Commit f1fff6ec authored by Valerie Aurora's avatar Valerie Aurora
Browse files

Add mitigations for RDP denial of service threat

parent 44730694
Loading
Loading
Loading
Loading
+23 −7
Original line number Diff line number Diff line
@@ -784,15 +784,31 @@ Mitigations for Impact:

### C.4.x TH-RDP: Attacker launches denial of service attack on manufacturer remote data processing

| Risk factors                  | Impact |
|-------------------------------|--------|
| max(DAT, FUN, RDP) = 2        | High   |
| max(DAT, FUN) = 1 and RDP < 2 | Medium |
| max(DAT, FUN) = 0             | Low    |
| Risk factors                  | Likelihood | Security profiles |
|-------------------------------|------------|-------------------|
| RDP = 2 & DAT = 2 & FUN = 2   | High       | SP-3              |
| all others                    | Medium     | SP-4              |
| RDP = 0 or DAT = 0 or FUN = 0 | Low        | SP-1, SP-2        |

| Risk factors      | Impact | Security profiles |
|-------------------|--------|-------------------|
| DAT = 2 & FUN = 2 | High   | SP-3              |
| all others        | Medium | SP-2, SP-4        |
| DAT = 0 & FUN = 0 | Low    | SP-1              |

Requirements that mitigate this threat: AVAI

Mitigations for Likelihood:

* Medium to Low: DOST

* High to Low: DOST

Mitigations for Impact:

_Table C.3_
* Medium to Low: FDRP, LMEM

Requirements: TODO (RDPS)
* High to Low: FDRP, LMEM, FAIR

### C.4.x TH-MTM: Attacker attempts to read or modify traffic by capturing and relaying activity between endpoints