Title

The ALG that is part of a CDS must uniquely identify and authenticate destination by organization, system, application, and/or individual for information transfer. (Cat II impact)

Discussion

Attribution is a critical component of a security concept of operations. The ability to identify source and destination points for information flowing in information systems, allows the forensic reconstruction of events when required, and encourages policy compliance by attributing policy violations to specific organizations/individuals. Successful domain authentication requires that information system labels distinguish among systems, organizations, and individuals involved in preparing, sending, receiving, or disseminating information.

Check Content

If the ALG is not part of a CDS, this is not applicable. Verify the ALG uniquely identifies and authenticates destination by organization, system, application, and/or individual for information transfer. If the ALG is not configured to uniquely identify and authenticate destination by organization, system, application, and/or individual for information transfer, this is a finding.

Fix Text

If the ALG is part of a CDS, configure the ALG to uniquely identify and authenticate destination by organization, system, application, and/or individual for information transfer.

Additional Identifiers

Rule ID: SV-204989r987754_rule

Vulnerability ID: V-204989

Group Title: SRG-NET-000326

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.