Threat Analysis::System sabotage by unauthorized removal of registered devices

Demo SmartLightSwitch / Threat Analysis / System sabotage by unauthorized removal of registered devices

Project:

Threat Analysis

System sabotage by unauthorized removal of registered devices : Public <<Risk>> Class

Created:	22.01.2024 12:46:11
Modified:	22.01.2024 12:48:00

Project:
Author:	Simon Eschlberger
Version:	1.0
Phase:	1.0
Status:	Proposed
Complexity:	Easy
Difficulty:
Priority:
Multiplicity:
Advanced:
UUID:	{A9CC5A7E-AC5F-4369-86C6-B4190DB591E0}
Appears In:	Threat Analysis, Risk Treatment

Associations To
Associations From
Advanced

Element	Source Role	Target Role
«Controlled Threat Scenario» Two factor authentication login process UseCase «handled in»	Name:	Name:
Details:
«Uncontrolled Threat Scenario» hacker gets remote access to configuration interface via internet by trying default credentials UseCase «emerging from»	Name:	Name:
Details:

Element	Source Role	Target Role
«Cybersecurity Requirement» Accessing the basic configuration interface requires valid credentials and the pressing of a button on the device during the login process Class «observe»	Name:	Name:
Details:
«Cybersecurity Requirement» Access to the configuration interface is only possible for authenticated users Class «observe»	Name:	Name:
Details:
«Cybersecurity Asset» Integrity of stored configuration data Component «exposed to»	Name:	Name:
Details:

Property	Value
isFinalSpecialization:	0