Threat LS.IS.HprLSAC.1

URI: LS.IS.HprLSAC.1

Package: Network

< prev | next >

Description: Provision of subnet LogicalSubnet by Gateway not disabled: if an attacker has admin rights on host Gateway, they can override a policy to disable provision by Gateway of network LogicalSubnet.

Threat Type: Primary Threat

Matching Pattern:

LS.IS.HprLSAC.1
MP-HprLSAC

Finds a LogicalSubnet provided by a Host and an associated network access context.

        (empty)

        (empty)

        CSG-DisableSubnet

        (empty)

CSG-DisableGatewayHost-Runtime

Device Gateway is disabled to prevent it being involved in an attack. This strategy represents a run-time adaptation in response to a threat, which may or may not be following some contingency plan. It also triggers threats representing side effects that would be caused by such an action.