SI-15 Information Output Filtering
All changes in this version
Title
Information Output Filtering
Control
Validate information output from the following software programs and/or applications to ensure that the information is consistent with the expected content: [Assignment: software programs and/or applications].
Discussion
Certain types of attacks, including SQL injections, produce output results that are unexpected or inconsistent with the output results that would be expected from software programs or applications. Information output filtering focuses on detecting extraneous content, preventing such extraneous content from being displayed, and then alerting monitoring tools that anomalous behavior has been discovered.
Parameters
si-15_odp: software programs and/or applications
Related controls
si-11, si-3, si-4
Assessment objective
SI-15 information output from [Assignment: software programs and/or applications] is validated to ensure that the information is consistent with the expected content.
STIG rules that implement this control 0
No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).