AC-04(28) Linear Filter Pipelines
All changes in this version
Title
Linear Filter Pipelines
Control
When transferring information between different security domains, implement a linear content filter pipeline that is enforced with discretionary and mandatory access controls.
Discussion
Content filtering is the process of inspecting information as it traverses a cross-domain solution and determines if the information meets a predefined policy. The use of linear content filter pipelines ensures that filter processes are non-bypassable and always invoked. In general, the use of parallel filtering architectures for content filtering of a single data type introduces bypass and non-invocation issues.
Assessment objective
AC-04(28) when transferring information between security domains, a linear content filter pipeline is implemented that is enforced with discretionary and mandatory access controls.
STIG rules that implement this control 0
No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).