SRG-OS-000012 |
CCI-000028 |
The operating system must prevent encrypted
data from bypassing content checking mechanisms. |
Information flow control regulates where
information is allowed to travel within an information
system and between information systems (as opposed to who is
allowed to access the information) and without explicit
regard to subsequent accesses to the information. When
data is encrypted, mechanisms designed to examine data
content to detect attacks or malicious code are unable to
accomplish this task unless they are capable of
unencrypting the data. |