Control Strategy NetworkAuthN.X509

URI: CSG-NetworkAuthN-X509-Optional

Description: To prevent network spoofing, a gateway Gateway providing the network can use an X509 (or otherwise trusted) key pair, verified by the supplicant device Host.

(empty)

I.Auth.HSRSoGS.3

Spoofing radio network LogicalSubnet at location Space of supplicant Host: at attacker with access to the location Space of Host can physically spoof network LogicalSubnet by introducing their own radio base station to impersonate the real one.

(empty)

X509 at Role_Gateway

X509ServiceVerifier at Role_Host

Control Strategy NetworkAuthN.X509

Mitigated Threats (0)

Blocked Threats (1)

I.Auth.HSRSoGS.3

Triggers Threats (0)

Control Sets (2)