I - Mission Critical Sensitive

SRG-NET-000318

To protect against unauthorized data mining, the IDPS must prevent code injection attacks launched against data storage objects, including, at a minimum, databases, database records, queries, and fields.

SRG-NET-000318

To protect against unauthorized data mining, the IDPS must prevent code injection attacks launched against application objects including, at a minimum, application URLs and application code.

SRG-NET-000318

To protect against unauthorized data mining, the IDPS must prevent SQL injection attacks launched against data storage objects, including, at a minimum, databases, database records, and database fields.

SRG-NET-000319

To protect against unauthorized data mining, the IDPS must detect code injection attacks launched against data storage objects, including, at a minimum, databases, database records, queries, and fields.

SRG-NET-000319

To protect against unauthorized data mining, the IDPS must detect code injection attacks launched against application objects including, at a minimum, application URLs and application code.

SRG-NET-000319

To protect against unauthorized data mining, the IDPS must detect SQL injection attacks launched against data storage objects, including, at a minimum, databases, database records, and database fields.

SRG-NET-000334

The IDPS must off-load log records to a centralized log server.

SRG-NET-000335

The IDPS must provide an alert to, at a minimum, the system administrator and ISSO when any audit failure events occur.

SRG-NET-000335

The IDPS must assign a critical severity level to all audit processing failures.

SRG-NET-000362

The IDPS must protect against or limit the effects of known and unknown types of Denial of Service (DoS) attacks by employing rate-based attack prevention behavior analysis.