Control Strategy UserPasswordAccessToHost

URI: CSG-UserPasswordAccessToHost

Description: Users in the role Human choose a password which is registered with the system allowing access to interactive host Host that authenticates using the password.

(empty)

P.A.HuiHP.6

User Human cannot access device Host to operate Process: if access to device Host is restricted, and user Human lacks the means to gain access, they will be unable to log in and hence unable to interact with process Process.

H.M.HumCH.2.2

Console access to weakly protected admin account on stolen device Host: an attacker with possession of device Host exploits exploits lax password security by user Human to access an admin account via the console.

H.M.HumCHS-iP.3.2

Unauthorised console access to an admin account on host Host in Space: an attacker with physical access to device Host in location Space exploits lax password security by user Human to gain root privileges via the console.

P.L.HuiPCH.2.2

Console access to weakly protected account of Human on stolen device Host: an attacker with possession of device Host exploits lax password security by user Human to access processes running under their account.

P.L.HuiPCHS-iP.3.2

Unauthorised console access to interactive process Process on device Host in Space: an attacker with physical access to device Host in location Space exploits lax password security by user Human to interact via the console with process Process.

AccessControl at Role_Host

Password at Role_Human

PasswordVerifier at Role_Host

Control Strategy UserPasswordAccessToHost

Mitigated Threats (0)

Blocked Threats (1)

P.A.HuiHP.6

Triggers Threats (4)

H.M.HumCH.2.2

H.M.HumCHS-iP.3.2

P.L.HuiPCH.2.2

P.L.HuiPCHS-iP.3.2

Control Sets (3)