CAPEC Definitions
CAPEC Definitions / CAPEC-609
CAPEC-609: Cellular Traffic Intercept
Cellular traffic for voice and data from mobile devices and retransmission devices can be intercepted via numerous methods. Malicious actors can deploy their own cellular tower equipment and intercept cellular traffic surreptitiously. Additionally, government agencies of adversaries and malicious actors can intercept cellular traffic via the telecommunications backbone over which mobile traffic is transmitted.
Severity:Low
Possibility:
Extended Description
No Extended Description.
Mitigations
Encryption of all data packets emanating from the smartphone to a retransmission device via two encrypted tunnels with Suite B cryptography, all the way to the VPN gateway at the datacenter.
Relationships with other CAPECs
CAPEC-157: Sniffing Attacks
Prerequisites
None
Related Weaknesses
CWE-311: Missing Encryption of Sensitive Data
