Navigate

SI-16

SI-16: Memory Protection

The information system implements [Assignment: organization-defined security safeguards] to protect its memory from unauthorized code execution.

Supplemental

Some adversaries launch attacks with the intent of executing code in non-executable regions of memory or in memory locations that are prohibited. Security safeguards employed to protect memory include, for example, data execution prevention and address space layout randomization. Data execution prevention safeguards can either be hardware-enforced or software-enforced with hardware providing the greater strength of mechanism.

CIA Levels
Confidentiality	unknown
Integrity	moderate
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to SI-16.

Control	Description
AC-25	The information system implements a reference monitor for [Assignment: organization-defined access control policies] that is tamperproof, always invoked, and small enough to be subject to analysis and testing, the completeness of which can be assured.
SC-3	The information system isolates security functions from nonsecurity functions.

Enhancements

The controls below (if any) add on to the requirements of SI-16.

Control	Description
No controls

Related CCIs

The CCIs below are tied to SI-16.

CCI	Definition
CCI-002823	The organization defines the security safeguards to be implemented to protect the information system^s memory from unauthorized code execution.
CCI-002824	The information system implements organization-defined security safeguards to protect its memory from unauthorized code execution.