BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

SC-23 Session Authenticity

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged SC Moderate baselineHigh baseline

Title

Session Authenticity

Control

Protect the authenticity of communications sessions.

Discussion

Protecting session authenticity addresses communications protection at the session level, not at the packet level. Such protection establishes grounds for confidence at both ends of communications sessions in the ongoing identities of other parties and the validity of transmitted information. Authenticity protection includes protecting against "man-in-the-middle" attacks, session hijacking, and the insertion of false information into sessions.

Related controls

au-10, sc-10, sc-11, sc-8

Assessment objective

SC-23 the authenticity of communication sessions is protected.

STIG rules that implement this control 3

Application Security and Development V6R5