What are the Common Threats?
Registration
Broadly speaking, there are three types of attacks in the registration process
Impersonation
the attacker obtains a credential in another person's name, where the subject person can be targeted or untargeted.
Fictitious Subscriber
the attacker claims the identity of a non-existent person with the goal to creating a subscriber relationship.
Rogue Registration Entity
an internal abuse of trusted position to create or obtain credentials as a potential subscriber or a non-existent person.


|