Control Strategy PersonalDeviceProtection

URI: CSG-PersonalDeviceProtection

Description: Device Host is a personal device dedicated to one user, who will protect it from some types of attacks involving physical access. This particular strategy relates to threats that are blocked, affording slightly less than perfect protection because the user may be overcome by force or become temporarily less than vigilant.

(empty)

D.C.HuiPiDCHS.3

Data Data entered via Process leaks by shoulder surfing Human in space Space: if Human is not careful, someone with access to space Space could shoulder surf a session during which Human enters Data via the user interface of Process on host device Host.

D.C.HuiRACHSPiD.3

Data Data entered via Process leaks by shoulder surfing Human in space Space: if Human is not careful, someone with access to space Space could shoulder surf a session in which Human enters Data via the user interface of Process accessed from remote access client RemoteAccessClient on host device Host.

D.C.HuiPv-iDFCHS.3

Data Data sent from FlowsFrom to Process leaks by shoulder surfing Human in space Space: if Human is not careful, someone with access to space Space could shoulder surf a session during which Human views Data via the user interface of Process on host device Host.

D.C.HuiPv-iD-FCHS.3

Data Data displayed by Process leaks by shoulder surfing Human in space Space: if Human is not careful, someone with access to space Space could shoulder surf a session during which Human views Data via the user interface of Process on host device Host.

D.C.HuiRACv-iDFCHS.3

DS.A.PHHDS.3

Stored copy of Data on AHost lost due to theft or destruction of Host in Space : an attacker with access to Space can physically steal or destroy device Host, removing it from the system, rendering data stored on AHost unavailable. The threat to data is distinct from the threat to the host, as Host could be replaced if the loss is detected, but that would not restore the lost copy of Data.

H.J.UHS.3

Tampering with software via USB at Host in Space: at attacker with physical access to Host in space Space reboots from a USB device and introduces software changes, introducing a means for the attacker to get remote access to admin privileges on Host.

H.W.UHS.3

Physical insertion of malware via USB at Host in Space: at attacker with physical access to space Space is able to insert self-replicating malware on USB Host Host in situ, using physical means (such as power cycling) to reboot and avoid anti-malware software, if installed.

H.A.PHS.3

Destruction of Host in Space: an attacker with access to Space can physically remove or destroy device Host, removing it from the system and making it unavailable.

H.IS.PHS-iP.1

Switching on device Host in Space: an attacker with access to Space can physically access disabled device Host and switch it back on.

H.M.CHS.3.1

Console access to unprotected admin account on host Host in Space: an attacker with access to the physical space Space where the device is located uses console access to get root access via an unprotected admin account.

P.L.HuiPCHS.3.1

Console access to unprotected account running Process on device Host in Space: an attacker with access to the physical space Space where the device is located uses console access to get access via an unprotected user account with the rights of process Process.

CC.AuC.HuiHCCC-nS.3.3

Shoulder surfing password for Client at Service from Host in Space: if user Human enters a password to client Client to access service Service when the client is running on host Host in insecure space Space, then an attacker could obtain the password by shoulder surfing.

CC.AuC.HuiHrCCC-nS.3.3

Shoulder surfing password for Client at Service from Host in Space: if user Human enters a password to client Client to access service Service when accessing the client via remote access from host Host in insecure space Space, then an attacker could obtain the password by shoulder surfing.

H.P.PHS-iC.3

Theft of device Host from Space: an attacker with access to the physical space Space is able to steal device Host.

H.E.H-Hu.9

Inappropriate control at device Host: the model specifies that this is a personal device protected by its user, but it is not a personal IoT device related to a data subject, neither is it being used or managed by any user. Deselect the Personal Device control, or insert the user and their relationship with the device.

H.E.HHu2d.9

Inappropriate control at device Host: the model specifies that this is a personal device protected by its user, but it is being used by multiple users. Deselect the Personal Device control, or remove relationships with all but one user.

PersonalDevice at Role_Host