Detections
Analytics
800-53|IA-2(8)
Title
NETWORK ACCESS TO PRIVILEGED ACCOUNTS - REPLAY RESISTANTDescription
The information system implements replay-resistant authentication mechanisms for network access to privileged accounts.Supplemental
Authentication processes resist replay attacks if it is impractical to achieve successful authentications by replaying previous authentication messages. Replay-resistant techniques include, for example, protocols that use nonces or challenges such as Transport Layer Security (TLS) and time synchronous or challenge-response one-time authenticators.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Category: IDENTIFICATION AND AUTHENTICATION
Parent Title: IDENTIFICATION AND AUTHENTICATION (ORGANIZATIONAL USERS)
Family: IDENTIFICATION AND AUTHENTICATION
Baseline Impact: MODERATE,HIGH
Audit Items
View all Reference Audit Items