Threat

Threat:

Fraudulent use of systems (misappropriation)

Ref.: T8

What might happen:

Systems are used to achieve tasks they are not designed to. This can be done by attackers or normal users.

Examples:

Use of processing resources to crack passwords.

Poor or lacking resource usage monitoring and accounting

Use of network bandwidth for downloading unauthorised files for personal or other use (e.g. music, video, software or other copyright protected files)

Poor or lacking resource usage monitoring and accounting

Use of network bandwidth to conduct a denial of service attack on an external (or internal) network resource.

Poor or lacking resource usage monitoring and accounting

Recommendations:

R5, R14, R17, R19, R20, R22, R23, R24, R27, R28, R29, R35, R36, R37, R40, R41, R43, R44, R46, R48, R49, R50, R52, R53, R55, R58, R59, R61

ISSeG Audit Questions:

Please see the ISSeG Risk Assessment questionnaire

Threat group of family:

Compromising ~~Human~~ ~~Failure~~ ~~Environment~~ ~~Aggression~~

Copyright (c) Members of the ISSeG Collaboration 2008	Top of page	Home page
	This is version 5.2 of the website - view release notes -view visitor statistics

This page was last modified on28 May 2008 09:31:44 +0200.

	Training and Dissemination web site
	Integrated Site Security for Grids	A project co-funded by EU FP6 programme