IA-2(8)
IA-2(8): Access to Accounts — Replay Resistant
Implement replay-resistant authentication mechanisms for access to [one or more of "privileged accounts"/"non-privileged accounts"].
Supplemental
Authentication processes resist replay attacks if it is impractical to achieve successful authentications by replaying previous authentication messages. Replay-resistant techniques include protocols that use nonces or challenges such as time synchronous or cryptographic authenticators.
| CIA Levels | |
|---|---|
| Confidentiality | low |
| Integrity | low |
| Availability | unknown |
| Overlays |
|---|
| CMMC, DAF Baseline |
| CSF Categories |
|---|
| None |