Component: Build machines
Build machines (Mac minis) operated by FPF Infra
Potential Mitigations
Properties not currently implemented that would mitigate applicable threats:
Threats Affecting This Component
| Threat ID | Name | Description | Potential Mitigations |
|---|---|---|---|
| CAPEC-473 | Signature Spoof | An attacker generates a message or datablock that causes the recipient to believe that the message or datablock was generated and cryptographically signed by an authoritative or reputable source, misleading a victim or victim operating system into performing malicious actions. | uses strong crypto |
| CAPEC-145 | Checksum Spoofing | An adversary spoofs a checksum message for the purpose of making a payload appear to have a valid corresponding checksum. Checksums are used to verify message integrity. They consist of some value based on the value of the message they are protecting. Hash codes are a common checksum mechanism. Both the sender and recipient are able to compute the checksum based on the contents of the message. If the message contents change between the sender and recipient, the sender and recipient will compute different checksum values. Since the sender's checksum value is transmitted with the message, the recipient would know that a modification occurred. In checksum spoofing an adversary modifies the message body and then modifies the corresponding checksum so that the recipient's checksum calculation will match the checksum (created by the adversary) in the message. This would prevent the recipient from realizing that a change occurred. | uses strong crypto |
| DZ-1-DEPS | verifies resources ยท deps | ||
| CAPEC-440 | Hardware Integrity Attack | An adversary exploits a weakness in the system maintenance process and causes a change to be made to a technology, product, component, or sub-component or a new one installed during its deployed use at the victim location for the purpose of carrying out an attack. | is verifiable |
| CAPEC-582 | Route Disabling | An adversary disables the network route between two targets. The goal is to completely sever the communications channel between two entities. This is often the result of a major error or the use of an Internet kill switch by those in control of critical infrastructure. This attack pattern differs from most other obstruction patterns by targeting the route itself, as opposed to the data passed over the route. | works offline |