Control Strategy ChipAndPinAccessControlAtHost

URI: CSG-ChipAndPinAccessControlAtHost

Package: Network

< prev | next >

Description: Access to device Host is controlled, by authenticating authorised users using a 2-factor system involving possession of a physical key or dongle, such as a chip and PIN card.

        (empty)

CSG-ChipAndPinAccessControlAtHost
H.M.CHS.3.1

Console access to unprotected admin account on host Host in Space: an attacker with access to the physical space Space where the device is located uses console access to get root access via an unprotected admin account.
CSG-ChipAndPinAccessControlAtHost
H.M.HumCHS-iP.3.2

Unauthorised console access to an admin account on host Host in Space: an attacker with physical access to device Host in location Space exploits lax password security by user Human to gain root privileges via the console.
CSG-ChipAndPinAccessControlAtHost
P.L.HuiPCHS.3.1

Console access to unprotected account running Process on device Host in Space: an attacker with access to the physical space Space where the device is located uses console access to get access via an unprotected user account with the rights of process Process.
CSG-ChipAndPinAccessControlAtHost
P.L.HuiPCHS-iP.3.2

Unauthorised console access to interactive process Process on device Host in Space: an attacker with physical access to device Host in location Space exploits lax password security by user Human to interact via the console with process Process.
CSG-ChipAndPinAccessControlAtHost
H.M.CH.2.1

Console access to unprotected admin account on stolen device Host: an attacker with possession of device Host exploits an unprotected admin account via the console.
CSG-ChipAndPinAccessControlAtHost
H.M.HumCH.2.2

Console access to weakly protected admin account on stolen device Host: an attacker with possession of device Host exploits exploits lax password security by user Human to access an admin account via the console.
CSG-ChipAndPinAccessControlAtHost
P.L.HuiPCH.2.1

Console access to unprotected account of Human on stolen device Host: an attacker with possession of device Host uses console access to an unprotected user account and gains access to processes running under that account.
CSG-ChipAndPinAccessControlAtHost
P.L.HuiPCH.2.2

Console access to weakly protected account of Human on stolen device Host: an attacker with possession of device Host exploits lax password security by user Human to access processes running under their account.