Detections
Analytics
800-53|SC-44
Title
DETONATION CHAMBERSDescription
The organization employs a detonation chamber capability within [Assignment: organization-defined information system, system component, or location].Supplemental
Detonation chambers, also known as dynamic execution environments, allow organizations to open email attachments, execute untrusted or suspicious applications, and execute Universal Resource Locator (URL) requests in the safety of an isolated environment or virtualized sandbox. These protected and isolated execution environments provide a means of determining whether the associated attachments/applications contain malicious code. While related to the concept of deception nets, the control is not intended to maintain a long-term environment in which adversaries can operate and their actions can be observed. Rather, it is intended to quickly identify malicious code and reduce the likelihood that the code is propagated to user environments of operation (or prevent such propagation completely).Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: SC-25,SC-26,SC-30,SC-7
Category: SYSTEM AND COMMUNICATIONS PROTECTION
Family: SYSTEM AND COMMUNICATIONS PROTECTION
Priority: P0
Audit Items
View all Reference Audit Items