Trustworthiness Attribute NetworkControl

URI: NetworkControl

Description: Control over routing within an abstract or logical subnet.

This attribute is undermined by the misbehaviour LossOfNetworkControl

Base class for all network subnets, including real subnets (i.e. those over which messages can be sent or routed) and some that are not real but represent a set of (inferred) real networks and routers.

I.O.DDoH.3

Remote DDoS attack from AttackerSubnet on Host connection to LogicalSubnet: an attacker able to orchestrate clients on subnet AttackerSubnet arranges for them to send too many messages to the network address of the target device Host on LogicalSubnet.

I.O.HIoH.3.2

Remote DDoS attack from LogicalSubnet on Host: an attacker able to orchestrate clients on subnet LogicalSubnet arranges for them to send too many messages to the network address of the connected target device Host.

CC.AuS.CRoS.3

Spoofing of service Service to Client at subnet LogicalSubnet: an attacker with control of a logical subnet on the path between client Client and service Service can divert messages for Service so they go to a fake version of the service under their control.

P.O.DDoS.3

Distributed DoS attack on service Process from subnet LogicalSubnet: an attacker with control over multiple vulnerable systems connected to LogicalSubnet can use them to send excessive messages via a privileged network paths through firewalls and overload service Process. The best defence is to arrange with your ISP to manage and restrict the traffic sent from the Internet (check threat causes for an unrestricted network interface).

LS.M.LSoLS.1

Loss of control in subnet LogicalSubnet affects overlay OverlaySubnet: if subnet OverlaySubnet is an overlay on LogicalSubnet, then if LogicalSubnet is controlled by malicious actors, so is OverlaySubnet.