ComplianceNIST 800-53 control
NIST-SC-40 Wireless Link Protection
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SC System and Communications Protection
- Control
- SC-40
- ATT&CK techniques mitigated
- 1
Control statement
Protect external and internal [Assignment: organization-defined wireless links] from the following signal parameter attacks: [Assignment: organization-defined types of signal parameter attacks or references to sources for such attacks].
Discussion
Wireless link protection applies to internal and external wireless communication links that may be visible to individuals who are not authorized system users. Adversaries can exploit the signal parameters of wireless links if such links are not adequately protected. There are many ways to exploit the signal parameters of wireless links to gain intelligence, deny service, or spoof system users. Protection of wireless links reduces the impact of attacks that are unique to wireless systems. If organizations rely on commercial service providers for transmission services as commodity items rather than as fully dedicated services, it may not be possible to implement wireless link protections to the extent necessary to meet organizational security requirements.
ATT&CK mappings (CTID)
• T1557.004 Evil Twin
Related
Mitigates · MITRE ATT&CK (1)
- T1557.004 Evil Twin sub-technique
Related control · Compliance (2)
- NIST-AC-18 Wireless Access NIST 800-53 control
- NIST-SC-5 Denial-of-service Protection NIST 800-53 control
Referenced by Compliance · enhancement of (4)
- NIST-SC-40(1) Electromagnetic Interference NIST 800-53 enhancement
- NIST-SC-40(2) Reduce Detection Potential NIST 800-53 enhancement
- NIST-SC-40(3) Imitative or Manipulative Communications Deception NIST 800-53 enhancement
- NIST-SC-40(4) Signal Parameter Identification NIST 800-53 enhancement
Referenced by Compliance · has member (1)
- NIST-SC System and Communications Protection NIST 800-53 family
Referenced by Compliance · related control (4)
- NIST-AC-18 Wireless Access NIST 800-53 control
- NIST-SC-12 Cryptographic Key Establishment and Management NIST 800-53 control
- NIST-SC-13 Cryptographic Protection NIST 800-53 control
- NIST-SC-5 Denial-of-service Protection NIST 800-53 control