Matching HuDSTCS

URI: MP-HuDSTCS

Package: ProcessComms

< prev | next >

Description: Finds a Human using a Web Browser that accesses via at least one IP subnet a Service that does not use a separate authenticator service, where the browser consumes a locally stored data input viewed but not updated by the user, plus the data access and client channel assets associated with the data use and client-service commnication.

Root Pattern: R-HuDSTCS

R-HuDSTCS

Finds a Human using a Web Browser that accesses a Service, where the browser consumes a locally stored data input viewed by the user, plus the client channel associated with the data use and client-service commnication.

Threat Patterns (1)

CC.AuC.HuDSTCS.3

Unauthentic stored input Data directs Client to a fake service impersonating Service: an attacker who provides malicious input to client Client by tampering with stored input Data, can induce the client to access a fake version of service Service, a one-off deception that may allow subsequent impersonation of the client through capture of its password.