Control Strategy PersonalDeviceOversight

URI: CSG-PersonalDeviceOversight

Package: Network

< prev | next >

Description: Device Host is a personal device dedicated to one user, who will protect it from some types of attacks involving ongoing physical access or evident alteration of the device. For these threats, the protection level is very good because a momentary lapse in attention from the user is not sufficient to allow the attack.

Blocked Threats (5)

I.Auth.HUISG.3

Spoofing a device RemoteHost in a USB pair with device Host in location Space: an attacker with access to the location Space of Host can connect a fake version of device RemoteHost to Host.

H.J.PHS-iC.3

Physical tampering with Host in Space: at attacker with physical access to space Space physically alters device Host located there, introducing a means for the attacker to get remote access to admin privileges on Host.

P.L.HuiPCHS-iP.3.2

Unauthorised console access to interactive process Process on device Host in Space: an attacker with physical access to device Host in location Space exploits lax password security by user Human to interact via the console with process Process.

P.L.HuiPCHS-iP.3.3

Unattended console access to interactive process Process on device host Host in Space: an attacker with physical access to device Host in location Space is able to access process Process via the console while the legitimate user is away from the desk.

I.Auth.HSWSoGS.3

Spoofing wired network LogicalSubnet at location Space of supplicant Host: at attacker with access to the location Space of a host Host can physically insert their own device between the host and its wired connection to LogicalSubnet.