Navigate

CCI-002499

CCI-002499 Definition

Estimate the maximum bandwidth of the covert storage and timing channels.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if the maximum bandwidth of those channels is estimated.

Validation Procedures

Examine: [SELECT FROM: System and communications protection policy; procedures addressing covert channel analysis; system design documentation; system configuration settings and associated documentation; covert channel analysis documentation; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; organizational personnel with covert channel analysis responsibilities; system developers/integrators]. Test: [SELECT FROM: Organizational process for conducting covert channel analysis; mechanisms supporting and/or implementing covert channel analysis; mechanisms supporting and/or implementing the capability to estimate the bandwidth of covert channels].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002499.

Control	Description
SC-31	a: Perform a covert channel analysis to identify those aspects of communications within the system that are potential avenues for covert [one or more of "storage"/"timing"] channels; and b: Estimate the maximum bandwidth of those channels.