id: "SC-07(17)" title: "Automated Enforcement of Protocol Formats" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-07.17" priority: "P1" implementation_level: "system" parent: "SC-07" enhancement: True
Statement
Enforce adherence to protocol formats.
Guidance
System components that enforce protocol formats include deep packet inspection firewalls and XML gateways. The components verify adherence to protocol formats and specifications at the application layer and identify vulnerabilities that cannot be detected by devices operating at the network or transport layers.
Assessment Objective
adherence to protocol formats is enforced.
System and communications protection policy
procedures addressing boundary protection
system design documentation
system architecture
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
system developer
organizational personnel with boundary protection responsibilities
Mechanisms supporting and/or implementing the enforcement of adherence to protocol formats