SI-10Information Input Validation

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 27 mapping(s) from 1 framework(s): ASVS 5.0 27 (mostly)

See the full cumulative-coverage rollup →

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (101)

• T1021.002 SMB/Windows Admin Shares Lateral Movement
• T1021.005 VNC Lateral Movement
• T1027.010 Command Obfuscation Stealth
• T1036 Masquerading Stealth
• T1036.005 Match Legitimate Resource Name or Location Stealth
• T1036.008 Masquerade File Type Stealth
• T1048 Exfiltration Over Alternative Protocol Exfiltration
• T1048.001 Exfiltration Over Symmetric Encrypted Non-C2 Protocol Exfiltration
• T1048.002 Exfiltration Over Asymmetric Encrypted Non-C2 Protocol Exfiltration
• T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol Exfiltration
• T1059 Command and Scripting Interpreter Execution
• T1059.001 PowerShell Execution
• T1059.002 AppleScript Execution
• T1059.003 Windows Command Shell Execution
• T1059.004 Unix Shell Execution
• T1059.005 Visual Basic Execution
• T1059.006 Python Execution
• T1059.007 JavaScript Execution
• T1059.008 Network Device CLI Execution
• T1071.004 DNS Command And Control
• T1080 Taint Shared Content Lateral Movement
• T1090 Proxy Command And Control
• T1090.003 Multi-hop Proxy Command And Control
• T1095 Non-Application Layer Protocol Command And Control
• T1127 Trusted Developer Utilities Proxy Execution Stealth, Execution
• T1127.002 ClickOnce Stealth, Execution
• T1129 Shared Modules Execution
• T1176 Software Extensions Persistence
• T1187 Forced Authentication Credential Access
• T1190 Exploit Public-Facing Application Initial Access
• T1197 BITS Jobs Stealth, Persistence, Execution
• T1204 User Execution Execution
• T1204.002 Malicious File Execution
• T1216 System Script Proxy Execution Stealth
• T1216.001 PubPrn Stealth
• T1218 System Binary Proxy Execution Stealth
• T1218.001 Compiled HTML File Stealth
• T1218.002 Control Panel Stealth
• T1218.003 CMSTP Stealth
• T1218.004 InstallUtil Stealth
• T1218.005 Mshta Stealth
• T1218.008 Odbcconf Stealth
• T1218.009 Regsvcs/Regasm Stealth
• T1218.010 Regsvr32 Stealth
• T1218.011 Rundll32 Stealth
• T1218.012 Verclsid Stealth
• T1218.013 Mavinject Stealth
• T1218.014 MMC Stealth
• T1218.015 Electron Applications Stealth
• T1219 Remote Access Tools Command And Control

Weaknesses this control addresses (10)AI

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family SI