UCF STIG Viewer Logo

The network device must automatically update malicious code protection mechanisms and rule definitions.


Overview

Finding ID Version Rule ID IA Controls Severity
SRG-NET-000251-NDM-NA SRG-NET-000251-NDM-NA SRG-NET-000251-NDM-NA_rule Medium
Description
Malicious code includes viruses, worms, Trojan horses, and spyware. It can be transported by electronic mail, mail attachments, web accesses, removable media, or other common means. Malicious mobile code is a vehicle to remotely install malware on a computer. This type of code can be transmitted through interactive web applications, such as ActiveX controls, Flash animation, or JavaScript. The code provides the ability for a malicious user to read from and write to files and folders on a computer's hard drive. It also has the ability to run and attach programs, which provides a high risk potential for the distribution of malicious mobile code. The black hats and malicious code writers continuously find new methods to attack hosts and the network infrastructure. It is imperative that new protection mechanisms developed to mitigate their risks be installed as quickly as possible. This control is applicable to protection of the device itself or network monitoring for malicious code attacks. These functions are not core functions of network device management.
STIG Date
Network Device Management Security Requirements Guide 2013-07-30

Details

Check Text ( C-SRG-NET-000251-NDM-NA_chk )
This requirement is NA for network device management.
Fix Text (F-SRG-NET-000251-NDM-NA_fix)
This requirement is NA for network device management.