Component: External github repositories
Potential Mitigations
Properties not currently implemented that would mitigate applicable threats:
Threats Affecting This Component
| Threat ID | Name | Description | Potential Mitigations |
|---|---|---|---|
| CAPEC-639 | Probe System Files | An adversary obtains unauthorized information due to improperly protected files. If an application stores sensitive information in a file that is not protected by proper access control, then an adversary can access the file and search for sensitive information. | is sandboxed |
| CAPEC-582 | Route Disabling | An adversary disables the network route between two targets. The goal is to completely sever the communications channel between two entities. This is often the result of a major error or the use of an Internet kill switch by those in control of critical infrastructure. This attack pattern differs from most other obstruction patterns by targeting the route itself, as opposed to the data passed over the route. | works offline |
| CAPEC-439 | Manipulation During Distribution | An attacker undermines the integrity of a product, software, or technology at some stage of the distribution channel. The core threat of modification or manipulation during distribution arise from the many stages of distribution, as a product may traverse multiple suppliers and integrators as the final asset is delivered. Components and services provided from a manufacturer to a supplier may be tampered with during integration or packaging. | is verifiable |