Misbehaviour TheftOfControl

URI: TheftOfControl

Package: Theft

< prev | next >

Description: Untrusted, potentially malicious agents gained control of a device or process running on it after the device has been removed by theft from the system.

This misbehaviour affects the trustworthiness attribute OwnerControl

AccessContext

Model of access rights, restricted to specific contexts.

Host

A device that can store, process, transmit or receive data.

Process

Represents a process (usually implemented by software running on a Host) that can read, update or create data, or exchange data with other processes.

TheftOfControl
H.M.CH.2.1

Console access to unprotected admin account on stolen device Host: an attacker with possession of device Host exploits an unprotected admin account via the console.
TheftOfControl
H.M.CH.2.3

Console access to admin account on stolen device Host: an attacker with possession of device Host is eventually able to hack into it and access an admin account via the console.
TheftOfControl
H.M.HumCH.2.2

Console access to weakly protected admin account on stolen device Host: an attacker with possession of device Host exploits exploits lax password security by user Human to access an admin account via the console.
TheftOfControl
H.M.MHHS.2.1

Reconnection of stolen device Host in Space: an attacker with possession of device MobileClient and access to Space can reconnect the device to networks accessible from that space.
TheftOfControl
H.M.PHdH.2

Control of host Host provisioned on stolen physical host PhysicalHost: if an attacker has access to admin rights on stolen device PhysicalHost, they can gain access to virtual host Host.
TheftOfControl
P.L.HuiPCH.2.1

Console access to unprotected account of Human on stolen device Host: an attacker with possession of device Host uses console access to an unprotected user account and gains access to processes running under that account.
TheftOfControl
P.L.HuiPCH.2.2

Console access to weakly protected account of Human on stolen device Host: an attacker with possession of device Host exploits lax password security by user Human to access processes running under their account.
TheftOfControl
P.L.PMHHS.2.1

Use of Process by reconnecting stolen device Host to networks in Space: an attacker with possession of physical device MobileClient and access to Space can reconnect Host to networks accessible from Space and exploit their ability to control how Process makes use of that connectivity to access services.
TheftOfControl
P.L.SHP.2

Use of admin privilege at Host to control Process: someone with admin rights on stolen device Host can control process Process hosted by that device and use its privileges.

        (empty)

TheftOfControl
CC.AuC.CACHLSS.2

Client Client on stolen host CHost used to access Service via LogicalSubnet: if an attacker in possession of stolen device CHost can control the installed client Client when CHost is connected to LogicalSubnet, the attacker can use Client to access Service using a privileged network path, thus acting as a false (impersonated) client.
TheftOfControl
DF.Auth.AC-iDFVFC.2.6

Client Client on stolen host CHost injects fake content into the encrypted flow of Data via Service: if an attacker has possession of host CHost and can access client Client, they can access its cryptographic key and inject malicious content into the flow of Data from Client to FlowsTo.
TheftOfControl
DF.Auth.AC-iDF-VFC.2.6

Client Client on stolen host CHost injects fake content into the encrypted flow of Data via Service: if an attacker has possession of host CHost and can access client Client, they can access its cryptographic key and inject malicious content into the flow of Data from Client to FlowsTo.
TheftOfControl
DF.C.AC-iDFVTC.2.6

Client Client on stolen host CHost reads the encrypted flow of Data from/via Service: if an attacker has possession of host CHost and can access client Client, they can they can access its cryptographic key and read data Data flowing to Client from FlowsFrom.
TheftOfControl
DF.C.AC-iDF-VTC.2.6

Client Client on stolen host CHost reads the encrypted flow of Data from/via Service: if an attacker has possession of host CHost and can access client Client, they can they can access its cryptographic key and read data Data flowing to Client from FlowsFrom.
TheftOfControl
DS.C.HDS-V.2.2

Use of admin rights on stolen device Host to access stored data Data: if an attacker gains access to stolen device Host, they can read (unencrypted) copies of Data stored on the Host.
TheftOfControl
DS.C.HPsACr-pDS-V.2

Use of Process to access Data stored on stolen device Host: if an attacker can access Process on stolen device Host, they can exploit the rights of Process to read and serve the locally stored copy of Data.
TheftOfControl
DS.C.HPsACrpDS-V.2

Use of Process to access Data on stolen device Host: if an attacker can access Process on stolen device Host, they can use the rights of Process to read a local stored copy of Data.
TheftOfControl
DS.C.HPsACr-pDS-V.2.6

Use of compromised key at Process to access Data stored on stolen device Host: if an attacker can access Process on stolen device Host, they can access the local encrypted copy of data Data by using a cryptographic key assigned to Process allowing it to serve the data.
TheftOfControl
H.M.MHHS.2.1

Reconnection of stolen device Host in Space: an attacker with possession of device MobileClient and access to Space can reconnect the device to networks accessible from that space.
TheftOfControl
H.M.PHdH.2

Control of host Host provisioned on stolen physical host PhysicalHost: if an attacker has access to admin rights on stolen device PhysicalHost, they can gain access to virtual host Host.
TheftOfControl
I.IS.INC.2

Access from stolen host Host to LogicalSubnet re-enabled: if an attacker gains access to stolen device Host, they can override a policy not to connect it to subnet LogicalSubnet.
TheftOfControl
LS.L.HL3S.2

Stolen host Host used to communicate on subnet LogicalSubnet: if an attacker gains access to stolen device Host, they can use it to send messages on LogicalSubnet.
TheftOfControl
P.IS.HP.2

Process Process re-enabled on stolen device Host: if an attacker gains access to stolen device Host, they can restart Process, overriding the policy to disable Process.
TheftOfControl
P.L.PMHHS.2.1

Use of Process by reconnecting stolen device Host to networks in Space: an attacker with possession of physical device MobileClient and access to Space can reconnect Host to networks accessible from Space and exploit their ability to control how Process makes use of that connectivity to access services.
TheftOfControl
P.L.SHP.2

Use of admin privilege at Host to control Process: someone with admin rights on stolen device Host can control process Process hosted by that device and use its privileges.