September 13 Workshop - Ecosystem Breakout session - Countermeasure General Comment

usnistgov / mobile-threat-catalogue

NIST/NCCoE Mobile Threat Catalogue

https://pages.nist.gov/mobile-threat-catalogue

Other

142 stars 40 forks source link

September 13 Workshop - Ecosystem Breakout session - Countermeasure General Comment #28

Closed shvn215 closed 7 years ago

shvn215 commented 8 years ago

General Comment

Threat ID: ECO-1

Type of Comment:

G - EMM could store hashes to backups.

Proposed Change: N/A - suggestion

Justification: Feedback from breakout session attendees to improve countermeasures

sdog-nist commented 7 years ago

While the proposed countermeasure would enable the enterprise to detect modification to cloud-based device backups, the threat only involves a loss of confidentiality for data stored in backups, without any loss of integrity of the backup itself.