Misbehaviour Theft

URI: Theft

Package: Theft

< prev | next >

Description: Model of device theft and reconnection of stolen devices.

This misbehaviour affects the trustworthiness attribute Possession

PhysicalHost

A physical host device, that could therefore be physically as well as electronically attacked (unlike a VirtualHost).

H.P.PHS-iC.3

Theft of device Host from Space: an attacker with access to the physical space Space is able to steal device Host.

(empty)

DS.C.HDS-V.2.1

Physical access to data Data on stolen host Host: an attacker in possession of device PhysicalHost can physically transfer its storage media to another device to access data stored there.

H.M.CH.2.1

Console access to unprotected admin account on stolen device Host: an attacker with possession of device Host exploits an unprotected admin account via the console.

H.M.CH.2.3

Console access to admin account on stolen device Host: an attacker with possession of device Host is eventually able to hack into it and access an admin account via the console.

H.M.HumCH.2.2

Console access to weakly protected admin account on stolen device Host: an attacker with possession of device Host exploits exploits lax password security by user Human to access an admin account via the console.

P.L.HuiPCH.2.1

Console access to unprotected account of Human on stolen device Host: an attacker with possession of device Host uses console access to an unprotected user account and gains access to processes running under that account.

P.L.HuiPCH.2.2

Console access to weakly protected account of Human on stolen device Host: an attacker with possession of device Host exploits lax password security by user Human to access processes running under their account.

Misbehaviour Theft

Assets (1)

Threats that cause this misbehaviour (1)