Threat CC.AuS.CRoSG.3

URI: CC.AuS.CRoSG.3

Package: ProcessComms

< prev | next >

Description: Spoofing of service Service to Client at gateway Gateway in Space: an attacker in control of gateway device Gateway in location Space where it handles messages sent from Client to Service, the attacker can divert these messages via a fake version of the service under their control.

Threat Type: Primary Threat

Matching Pattern:

CC.AuS.CRoSG.3
MP-CRoSG

Finds a Service and its Host, a Client Channel from a legitimate Client and its Host, an Interface from a subnet to a Gateway host on at least one path from the Client, plus the Client Path from that subnet, and an access context for the gateway where it is on the relevant path, plus all service channels that relate to the client path, and optionally the service host manager and client user.

        (empty)

        (empty)

        (empty)

CSG-ServiceAuthN-X509

The client Client authenticates the service Service using an asymmetric cryptographic challenge against a public key registered to the service operator through a trusted means such as X509.