ComplianceNIST 800-53 control

NIST-AC-18 Wireless Access

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AC Access Control
Control
AC-18
ATT&CK techniques mitigated
25

Control statement

a. Establish configuration requirements, connection requirements, and implementation guidance for each type of wireless access; and b. Authorize each type of wireless access to the system prior to allowing such connections.

Discussion

Wireless technologies include microwave, packet radio (ultra-high frequency or very high frequency), 802.11x, and Bluetooth. Wireless networks use authentication protocols that provide authenticator protection and mutual authentication.

ATT&CK mappings (CTID)

• T1011 Exfiltration Over Other Network Medium • T1011.001 Exfiltration Over Bluetooth • T1020.001 Traffic Duplication • T1040 Network Sniffing • T1070 Indicator Removal • T1070.001 Clear Windows Event Logs • T1070.002 Clear Linux or Mac System Logs • T1070.008 Clear Mailbox Data • T1119 Automated Collection • T1530 Data from Cloud Storage • T1552 Unsecured Credentials • T1552.004 Private Keys • T1557 Adversary-in-the-Middle • T1557.002 ARP Cache Poisoning • T1557.004 Evil Twin • T1558 Steal or Forge Kerberos Tickets • T1558.002 Silver Ticket • T1558.003 Kerberoasting • T1558.004 AS-REP Roasting • T1565 Data Manipulation • T1565.001 Stored Data Manipulation • T1565.002 Transmitted Data Manipulation • T1602 Data from Configuration Repository • T1602.001 SNMP (MIB Dump) • T1602.002 Network Device Configuration Dump

Related

Mitigates · not in database (2)

Mitigates · MITRE ATT&CK (23)

  • T1557.004 Evil Twin sub-technique
  • T1070.008 Clear Mailbox Data sub-technique
  • T1602.002 Network Device Configuration Dump sub-technique
  • T1020.001 Traffic Duplication sub-technique
  • T1602 Data from Configuration Repository technique
  • T1602.001 SNMP (MIB Dump) sub-technique
  • T1557.002 ARP Cache Poisoning sub-technique
  • T1558.004 AS-REP Roasting sub-technique
  • T1011.001 Exfiltration Over Bluetooth sub-technique
  • T1565 Data Manipulation technique
  • T1565.001 Stored Data Manipulation sub-technique
  • T1565.002 Transmitted Data Manipulation sub-technique
  • T1557 Adversary-in-the-Middle technique
  • T1558 Steal or Forge Kerberos Tickets technique
  • T1558.002 Silver Ticket sub-technique
  • T1558.003 Kerberoasting sub-technique
  • T1552 Unsecured Credentials technique
  • T1552.004 Private Keys sub-technique
  • T1530 Data from Cloud Storage technique
  • T1011 Exfiltration Over Other Network Medium technique
  • T1040 Network Sniffing technique
  • T1070 Indicator Removal technique
  • T1119 Automated Collection technique

Related control · Compliance (13)

  • NIST-AC-17 Remote Access NIST 800-53 control
  • NIST-AC-19 Access Control for Mobile Devices NIST 800-53 control
  • NIST-AC-2 Account Management NIST 800-53 control
  • NIST-AC-3 Access Enforcement NIST 800-53 control
  • NIST-CA-9 Internal System Connections NIST 800-53 control
  • NIST-CM-7 Least Functionality NIST 800-53 control
  • NIST-IA-2 Identification and Authentication (Organizational Users) NIST 800-53 control
  • NIST-IA-3 Device Identification and Authentication NIST 800-53 control
  • NIST-IA-8 Identification and Authentication (Non-organizational Users) NIST 800-53 control
  • NIST-PL-4 Rules of Behavior NIST 800-53 control
  • NIST-SC-40 Wireless Link Protection NIST 800-53 control
  • NIST-SC-43 Usage Restrictions NIST 800-53 control
  • NIST-SI-4 System Monitoring NIST 800-53 control

Referenced by Compliance · enhancement of (4)

  • NIST-AC-18(1) Authentication and Encryption NIST 800-53 enhancement
  • NIST-AC-18(3) Disable Wireless Networking NIST 800-53 enhancement
  • NIST-AC-18(4) Restrict Configurations by Users NIST 800-53 enhancement
  • NIST-AC-18(5) Antennas and Transmission Power Levels NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-AC Access Control NIST 800-53 family

Referenced by Compliance · related control (27)

  • NIST-AC-17 Remote Access NIST 800-53 control
  • NIST-AC-19 Access Control for Mobile Devices NIST 800-53 control
  • NIST-AC-2 Account Management NIST 800-53 control
  • NIST-AC-3 Access Enforcement NIST 800-53 control
  • NIST-AC-6(1) Authorize Access to Security Functions NIST 800-53 enhancement
  • NIST-AC-6(2) Non-privileged Access for Nonsecurity Functions NIST 800-53 enhancement
  • NIST-AC-6(3) Network Access to Privileged Commands NIST 800-53 enhancement
  • NIST-AC-6(6) Privileged Access by Non-organizational Users NIST 800-53 enhancement
  • NIST-CA-9 Internal System Connections NIST 800-53 control
  • NIST-CM-7(1) Periodic Review NIST 800-53 enhancement
  • NIST-IA-2 Identification and Authentication (Organizational Users) NIST 800-53 control
  • NIST-IA-3 Device Identification and Authentication NIST 800-53 control
  • NIST-IA-8 Identification and Authentication (Non-organizational Users) NIST 800-53 control
  • NIST-PE-17 Alternate Work Site NIST 800-53 control
  • NIST-PE-19 Information Leakage NIST 800-53 control
  • NIST-PL-4 Rules of Behavior NIST 800-53 control
  • NIST-SC-13 Cryptographic Protection NIST 800-53 control
  • NIST-SC-40 Wireless Link Protection NIST 800-53 control
  • NIST-SC-43 Usage Restrictions NIST 800-53 control
  • NIST-SC-7 Boundary Protection NIST 800-53 control
  • NIST-SC-8 Transmission Confidentiality and Integrity NIST 800-53 control
  • NIST-SI-4(14) Wireless Intrusion Detection NIST 800-53 enhancement
  • NIST-SI-4(15) Wireless to Wireline Communications NIST 800-53 enhancement
  • NIST-SI-4(20) Privileged Users NIST 800-53 enhancement
  • NIST-SI-4(21) Probationary Periods NIST 800-53 enhancement
  • NIST-SI-4(23) Host-based Devices NIST 800-53 enhancement
  • NIST-SI-4(24) Indicators of Compromise NIST 800-53 enhancement