Control Strategy DisableNetworkConnection

URI: CSG-DisableNetworkConnection

Package: NetworkConnectivity

< prev | next >

Description: Signifies that device Host will not connect to subnet LogicalSubnet even though such a connection is implied by the system model. This strategy does not represent a contingency plan, but a permanent restriction introduced by design or in accordance with an operational policy or user preference. It also triggers threats representing side effects that would be caused by such a restriction. The most common situation where a connection is possible but is not used is where a mobile device connects to a cellular network which could be done in any location, but the user will avoid it in some locations.

Blocked Threats (1)

I.IS.I.8

Access from Host to LogicalSubnet enabled: if Host is in service, then it will connect to LogicalSubnet by default, unless the connection is disabled.

Triggers Threats (3)

I.A.I.6.1

Disabled network connection from Host to LogicalSubnet is not available: if host Host does not in fact connect to subnet LogicalSubnet then that connection will be unavailable.

I.IS.INC.1

Access from Host to LogicalSubnet not disabled: if an attacker has admin rights on device Host when in range of LogicalSubnet, they can override a policy to avoid connecting to subnet LogicalSubnet.

I.IS.INC.2

Access from stolen host Host to LogicalSubnet re-enabled: if an attacker gains access to stolen device Host, they can override a policy not to connect it to subnet LogicalSubnet.