Skip to main content

Solution design and technology roadmapping

Solution Assessment Technology Roadmaps Integration Design Solution Architecture Technical Design

Security assessments, IAM, and compliance

Assessments IAM Compliance Security Baseline Cyber Innovation

Network and Platform

Network architecture and cloud platforms

Network Design Cloud Strategy Modernisation

Enterprise Architecture

Business-technology alignment

Business Alignment Portfolio Analysis Governance

View all services

Projects Case Studies Insights Tools About

Services

Solution Assessment Technology Roadmaps Integration Design Solution Architecture Technical Design

Assessments IAM Compliance Security Baseline Cyber Innovation

Network and Platform

Network Design Cloud Strategy Modernisation

Enterprise Architecture

Business Alignment Portfolio Analysis Governance

Projects Case Studies Insights Tools About Contact

Strategic technology consulting for Australian organisations navigating complexity.

Services

Architecture
Cyber Security
Network and Platform
Enterprise Architecture

Company

About
Products
Frameworks
Cross-Framework Mapping
Projects
Case Studies
Insights
Contact

Contact

[email protected]
Australia
LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy Policy Terms of Service

Frameworks
SP 800-53
System And Communications Protection
SP800-53-SC-31(1)

SP800-53-SC-31(1)Active

Test Covert Channels for Exploitability

Statement

Test a subset of the identified covert channels to determine the channels that are exploitable.

Location

Control Family: System and Communications Protection

Control Details

Identifier: SP800-53-SC-31(1)
Family: SC
Parent Control: SP800-53-SC-31

Supplemental Guidance

None.

Assessment Objective

a subset of the identified covert channels is tested to determine the channels that are exploitable.

No cross-framework mappings available

← Back to System and Communications Protection

System and Communications Protection162 controls

SP800-53-SC-1Policy and Procedures SP800-53-SC-2Separation of System and User Functionality SP800-53-SC-2(1)Interfaces for Non-privileged Users SP800-53-SC-2(2)Disassociability SP800-53-SC-3Security Function Isolation SP800-53-SC-3(1)Hardware Separation SP800-53-SC-3(2)Access and Flow Control Functions SP800-53-SC-3(3)Minimize Nonsecurity Functionality SP800-53-SC-3(4)Module Coupling and Cohesiveness SP800-53-SC-3(5)Layered Structures SP800-53-SC-4Information in Shared System Resources SP800-53-SC-4(1)Security Levels SP800-53-SC-4(2)Multilevel or Periods Processing SP800-53-SC-5Denial-of-service Protection SP800-53-SC-5(1)Restrict Ability to Attack Other Systems SP800-53-SC-5(2)Capacity, Bandwidth, and Redundancy SP800-53-SC-5(3)Detection and Monitoring SP800-53-SC-6Resource Availability SP800-53-SC-7Boundary Protection SP800-53-SC-7(1)Physically Separated Subnetworks SP800-53-SC-7(2)Public Access SP800-53-SC-7(3)Access Points SP800-53-SC-7(4)External Telecommunications Services SP800-53-SC-7(5)Deny by Default — Allow by Exception SP800-53-SC-7(6)Response to Recognized Failures SP800-53-SC-7(7)Split Tunneling for Remote Devices SP800-53-SC-7(8)Route Traffic to Authenticated Proxy Servers SP800-53-SC-7(9)Restrict Threatening Outgoing Communications Traffic SP800-53-SC-7(10)Prevent Exfiltration SP800-53-SC-7(11)Restrict Incoming Communications Traffic SP800-53-SC-7(12)Host-based Protection SP800-53-SC-7(13)Isolation of Security Tools, Mechanisms, and Support Components SP800-53-SC-7(14)Protect Against Unauthorized Physical Connections SP800-53-SC-7(15)Networked Privileged Accesses SP800-53-SC-7(16)Prevent Discovery of System Components SP800-53-SC-7(17)Automated Enforcement of Protocol Formats SP800-53-SC-7(18)Fail Secure SP800-53-SC-7(19)Block Communication from Non-organizationally Configured Hosts SP800-53-SC-7(20)Dynamic Isolation and Segregation SP800-53-SC-7(21)Isolation of System Components SP800-53-SC-7(22)Separate Subnets for Connecting to Different Security Domains SP800-53-SC-7(23)Disable Sender Feedback on Protocol Validation Failure SP800-53-SC-7(24)Personally Identifiable Information SP800-53-SC-7(25)Unclassified National Security System Connections SP800-53-SC-7(26)Classified National Security System Connections SP800-53-SC-7(27)Unclassified Non-national Security System Connections SP800-53-SC-7(28)Connections to Public Networks SP800-53-SC-7(29)Separate Subnets to Isolate Functions SP800-53-SC-8Transmission Confidentiality and Integrity SP800-53-SC-8(1)Cryptographic Protection SP800-53-SC-8(2)Pre- and Post-transmission Handling SP800-53-SC-8(3)Cryptographic Protection for Message Externals SP800-53-SC-8(4)Conceal or Randomize Communications SP800-53-SC-8(5)Protected Distribution System SP800-53-SC-9Transmission Confidentiality SP800-53-SC-10Network Disconnect SP800-53-SC-11Trusted Path SP800-53-SC-11(1)Irrefutable Communications Path SP800-53-SC-12Cryptographic Key Establishment and Management SP800-53-SC-12(1)Availability SP800-53-SC-12(2)Symmetric Keys SP800-53-SC-12(3)Asymmetric Keys SP800-53-SC-12(4)PKI Certificates SP800-53-SC-12(5)PKI Certificates / Hardware Tokens SP800-53-SC-12(6)Physical Control of Keys SP800-53-SC-13Cryptographic Protection SP800-53-SC-13(1)FIPS-validated Cryptography SP800-53-SC-13(2)NSA-approved Cryptography SP800-53-SC-13(3)Individuals Without Formal Access Approvals SP800-53-SC-13(4)Digital Signatures SP800-53-SC-14Public Access Protections SP800-53-SC-15Collaborative Computing Devices and Applications SP800-53-SC-15(1)Physical or Logical Disconnect SP800-53-SC-15(2)Blocking Inbound and Outbound Communications Traffic SP800-53-SC-15(3)Disabling and Removal in Secure Work Areas SP800-53-SC-15(4)Explicitly Indicate Current Participants SP800-53-SC-16Transmission of Security and Privacy Attributes SP800-53-SC-16(1)Integrity Verification SP800-53-SC-16(2)Anti-spoofing Mechanisms SP800-53-SC-16(3)Cryptographic Binding SP800-53-SC-17Public Key Infrastructure Certificates SP800-53-SC-18Mobile Code SP800-53-SC-18(1)Identify Unacceptable Code and Take Corrective Actions SP800-53-SC-18(2)Acquisition, Development, and Use SP800-53-SC-18(3)Prevent Downloading and Execution SP800-53-SC-18(4)Prevent Automatic Execution SP800-53-SC-18(5)Allow Execution Only in Confined Environments SP800-53-SC-19Voice Over Internet Protocol SP800-53-SC-20Secure Name/Address Resolution Service (Authoritative Source)SP800-53-SC-20(1)Child Subspaces SP800-53-SC-20(2)Data Origin and Integrity SP800-53-SC-21Secure Name/Address Resolution Service (Recursive or Caching Resolver)SP800-53-SC-21(1)Data Origin and Integrity SP800-53-SC-22Architecture and Provisioning for Name/Address Resolution Service SP800-53-SC-23Session Authenticity SP800-53-SC-23(1)Invalidate Session Identifiers at Logout SP800-53-SC-23(2)User-initiated Logouts and Message Displays SP800-53-SC-23(3)Unique System-generated Session Identifiers SP800-53-SC-23(4)Unique Session Identifiers with Randomization SP800-53-SC-23(5)Allowed Certificate Authorities SP800-53-SC-24Fail in Known State SP800-53-SC-25Thin Nodes SP800-53-SC-26Decoys SP800-53-SC-26(1)Detection of Malicious Code SP800-53-SC-27Platform-independent Applications SP800-53-SC-28Protection of Information at Rest SP800-53-SC-28(1)Cryptographic Protection SP800-53-SC-28(2)Offline Storage SP800-53-SC-28(3)Cryptographic Keys SP800-53-SC-29Heterogeneity SP800-53-SC-29(1)Virtualization Techniques SP800-53-SC-30Concealment and Misdirection SP800-53-SC-30(1)Virtualization Techniques SP800-53-SC-30(2)Randomness SP800-53-SC-30(3)Change Processing and Storage Locations SP800-53-SC-30(4)Misleading Information SP800-53-SC-30(5)Concealment of System Components SP800-53-SC-31Covert Channel Analysis SP800-53-SC-31(1)Test Covert Channels for Exploitability SP800-53-SC-31(2)Maximum Bandwidth SP800-53-SC-31(3)Measure Bandwidth in Operational Environments SP800-53-SC-32System Partitioning SP800-53-SC-32(1)Separate Physical Domains for Privileged Functions SP800-53-SC-33Transmission Preparation Integrity SP800-53-SC-34Non-modifiable Executable Programs SP800-53-SC-34(1)No Writable Storage SP800-53-SC-34(2)Integrity Protection on Read-only Media SP800-53-SC-34(3)Hardware-based Protection SP800-53-SC-35External Malicious Code Identification SP800-53-SC-36Distributed Processing and Storage SP800-53-SC-36(1)Polling Techniques SP800-53-SC-36(2)Synchronization SP800-53-SC-37Out-of-band Channels SP800-53-SC-37(1)Ensure Delivery and Transmission SP800-53-SC-38Operations Security SP800-53-SC-39Process Isolation SP800-53-SC-39(1)Hardware Separation SP800-53-SC-39(2)Separate Execution Domain Per Thread SP800-53-SC-40Wireless Link Protection SP800-53-SC-40(1)Electromagnetic Interference SP800-53-SC-40(2)Reduce Detection Potential SP800-53-SC-40(3)Imitative or Manipulative Communications Deception SP800-53-SC-40(4)Signal Parameter Identification SP800-53-SC-41Port and I/O Device Access SP800-53-SC-42Sensor Capability and Data SP800-53-SC-42(1)Reporting to Authorized Individuals or Roles SP800-53-SC-42(2)Authorized Use SP800-53-SC-42(3)Prohibit Use of Devices SP800-53-SC-42(4)Notice of Collection SP800-53-SC-42(5)Collection Minimization SP800-53-SC-43Usage Restrictions SP800-53-SC-44Detonation Chambers SP800-53-SC-45System Time Synchronization SP800-53-SC-45(1)Synchronization with Authoritative Time Source SP800-53-SC-45(2)Secondary Authoritative Time Source SP800-53-SC-46Cross Domain Policy Enforcement SP800-53-SC-47Alternate Communications Paths SP800-53-SC-48Sensor Relocation SP800-53-SC-48(1)Dynamic Relocation of Sensors or Monitoring Capabilities SP800-53-SC-49Hardware-enforced Separation and Policy Enforcement SP800-53-SC-50Software-enforced Separation and Policy Enforcement SP800-53-SC-51Hardware-based Protection