Purpose

A User object represent a person that has the credentials to a certain UserAccount.

Connections

Object

Connection

Description

Function

UserAccount

Authentication

Represents a UserAccount owned by / belonging to the User.

Activates the probability of ExtractFromUser.

Attack Steps and Defenses

Defense

Description

Impact

Default

SecurityAware

Keeping employees and users Security Aware is crucial for the security of an organization (Schultz, 2004) which can be achieved by security- and awareness training.

Reduces the probability of ExtractFromUser.

Off

Attack Step

Description

ObtainCredentials

The possibility to get the contents of a Keystore from the User.


What’s Next