Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The API must authenticate remote commands.
Description
Discussion Text
Authentication safeguards for remote commands help to ensure that information systems accept and execute, in the order intended, only authorized commands and reject unauthorized commands.
Cryptographic mechanisms can be employed, for example, to authenticate remote commands. Safeguards include, at a minimum, FIPS-compliant cryptographic hash.
Standard API authentication protocols provide this protection (e.g., Oauth 2.0, JWT).
Cryptographic mechanisms can be employed, for example, to authenticate remote commands. Safeguards include, at a minimum, FIPS-compliant cryptographic hash.
Standard API authentication protocols provide this protection (e.g., Oauth 2.0, JWT).
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.