MITRE ATT&CKmitigation
M0804 Human User Authentication
- Domain
- ics
- Version
- 1.2
- Created
- 2020-09-11
Description
Require user authentication before allowing access to data or accepting commands to a device. While strong multi-factor authentication is preferable, it is not always feasible within ICS environments. Performing strong user authentication also requires additional security controls and processes which are often the target of related adversarial techniques (e.g., Valid Accounts, Default Credentials). Therefore, associated ATT&CK mitigations should be considered in addition to this, including Multi-factor Authentication, Account Use Policies, Password Policies, User Account Management, Privileged Account Management, and User Account Control.
Related
Mitigates · MITRE ATT&CK (20)
- T0843.001 Download All sub-technique
- T0843.002 Online Edit sub-technique
- T0843.003 Program Append sub-technique
- T1693 Modify Firmware technique
- T1693.001 System Firmware sub-technique
- T1693.002 Module Firmware sub-technique
- T0821 Modify Controller Tasking technique
- T0889 Modify Program technique
- T0886 Remote Services technique
- T0800 Activate Firmware Update Mode technique
- T0816 Device Restart/Shutdown technique
- T0836 Modify Parameter technique
- T0838 Modify Alarm Settings technique
- T0843 Program Download technique
- T0845 Program Upload technique
- T0858 Change Operating Mode technique
- T0861 Point & Tag Identification technique
- T0868 Detect Operating Mode technique
- T0871 Execution through API technique
- T0885 Commonly Used Port technique