Threat LS.L.RSS-HP.3

URI: LS.L.RSS-HP.3

Package: Network

< prev | next >

Description: Access to subnet LogicalSubnet from space Space: someone with access to space Space where radio subnet LogicalSubnet is accessible can connect their own device unless access is restricted by security measures. Note that access only to the local subnet serving Space.

Threat Type: Primary Threat

Matching Pattern:

LS.L.RSS-HP.3
MP-RSS-HP

Finds a Radio Subnet accessible from a Space, and the subnet it implements locally, where there is no gateway specified as the subnet provider and no controlling Process.

        (empty)

        (empty)

        (empty)

        (empty)

CSG-IgnorePhysicalThreatsFromWorld

Indicates that threats from as well as to the space Space can be ignored, i.e. that the risk model intentionally does not consider physical attacks from Space. This is only permitted if Space is the inferred global public space (the World) used when no locations are asserted in the model. This control strategy is a way to specify that physical security is out of scope for devices with no explicitly specified location(s), i.e. that they are considered physically secure.

CSG-NetworkEAP-AAA

Control access to subnet LogicalSubnet using a (usually remote) AAA service that verifies keys provisioned in SIM cards to authorised supplicants. You should also specify SIM cards be used by supplicant devices or they will be unable to connect.