Failure to detect attacks launched against organizational databases may result. To protect against data mining, the ALG providing content filtering must detect code injection attacks from being launched against data storage objects, including, at a minimum, databases, database records, queries, and fields.ĭata mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering. The ALG providing content filtering must generate an alert to, at a minimum, the ISSO and ISSM when threats identified by authoritative sources (e.g., IAVMs or CTOs) are detected. Output from application and traffic monitoring serves as input to continuous. If inbound communications traffic is not continuously monitored, hostile activity may not be detected and prevented.

The ALG providing content filtering must continuously monitor inbound communications traffic crossing internal security boundaries for unusual or unauthorized activities or conditions. Unauthorized or unapproved network services lack organizational verification or validation and therefore, may be unreliable or serve as malicious rogues for valid services.

The ALG providing content filtering must generate an alert to, at a minimum, the ISSO and ISSM when unauthorized network services are detected.

Without an alert, security personnel may be unaware of major detection incidents that require immediate action and this delay may result in the loss or compromise of information. The ALG providing content filtering must send an alert to, at a minimum, the ISSO and ISSM when detection events occur. If outbound communications traffic is not continuously monitored, hostile activity may not be detected and prevented. The ALG providing content filtering must continuously monitor outbound communications traffic crossing internal security boundaries for unusual/unauthorized activities or conditions. Findings (MAC III - Administrative Sensitive) Finding ID

Application level gateway