SI-16 Memory Protection
System and Information Integrity
Description
Implement the following controls to protect the system memory from unauthorized code execution: [Assignment: organization-defined controls].
Supplemental Guidance
Some adversaries launch attacks with the intent of executing code in non-executable regions of memory or in memory locations that are prohibited. Controls employed to protect memory include data execution prevention and address space layout randomization. Data execution prevention controls can either be hardware-enforced or software-enforced with hardware enforcement providing the greater strength of mechanism.
Changes from Rev 4
No significant title changes from Rev 4.
MITRE ATT&CK Techniques (36)
ATT&CK v20.0Techniques this control mitigates in the CTID mapping of SP 800-53, made for ATT&CK 16.1 and carried to v20.0. See them all in the ATT&CK matrix.