Commit cb4a61cb authored by JANSSEN; jeroen's avatar JANSSEN; jeroen
Browse files

Add [TH-PLAIN]: Transmitting data in the clear

parent 26db35f3
Loading
Loading
Loading
Loading
+30 −0
Original line number Diff line number Diff line
@@ -795,7 +795,37 @@ Mitigations for Impact:

* High to Low: NPII-\*, NPII- LOGG

**[TH-PLAIN]:** Transmitting data in the clear

| Risk factors     | Likelihood | Security profile |
|------------------|------------|------------------|
| CFG = 2 or ADM=2 | High       | SP-\*            |
| CFG = 1          | Medium     | none             |
| CFG = 0          | Low        | none             |

_Table C.10_

| Risk factors      | Impact | Security profile |
|-------------------|--------|------------------|
| max(DAT, FUN) = 2 | High   | SP-3             |
| max(DAT, FUN) = 1 | Medium | SP-2, SP-4       |
| max(DAT, FUN) = 0 | Low    | SP-1             |

_Table C.11_

Requirements that mitigate this threat: CRYPT, SCDL, AUTH, ROUT, DNSL

Mitigations for Likelihood:

* Medium to Low: EISO-\*

* High to Medium: EISO-\*, DNSL-6

Mitigations for Impact:

* Medium to Low: CRYPT-2, ROUT-1, AUTH-1, AUTH-2

* High to Medium: CRYPT-\*, SCDL-\*, ROUT-\*, AUTH-\*

**[TH-XXXX]:**