Detections
Analytics
800-53|SC-39
Title
PROCESS ISOLATIONDescription
The information system maintains a separate execution domain for each executing process.Supplemental
Information systems can maintain separate execution domains for each executing process by assigning each process a separate address space. Each information system process has a distinct address space so that communication between processes is performed in a manner controlled through the security functions, and one process cannot modify the executing code of another process. Maintaining separate execution domains for executing processes can be achieved, for example, by implementing separate address spaces. This capability is available in most commercial operating systems that employ multi-state processor technologies.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: AC-3,AC-4,AC-6,SA-4,SA-5,SA-8,SC-2,SC-3
Category: SYSTEM AND COMMUNICATIONS PROTECTION
Family: SYSTEM AND COMMUNICATIONS PROTECTION
Priority: P1
Baseline Impact: LOW,MODERATE,HIGH
Audit Items
View all Reference Audit Items