Control Strategy PasswordChecksAtHost

URI: CSG-PasswordChecksAtHost

Description: Access to device Host is controlled, by authenticating authorised users using a password.

(empty)

H.M.CHS.3.1

Console access to unprotected admin account on host Host in Space: an attacker with access to the physical space Space where the device is located uses console access to get root access via an unprotected admin account.

P.L.HuiPCHS.3.1

Console access to unprotected account running Process on device Host in Space: an attacker with access to the physical space Space where the device is located uses console access to get access via an unprotected user account with the rights of process Process.

H.M.CH.2.1

Console access to unprotected admin account on stolen device Host: an attacker with possession of device Host exploits an unprotected admin account via the console.

P.L.HuiPCH.2.1

Console access to unprotected account of Human on stolen device Host: an attacker with possession of device Host uses console access to an unprotected user account and gains access to processes running under that account.

P.A.HuiHP.6

User Human cannot access device Host to operate Process: if access to device Host is restricted, and user Human lacks the means to gain access, they will be unable to log in and hence unable to interact with process Process.

AccessControl at Role_Host

PasswordVerifier at Role_Host

Control Strategy PasswordChecksAtHost

Mitigated Threats (0)

Blocked Threats (4)

H.M.CHS.3.1

P.L.HuiPCHS.3.1

H.M.CH.2.1

P.L.HuiPCH.2.1

Triggers Threats (1)

P.A.HuiHP.6

Control Sets (2)