SI-16

System and Information IntegrityRev 5system

Memory Protection

Baselines:ModerateHigh

Control Statement

Implement the following controls to protect the system memory from unauthorized code execution: [Assignment: controls].

Supplemental Guidance

Some adversaries launch attacks with the intent of executing code in non-executable regions of memory or in memory locations that are prohibited. Controls employed to protect memory include data execution prevention and address space layout randomization. Data execution prevention controls can either be hardware-enforced or software-enforced with hardware enforcement providing the greater strength of mechanism.

Related Controls (3)

AC-25 SC-3 SI-7

CCI Identifiers (2)

CCI-002823Defines the controls to be implemented to protect the system memory from unauthorized code execution.CCI-002824Implement organization-defined controls to protect the system memory from unauthorized code execution.

Linked STIG Checks (90)

Across 43 STIGs. Click to expand.