SI-15

System and Information IntegrityRev 5system

Information Output Filtering

Control Statement

Validate information output from the following software programs and/or applications to ensure that the information is consistent with the expected content: [Assignment: software programs and/or applications].

Supplemental Guidance

Certain types of attacks, including SQL injections, produce output results that are unexpected or inconsistent with the output results that would be expected from software programs or applications. Information output filtering focuses on detecting extraneous content, preventing such extraneous content from being displayed, and then alerting monitoring tools that anomalous behavior has been discovered.

Related Controls (3)

SI-3 SI-4 SI-11

CCI Identifiers (3)

CCI-002770Defines the software programs and/or applications from which the system is to validate the information output to ensure the information is consistent with expected content.CCI-002771Validate information output from organization-defined software programs and/or applications to ensure that the information is consistent with the expected content.CCI-002772The organization defines the security safeguards to be implemented to protect the information system's memory from unauthorized code execution.deprecated

Linked STIG Checks (0)

No STIG checks reference this control.