Threats

Source: Baseline Security Recommendations for IoT in the context of Critical Information Infrastructures November 2017
# Threat Group Threat Description Assets Affected Remarks
1 Physical attacks Device destruction (sabotage) Incidents such devices theft, bomb attacks, vandalism or sabotage could damage devices IoT devices View
2 Physical attacks Device modification Tampering a device by for example taking advantage of bad configuration of ports, exploiting those left open. IoT devices View
3 Disasters Natural Disaster These include events such as, floods, heavy winds, heavy snows, landslides, among others natural disaster, which could physically damage the devices. IoT devices View
4 Failures and Malfunctions Third parties failures Errors on an active element of the network caused by the misconfiguration of another element that has direct relation with it. IoT devices View
5 Failures and Malfunctions Software vulnerabilities The most common IoT devices are often vulnerable due to weak/default passwords, software bugs, and configuration errors, posing a risk to the network. This threat is usually connected to others, like exploit kits, and it is considered crucial. IoT devices View
6 Damage and Loss (IT Assets) Data / Sensitive information leakage Sensitive data is revealed, intentionally or not, to unauthorised parties. The importance of this threat can vary greatly, depending on the kind of data leaked. IoT devices View
7 Outages Failure of system Threat of failure of software services or applications IoT devices View
8 Outages Failures of devices Threat of failure or malfunction of hardware devices IoT devices View
9 Eavesdropping Interception and Hijacking Replay of messages This attack uses a valid data transmission maliciously by repeatedly sending it or delaying it, in order to manipulate or crash the targeted device. IoT devices View
10 Eavesdropping Interception and Hijacking Information gathering Passively obtain internal information about the network: devices connected, protocol used, etc. IoT devices View
11 Eavesdropping Interception and Hijacking Session hijacking Stealing the data connection by acting as a legitimate host in order to steal, modify or delete transmitted data. IoT devices View
12 Eavesdropping Interception and Hijacking Network reconnaissance Passively obtain internal information about the network: devices connected, protocol used, open ports, services in use, etc. IoT devices View
13 Eavesdropping Interception and Hijacking Interception of information Unauthorised interception (and sometimes modification) of a private communication, such as phone calls, instant messages, e-mail communications IoT devices View
14 Eavesdropping Interception and Hijacking IoT communication protocol hijacking Taking control of an existing communication session between two elements of the network. The intruder is able to sniff sensible information, including passwords. The hijacking can use aggressive techniques like forcing disconnection or denial of service. IoT devices View
15 Eavesdropping Interception and Hijacking Man in the middle Active eavesdropping attack, in which the attacker relays messages from one victim to another, in order to make them believe that they are talking directly to each other IoT devices View
16 Nefarious Activity and Abuse Modification of information In this case, the objective is not to damage the devices, but to manipulate the information in order to cause chaos, or acquire monetary gains. IoT Devices View
17 Nefarious Activity and Abuse Attacks on privacy This threat affects both the privacy of the user and the exposure of network elements to unauthorised personnel. IoT devices View
18 Nefarious Activity and Abuse Counterfeit by malicious devices This threat is difficult to discover, since a counterfeit device cannot be easily distinguished from the original. These devices usually have backdoors and can be used to conduct attacks on other ICT systems in the environment. IoT devices View
19 Nefarious Activity and Abuse DDoS Multiple systems attack a single target in order to saturate it and make it crash. This can be done by making many connections, flooding a communication channel or replaying the same communications over and over. IoT devices View
20 Nefarious Activity and Abuse Exploit Kits Code designed to take advantage of a vulnerability in order to gain access to a system. This threat is difficult to detect and in IoT environments its impact ranges from high to crucial, depending on the assets affected. IoT devices View
21 Nefarious Activity and Abuse Malware Software programs designed to carry out unwanted and unauthorised actions on a system without the consent of the user, resulting in damage, corruption or information theft. Its impact can be high. IoT devices View
Records : 21 of 21 | Page : of 1 | Limit