NIST SP 800-53 rev5 · System and Communications Protection
SC-8 Transmission Confidentiality and Integrity
Mitigates 20 ATT&CK techniques, used by 9 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Techniques it mitigates
- T1090Proxy68 users
- T1622Debugger Evasion26 users
- T1040Network Sniffing25 users
- T1550.001Use Alternate Authentication Material: Application Access Token10 users
- T1557Adversary-in-the-Middle8 users
- T1557.001Adversary-in-the-Middle: Name Resolution Poisoning and SMB Relay7 users
- T1090.004Proxy: Domain Fronting5 users
- T1552.007Unsecured Credentials: Container API3 users
- T1557.002Adversary-in-the-Middle: ARP Cache Poisoning2 users
- T1602.002Data from Configuration Repository: Network Device Configuration Dump2 users
- T1020.001Automated Exfiltration: Traffic Duplication1 users
- T1550.004Use Alternate Authentication Material: Web Session Cookie1 users
- T1557.004Adversary-in-the-Middle: Evil Twin1 users
- T1602.001Data from Configuration Repository: SNMP (MIB Dump)1 users
- T1557.003Adversary-in-the-Middle: DHCP Spoofing0 users
- T1562T15620 users
- T1562.006T1562.0060 users
- T1562.009T1562.0090 users
- T1562.010T1562.0100 users
- T1602Data from Configuration Repository0 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.