Ami-sec risk Assessment & System Requirements

Network Threats

Network threats are those threats that directly involve the network in some manner other than eavesdropping (which is covered in the Eavesdropping Threats section). The specific threats are listed below in Table 17.

Table 17. Network Threats

Threat Name	Severity	Likelihood	Description
T.Network.Denial.1	High	Likely	An entity performs a denial of service attack on the Backhaul network (e.g. jamming, malicious code, distributed denial-of-service) resulting in a denial of service for assets.
T.Network.Filter.1	High	Likely	An entity uses IP-level access to a Backhaul network and uses the AMI system security domain network interface to gain IP-level access to another Backhaul network that the AMI system security domain is interfacing with.
T.Network.Modify.1	High	Likely	An entity modifies data on the Backhaul network in an attempt to modify that information asset.
T.Network.Modify.2	High	Likely	An AMI entity without proper access to an information asset inserts data onto the AMI Virtual Network in an attempt to modify that information asset.
T.Network.Replay.1	Medium	Likely	An entity attempts to replay a previous AMI network message sent over the Backhaul network.
T.Network.Replay.2	Medium	Likely	An entity attempts to replay a previous AMI network message sent over the AMI Virtual Network.
T.Network.Unauth.1	High	Likely	An AMI entity with access adds unauthorized network interfaces to AMI system security domain.

14. Operational Denial of Service Threats

Operational denial of service threats are those threats that affect availability of the system and may be caused by operational users of the system. The specific threats are listed below in Table 18

Table 18. Operational Denial of Service Threats

Threat Name	Severity	Likelihood	Description
T.Op.Denial.1	Low	Likely	An entity enters access control attributes related to specific content resulting in denying access to consumers who should be authorized for that information object.
T.Op.Denial.2	Low	Likely	An entity enters improper value in the priority attribute related to specific content resulting in reduced distribution efficiency for that information object.
T.Op.Denial.3	High	Likely	An entity creates excessive volume of information objects resulting in resource exhaustion (e.g., storage space) resulting in a denial of service.
T.Op.Denial.4	Medium	Likely	An entity removes or changes endorsements on an information object in an unauthorized manner with the intent to stop the publication of the information object.
T.Op.Denial.5	High	Unusual	An entity creates excessive volume of endorsements resulting in resource exhaustion (e.g., storage space) resulting in a denial of service.
T.Op.Denial.6	High	Unlikely	An entity copies the information object to an excessive volume of ownership types resulting in resource exhaustion (e.g., storage space).
T.Op.Denial.7	High	Unlikely	An entity copies an excessive volume of the information object to the same ownership type resulting in resource exhaustion (e.g., storage space, processor resources [race condition]).
T.Op.Denial.8	Low	Likely	An entity enters (regrades to) incorrect values in the access control attributes that overly restrict access to the information content resulting in denial of service. Incorrect values could be as a result of: Negligence Hidden or malicious content Content different than what was displayed
T.Op.Denial.9	High	Unlikely	An entity publishes the information object to an excessive volume of ownership types resulting in resource exhaustion (e.g., storage space).
T.Op.Denial.10	High	Unlikely	An entity publishes an excessive volume of the information object to the same ownership type resulting in resource exhaustion (e.g., storage space, processor resources [race condition]).
T.Op.Denial.11	Medium	Likely	An entity deletes an object it is not authorized to delete resulting in denial of service.
T.Op.Denial.12	Low	Likely	An AMI entity deletes an object it is authorized to delete resulting in denial of service.
T.Op.Denial.13	Low	Unlikely	An AMI entity mounts an attack against AMI computing resources that results in task overloading.
T.Op.Denial.14	Medium	Unlikely	An entity prevents the decryption of information objects resulting in no information being displayed, resulting in denial of service.
T.Op.Denial.15	Medium	Unusual	An entity prevents display content from being displayed resulting in denial of service.
T.Op.Denial.16	Low	Unusual	An entity causes an authorized user to view an improper/incorrect AMI directory structure resulting in denial by failing to connect to the intended AMI directory.

15.