Navigate

SC-18(5)

SC-18(5): Allow Execution Only in Confined Environments

Allow execution of permitted mobile code only in confined virtual machine environments.

Supplemental

Permitting the execution of mobile code only in confined virtual machine environments helps prevent the introduction of malicious code into other systems and system components.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
DAF Baseline

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to SC-18(5).

Control	Description
SC-44	Employ a detonation chamber capability within [the system, system component, or location where a detonation chamber capability is to be employed is defined;].
SI-7	a: Employ integrity verification tools to detect unauthorized changes to the following software, firmware, and information: [one of ] ; and b: Take the following actions when unauthorized changes to the software, firmware, and information are detected: [one of ].

Enhancements

The controls below (if any) add on to the requirements of SC-18(5).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SC-18(5).

CCI	Definition
CCI-002461	Allow execution of permitted mobile code only in confined virtual machine environments.