NIST SP 800-53 rev5 · Identification and Authentication
IA-3 Device Identification and Authentication
Mitigates 8 ATT&CK techniques, used by 3 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Weaknesses it helps against
Through the techniques typically used to exploit them (CTID, CISA KEV).
Techniques it mitigates
- T1530Data from Cloud Storage10 users
- T1552.005Unsecured Credentials: Cloud Instance Metadata API7 users
- T1552Unsecured Credentials6 users
- T1537Transfer Data to Cloud Account3 users
- T1621Multi-Factor Authentication Request Generation3 users
- T1602.002Data from Configuration Repository: Network Device Configuration Dump2 users
- T1602.001Data from Configuration Repository: SNMP (MIB Dump)1 users
- T1602Data from Configuration Repository0 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.