Trustworthiness Attribute ServiceChannelsBlocked

URI: ServiceChannelsBlocked

Description: Applies to a communication route, i.e. the Interface between a Host and a Subnet, or a Logical Segment representing a route between two Subnets. Signifies that no exceptions were created to allow client-service connections and messages to tunnel through a default deny routing policy.

This attribute is undermined by the misbehaviour ServiceChannelsAllowed

Interface	The interface between a Host and a Logical Subnet. Represents a possible point of control and a target for attack. If the Logical Subnet is an IP network, the Interface also represents the existence of an IP address.
LogicalSegment	A base class representing a route through a Host between any two distinct Logical Subnets of any kind.

SC.IS.SCmSg.8.1

Privileged channel between Client and Service in service: if all routes via gateways plus the final interface to the service host are enabled despite any default firewall rules, then the network path from Client is open and could potentially be exploited in other threats.

SC.IS.SCpSg.8.1

Privileged channel between Client and Service in service: if access to Service from LogicalSubnet is enabled despite any default firewall rules, then the network path from Client is open and could potentially be exploited in other threats.

Trustworthiness Attribute ServiceChannelsBlocked

Assets (2)

Threats (2)

SC.IS.SCmSg.8.1

SC.IS.SCpSg.8.1