usnistgov / mobile-threat-catalogue

NIST/NCCoE Mobile Threat Catalogue
https://pages.nist.gov/mobile-threat-catalogue
Other
142 stars 40 forks source link

STA-4 additional countermeasure #78

Closed mpeck12 closed 5 years ago

mpeck12 commented 7 years ago

General Comment

Threat ID: STA-4 Type of Comment: T Proposed Change: New countermeasure "Use devices that require updates to be signed by the device vendor instead of (or in addition to) the cellular carrier." can also delete the "iOS updates are signed by Apple.." countermeasure as this countermeasure is a generalization of it. Justification: Workshop suggestion