ComplianceNIST 800-53 enhancement
NIST-SC-23(1) Invalidate Session Identifiers at Logout
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SC System and Communications Protection
- Control
- SC-23(1)
Control statement
Invalidate session identifiers upon user logout or other session termination.
Discussion
Invalidating session identifiers at logout curtails the ability of adversaries to capture and continue to employ previously valid session IDs.
Related
Enhancement of · Compliance (1)
- NIST-SC-23 Session Authenticity NIST 800-53 control