 3 (CUI; CMMC Level 2) OSCAL 1.1.0 against OSCAL 1.1.0
All changes in this version
All changes in this version
Title
Session Authenticity
Control
Protect the authenticity of communications sessions.
Discussion
Protecting session authenticity addresses communications protection at the session level, not at the packet level. Such protection establishes grounds for confidence at both ends of the communications sessions in the ongoing identities of other parties and the validity of the transmitted information. Authenticity protection includes protecting against adversary-in-the-middle attacks, session hijacking, and the insertion of false information into sessions.
Assessment objective
the authenticity of communications sessions is protected.