Use of isolation methods in running applications
Summary​
Applications should run isolated from other applications (using sandboxing, jails, containers, etc).
Description​
These mechanisms provide controlled environments in which applications can operate, limiting their access to system resources and interactions with other applications. When these isolation methods are implemented, compromised or malicious applications are less likely to affect the overall system.
Supported In​
This requirement is verified in following services
| Plan | Supported |
|---|---|
| Essential | 🔴 |
| Advanced | 🟢 |
References​
- CAPECâ„¢-124. Shared resource manipulation
- OWASP-M TOP 10-M8. Code tampering
- Agile Alliance-11. Best architectures, requirements, and designs
- MISRA-C-2_1. Assembly language shall be encapsulated and isolated
- HITRUST CSF-01_w. Sensitive system isolation
- HITRUST CSF-09_d. Separation of development, test and operational environments
- ISO/IEC 27002-8_7. Protection against malware
- ISO/IEC 27002-8_26. Application security requirements
- NIST SSDF-PO_5_1. Implement and maintain secure environments for software development
- ISSAF-S_5_7. Web server security - Countermeasures (Compartmentalize web server process)
- OWASP SCP-10. System configuration
- BSAFSS-SC_4-1. Secure Coding (software architecture and design)
- OWASP ASVS-1_14_5. Configuration architecture
- OWASP ASVS-14_2_6. Dependency
- C2M2-9_2_l. Implement network protections for cybersecurity architecture
- SIG Lite-SL_88. Is development, test, and staging environment separate from the production environment?
- OWASP ASVS-5_2_8. Sanitization and sandboxing
- PA-DSS-8_1. Secure network environment
- ISO/IEC 27001-8_7. Protection against malware
- ISO/IEC 27001-8_26. Application security requirements
- CASA-1_14_5. Configuration Architecture
Vulnerabilities​
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.