Detections
Analytics

1.205 SOL-11.1-090120

Information

The operating system must prevent non-privileged users from circumventing malicious code protection capabilities.

GROUP ID: V-224670RULE ID: SV-224670r958726

In order to minimize potential negative impact to the organization caused by malicious code, it is imperative that malicious code is identified and eradicated prior to entering protected enclaves via operating system entry and exit points.

The requirement states that AV and malware protection applications must be used at entry and exit points. For the operating system, this means an anti-virus application must be installed on machines that are the entry and exit points.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

The operator will ensure that anti-virus software is installed and operating.

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CAT|II, CCI|CCI-002235, Rule-ID|SV-224670r958726_rule, STIG-ID|SOL-11.1-090120, Vuln-ID|V-224670

Plugin: Unix

Control ID: 4575cb7f94097a099f6e85c890cae7187dfd42075df94aa2197e415a5f3d0254