Matching HuDFTCS

URI: MP-HuDFTCS

Package: ProcessComms

< prev | next >

Description: Finds a Human using a Web Browser that accesses via at least one IP subnet a Service that does not use a separate authenticator service, where the browser consumes a data flow viewed but not updated by the user, plus the data access and client channel assets associated with the data use and client-service commnication.

Root Pattern: R-HuDFTCS

R-HuDFTCS

Finds a Human using a Web Browser that accesses a Service, where the browser consumes a data flow that is viewed by the user, plus the client channel associated with the commnication and data flow.

Threat Patterns (1)

CC.AuC.HuDFTCS.3

Unauthentic flow of data Data from FlowsFrom directs Client to a fake service impersonating Service: an attacker who provides malicious input to client Client via FlowsFrom (e.g. via phishing), can induce the client to access a fake version of service Service, a one-off deception that may allow subsequent impersonation of the client through capture of its password.