[A.9] [Re-]routing of messages

Types of assets:

·         [S] services

·         [SW] software

·         [COM] communication networks

Dimensions:

1.   [C] confidentiality

Description:

The sending of information to an incorrect destination via a system or network, with information passing through or reaching the incorrect place. These may be messages between persons, between processes or between both.

An attacker may force a message to travel through a specific node in the network where it can be intercepted.

Particularly notable is the case in which the routing attack causes a fraudulent delivery, with the information reaching the hands of an unauthorised person.

See:

EBIOS: not available