NIST Special Publication 800-53 Revision 4
IDNameBaselinesPriorityThreats
LowModerateHigh
SA-11(6)Attack Surface Reviews   
  • P1
STRIDE-LM
SA-12(9)Operations Security   
  • P1
STRIDE-LM
SA-15(4)Threat Modeling / Vulnerability Analysis   
  • P2
STRIDE-LM
(7)Automated Vulnerability Analysis   
  • P2
STRIDE-LM
(9)Use Of Live Data   
  • P2
STRIDE-LM
SA-17Developer Security Architecture And Design  •
  • P1
STRIDE-LM
SA-19(3)Component Disposal   
  • P0
STRIDE-LM
SC-3(2)Access / Flow Control Functions   
  • P1
STRIDE-LM
SC-4Information In Shared Resources ••
  • P1
STRIDE-LM
SC-7(4)External Telecommunications Services ••
  • P1
STRIDE-LM
(7)Prevent Split Tunneling For Remote Devices ••
  • P1
STRIDE-LM
(9)Restrict Threatening Outgoing Communications Traffic   
  • P1
STRIDE-LM
(10)Prevent Unauthorized Exfiltration   
  • P1
STRIDE-LM
(23)Disable Sender Feedback On Protocol Validation Failure   
  • P1
STRIDE-LM
SC-8Transmission Confidentiality And Integrity ••
  • P1
STRIDE-LM
(1)Cryptographic Or Alternate Physical Protection ••
  • P1
STRIDE-LM
(2)Pre / Post Transmission Handling   
  • P1
STRIDE-LM
(4)Conceal / Randomize Communications   
  • P1
STRIDE-LM
SC-11(1)Logical Isolation   
  • P0
STRIDE-LM
SC-12Cryptographic Key Establishment And Management•••
  • P1
STRIDE-LM
(2)Symmetric Keys   
  • P1
STRIDE-LM
SC-13Cryptographic Protection•••
  • P1
STRIDE-LM
SC-15Collaborative Computing Devices•••
  • P1
STRIDE-LM
(1)Physical Disconnect   
  • P1
STRIDE-LM
(3)Disabling / Removal In Secure Work Areas   
  • P1
STRIDE-LM
SC-28Protection Of Information At Rest ••
  • P1
STRIDE-LM
(1)Cryptographic Protection   
  • P1
STRIDE-LM
(2)Off-Line Storage   
  • P1
STRIDE-LM
SC-31Covert Channel Analysis   
  • P0
STRIDE-LM
(1)Test Covert Channels For Exploitability   
  • P0
STRIDE-LM
SC-38Operations Security   
  • P0
STRIDE-LM
SC-39Process Isolation•••
  • P1
STRIDE-LM
(1)Hardware Separation   
  • P1
STRIDE-LM
(2)Thread Isolation   
  • P1
STRIDE-LM
SC-40Wireless Link Protection   
  • P0
STRIDE-LM
SC-42(3)Prohibit Use Of Devices   
  • P0
STRIDE-LM
SI-4(11)Analyze Communications Traffic Anomalies   
  • P1
STRIDE-LM
(18)Analyze Traffic / Covert Exfiltration   
  • P1
STRIDE-LM
(19)Individuals Posing Greater Risk   
  • P1
STRIDE-LM
SI-11Error Handling ••
  • P2
STRIDE-LM
SI-12Information Handling And Retention•••
  • P2
STRIDE-LM
SI-15Information Output Filtering   
  • P0
STRIDE-LM