IA-9Service Identification and Authentication

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 6 mapping(s) from 2 framework(s): ASVS 5.0 4 (partial) · CSF 2.0 2 (mostly)

See the full cumulative-coverage rollup →

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (22)

• T1036 Masquerading Stealth
• T1036.001 Invalid Code Signature Stealth
• T1036.005 Match Legitimate Resource Name or Location Stealth
• T1059 Command and Scripting Interpreter Execution
• T1059.001 PowerShell Execution
• T1059.002 AppleScript Execution
• T1213.003 Code Repositories Collection
• T1525 Implant Internal Image Persistence
• T1546 Event Triggered Execution Privilege Escalation, Persistence
• T1546.006 LC_LOAD_DYLIB Addition Privilege Escalation, Persistence
• T1546.013 PowerShell Profile Privilege Escalation, Persistence
• T1553 Subvert Trust Controls Defense Impairment
• T1553.004 Install Root Certificate Defense Impairment
• T1554 Compromise Host Software Binary Persistence
• T1566 Phishing Initial Access
• T1566.001 Spearphishing Attachment Initial Access
• T1566.002 Spearphishing Link Initial Access
• T1598 Phishing for Information Reconnaissance
• T1598.002 Spearphishing Attachment Reconnaissance
• T1598.003 Spearphishing Link Reconnaissance
• T1685 Disable or Modify Tools Defense Impairment
• T1688 Safe Mode Boot Defense Impairment

Weaknesses this control addresses (5)AI

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family IA