MITRE ATT&CKmitigation
M0800 Authorization Enforcement
- Domain
- ics
- Version
- 1.2
- Created
- 2020-09-11
Description
The device or system should restrict read, manipulate, or execute privileges to only authenticated users who require access based on approved security policies. Role-based Access Control (RBAC) schemes can help reduce the overhead of assigning permissions to the large number of devices within an ICS. For example, IEC 62351 provides examples of roles used to support common system operations within the electric power sector , while IEEE 1686 defines standard permissions for users of IEDs.
Related
Mitigates · MITRE ATT&CK (16)
- T0843.001 Download All sub-technique
- T0843.002 Online Edit sub-technique
- T0843.003 Program Append sub-technique
- T0821 Modify Controller Tasking technique
- T0889 Modify Program technique
- T0886 Remote Services technique
- T0800 Activate Firmware Update Mode technique
- T0816 Device Restart/Shutdown technique
- T0836 Modify Parameter technique
- T0838 Modify Alarm Settings technique
- T0843 Program Download technique
- T0845 Program Upload technique
- T0858 Change Operating Mode technique
- T0861 Point & Tag Identification technique
- T0868 Detect Operating Mode technique
- T0871 Execution through API technique
References
- https://standards.ieee.org/standard/1686-2013.html Institute of Electrical and Electronics Engineers January 2014
- https://webstore.iec.ch/publication/6912 International Electrotechnical Commission July 2020