Threat DF.Auth.DScSePDmFF.3

URI: DF.Auth.DScSePDmFF.3

Package: IoT

< prev | next >

Description: Malicious control of Sensor alters generation of sensed output Data: if an attacker can tamper with the stored control inputs to sensor Sensor, they may be able to alter measurement of the environment by Sensor so as to deceive recipients of the data.

Threat Type: Primary Threat

Matching Pattern:

MP-DScSePDmFF

Finds a Sensor with its onboard process and output data, and its stored copy of control input data, plus all flows of this data from the process (i.e., out of the sensor), all of which must be involved in the pattern.

Triggers Secondary Threats (4)

DF.Auth.PDFIDADFI.0

Unauthentic data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is unauthentic, so is the forwarded flow to FlowsTo.

DF.Auth.PDFODADFO.0

Unauthentic data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is unauthentic, so is the forwarded flow to FlowsTo.

DS.Auth.HPDFDADS.0

Flow of unauthentic data Data from FlowsFrom is stored by data service Process: if the flow of data Data from FlowsFrom to Process is unauthentic, then so will be the copy saved locally on device Host by Process.

Se.Auth.SePDsFF.0

Loss of authenticity at sensor Sensor: if the onboard data received from a sensor by any client is altered by an attacker, it is modelled as a loss of authenticity at the sensor.