Commit 15e048c2 authored by Valerie Aurora's avatar Valerie Aurora
Browse files

Update mitigation requirements for UNAA threat

parent c0723bb2

EN-304-620-1.md

+5 −5
Original line number Diff line number Diff line
@@ -906,19 +906,19 @@ Attacker may attempt to authenticate in an unauthorized manner to get access to 
| all others        | Medium | SP-2, SP-4        |

| DAT = 0 & FUN = 0 | Low    | SP-1              |



Requirements that mitigate this threat: AUTH, LOGG

Requirements that mitigate this threat: EISO, AUTH, LOGG



Mitigations for Likelihood:



* Medium to Low: AUTH-6

* Medium to Low: EISO, AUTH-6



* High to Low: AUTH-6

* High to Low: EISO, AUTH-6



Mitigations for Impact:



* Medium to Low: AUTH-3, LOGG-1

* Medium to Low: NPII-1, AUTH-3, LOGG-1



* High to Low: AUTH-3, AUTH-4, AUTH-5, LOGG-\*

* High to Low: NPII-\*, AUTH-3, AUTH-4, AUTH-5, LOGG-\*



### C.4.x TH-LDEL: Attacker removes evidence of compromise