SC-23Session Authenticity

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (20)

• T1071 Application Layer Protocol Command And Control
• T1071.001 Web Protocols Command And Control
• T1071.002 File Transfer Protocols Command And Control
• T1071.003 Mail Protocols Command And Control
• T1071.004 DNS Command And Control
• T1185 Browser Session Hijacking Collection
• T1535 Unused/Unsupported Cloud Regions Stealth
• T1550.004 Web Session Cookie Lateral Movement
• T1557 Adversary-in-the-Middle Credential Access, Collection
• T1557.001 Name Resolution Poisoning and SMB Relay Credential Access, Collection
• T1557.002 ARP Cache Poisoning Credential Access, Collection
• T1557.003 DHCP Spoofing Credential Access, Collection
• T1557.004 Evil Twin Credential Access, Collection
• T1563.001 SSH Hijacking Lateral Movement
• T1573 Encrypted Channel Command And Control
• T1573.001 Symmetric Cryptography Command And Control
• T1573.002 Asymmetric Cryptography Command And Control
• T1622 Debugger Evasion Stealth, Discovery
• T1685 Disable or Modify Tools Defense Impairment
• T1688 Safe Mode Boot Defense Impairment

Weaknesses this control addresses (8)AI

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family SC