NIST SP 800-53 rev5 · System and Communications Protection
SC-20 Secure Name/Address Resolution Service (Authoritative Source)
Mitigates 14 ATT&CK techniques, used by 11 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Weaknesses it helps against
Through the techniques typically used to exploit them (CTID, CISA KEV).
- CWE-6932 techniquesProtection Mechanism FailureA security feature exists but can be bypassed or doesn't engage when it should.
- CWE-792 techniquesImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Input is echoed into a web page as script, running in other users' browsers with their session.
- CWE-201 techniquesImproper Input ValidationInput isn't checked against what the program expects; the umbrella cause behind many specific flaws.
- CWE-3461 techniquesOrigin Validation ErrorThe software doesn't verify where a message really came from, so forged messages are trusted.
- CWE-4161 techniquesUse After FreeThe program keeps using memory after releasing it, so an attacker who controls what lands there next can hijack execution.
- CWE-8431 techniquesAccess of Resource Using Incompatible Type ('Type Confusion')An object is treated as the wrong type; a favourite in browser and JavaScript-engine exploits.
- CWE-9181 techniquesServer-Side Request Forgery (SSRF)The server can be made to fetch a URL of the attacker's choosing, often internal services or cloud metadata.
Techniques it mitigates
- T1071.001Application Layer Protocol: Web Protocols410 users
- T1566.001Phishing: Spearphishing Attachment141 users
- T1566.002Phishing: Spearphishing Link80 users
- T1071.004Application Layer Protocol: DNS55 users
- T1071.002Application Layer Protocol: File Transfer Protocols26 users
- T1071.003Application Layer Protocol: Mail Protocols26 users
- T1568.002Dynamic Resolution: Domain Generation Algorithms24 users
- T1598.003Phishing for Information: Spearphishing Link19 users
- T1568Dynamic Resolution18 users
- T1071Application Layer Protocol16 users
- T1566Phishing11 users
- T1598Phishing for Information6 users
- T1553.004Subvert Trust Controls: Install Root Certificate5 users
- T1598.002Phishing for Information: Spearphishing Attachment4 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.