Control Strategy DisableTethering

URI: CSG-DisableTethering

Package: LocalDeviceConnectivity

< prev | next >

Description: Tethering (or reverse tethering) is disabled between device Host and IP subnet LogicalSubnet via the USB/Bluetooth connection with device Gateway, so cannot be used by attackers. This strategy does not represent a contingency plan, but a permanent restriction introduced by design or in accordance with an operational policy or user preference. It also triggers threats representing side effects that would be caused by such a restriction. The default configuration for most devices is for tethering disabled, but the model must assume it is enabled unless controls are selected to signify otherwise, or potential threats may be overlooked.

Blocked Threats (2)

Sg.TA.LTethSg2.8

Routing between Host and LogicalSubnet via Gateway is enabled: if this route is enabled by tethering between the IP and non-IP connections, it could be exploited by an attacker.

Sg.TA.LTRevSg2.8

Routing from Host and LogicalSubnet via Gateway is enabled: if this route is enabled by reverse tethering between the IP and non-IP connections, it could be exploited by an attacker.

Triggers Threats (4)

Sg.A.LTethSg2.6.1

Connections between Host via Gateway and LogicalSubnet are disabled: if tethering is disabled between Host and Gateway, routes between Host and LogicalSubnet will be unavailable to legitimate users.

Sg.A.LTRevSg2.6.1

Connections between Host via Gateway and LogicalSubnet are disabled: if reverse tethering is disabled between Host and Gateway, the route from Host to LogicalSubnet will be unavailable to legitimate users.

Sg.TA.LTethSg2AC.1

Tethering re-enabled between Gateway and Host connecting to LogicalSubnet: if an attacker has control of host Gateway in a context where it is paired with Host and connected to LogicalSubnet, then they can tether Gateway and connect Host to LogicalSubnet.

Sg.TA.LTRevSg2AC.1

Reverse tethering re-enabled between Gateway and Host connecting to LogicalSubnet: if an attacker has control of host Gateway in a context where it is connected to LogicalSubnet and Host is paired with it, then they can reverse tether Host and connect Host to LogicalSubnet.