Skip to main content

CCC.Core.TH02: Data is Intercepted in Transit

Threat ID:CCC.Core.TH02
Title:Data is Intercepted in Transit
Description:

Data transmitted by the service is susceptible to collection by any entity with access to any part of the transmission path. Packet observations can be used to support the planning of attacks by profiling origin points, destinations, and usage patterns. The data may also be vulnerable to interception or modification in transit if not properly encrypted, impacting the confidentiality or integrity of the transmitted data.

External Mappings

Reference IDEntry IDStrengthRemarks
MITRE-ATT&CK
T1557
0
Adversary-in-the-Middle
MITRE-ATT&CK
T1040
0
Network Sniffing

Controls

IDTitleObjectiveControl FamilyThreat MappingsGuideline MappingsAssessment Requirements
CCC.Core.C01Encrypt Data for TransmissionEnsure that all communications are encrypted in transit to protect data integrity and confidentiality. Data
1
6
5