Threat CC.AuS.CRoSI.3

URI: CC.AuS.CRoSI.3

Package: ProcessComms

< prev | next >

Description: Spoofing network ToSubnet allows diversion of the connection of client Client to service Service to an imposter service: an attacker that has spoofed the network connection from Gateway to ToSubnet can divert messages from Client to Service so they go to a fake version of the service under their control.

Threat Type: Primary Threat

Matching Pattern:

CC.AuS.CRoSI.3
MP-CRoSI

Finds a Service and its Host, a Client Channel from a legitimate Client and its Host, an Interface to a subnet on at least one path from the Client, and the Client Path from that Interface, and optionally the service manager and client user.

        (empty)

        (empty)

        (empty)

CSG-ServiceAuthN-X509

The client Client authenticates the service Service using an asymmetric cryptographic challenge against a public key registered to the service operator through a trusted means such as X509.