Threat H.M.CH.2.3

URI: H.M.CH.2.3

Package: Theft

< prev | next >

Description: Console access to admin account on stolen device Host: an attacker with possession of device Host is eventually able to hack into it and access an admin account via the console.

Threat Type: Primary Threat

Matching Pattern:

H.M.CH.2.3
MP-CH

Finds a solo Fixed Console Host.

        (empty)

        (empty)

        (empty)

CSG-RemoteMobileWiping

Device Host can be remotely wiped by its user Human if the device is lost or stolen, permanently removing accounts, security keys and data. This strategy represents a contingency plan

CSG-RemoteMobileWiping-Implementation-Runtime

Device Host has been remotely wiped by its user after being stolen. To implement this at runtime, signal the device user Human that the action should be taken. The control strategy is used to model the effect this should have so it can be considered as an option in current (runtime) decision support calculations. To activate it at runtime, signal user Human who is responsible for the device. Then deselect the ManualActionTaken control and restore the asserted Possession TWL of Host once the action has been confirmed.