| 名称 |
Cellular Traffic Intercept |
|
|
| 摘要 |
Cellular traffic for voice and data from mobile devices and retransmission devices can be intercepted via numerous methods. Malicious actors can deploy their own cellular tower equipment and intercept cellular traffic surreptitiously. Additionally, government agencies of adversaries and malicious actors can intercept cellular traffic via the telecommunications backbone over which mobile traffic is transmitted. |
| 前置条件 |
None |
| 解决方案 | Encryption of all data packets emanating from the smartphone to a retransmission device via two encrypted tunnels with Suite B cryptography, all the way to the VPN gateway at the datacenter. |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-311 |
Missing Encryption of Sensitive Data |
|
| 关联 CAPEC |
|
CAPEC 编号
|
描述
|
| CAPEC-157 |
In this attack pattern, the adversary intercepts information transmitted between two third parties. The adversary must be able to observe, read, and/or hear the communication traffic, but not necessarily block the communication or change its content. Any transmission medium can theoretically be sniffed if the adversary can examine the contents between the sender and recipient. Sniffing Attacks are similar to Adversary-In-The-Middle attacks (CAPEC-94), but are entirely passive. AiTM attacks are predominantly active and often alter the content of the communications themselves. |
|
| 分类体系：ATTACK |
|
条目编号
|
条目名称
|
| 1111 |
Multi-Factor Authentication Interception |
|