Download simp-4.2.- PDF - Read the Docs

SIMP Documentation, Release 0-0
Control ID
Table 4.3 – continued from previous page
Control Name
Control Family
SC-24
Fail in Known State
System and Communications Protection
SC-25
Thin Nodes
SC-26
Honeypots
SC-26(1)
Honeypots (Control Enhancement)
Operating
SystemIndependent Applications
Protection of Information at
Rest
System and Communications Protection
System and Communications Protection
System and Communications Protection
System and Communications Protection
System and Communications Protection
SC-27
SC-28
SC-28
SC-29
Protection of Information
at Rest (Control Enhancement)
Heterogeneity
SC-30
Virtualization Techniques
SC-30(1)
Virtualization Techniques
(Control Enhancement)
Virtualization Techniques
(Control Enhancement)
Covert Channel Analysis
SC-30(2)
SC-31
SC-31(1)
SC-32
SC-33
Covert Channel Analysis
(Control Enhancement)
Information System Partitioning
Transmission Preparation
Integrity
SIMP
Implementation
Method
The forms of cryptography
used are applied through
SSH, SSL, and TLS. There
are several unencrypted
protocols used on the puppet server (Apache/YUM,
DHCPD, TFTP, and DNS)
that are documented in
the Security Concepts
document.
Confidentiality of data
at rest is achieved using
the operating system access control. Integrity is
only checked for critical
operating system files.
Implementations have the
ability to extend the integrity checking of AIDE to
include additional files that
are not frequently changed.
System and Communications Protection
System and Communications Protection
System and Communications Protection
System and Communications Protection
System and Communications Protection
System and Communications Protection
System and Communications Protection
System and Communications Protection
System and Communications Protection
Continued on next page
162
Chapter 4. SIMP Security Concepts