IT Baseline Protection Manual - The Information Warfare Site

Threats Catalogue Deliberate Acts Remarks
____________________________________________________________________ .........................................
T 5.24 Replay of messages
In this form of attack, an aggressor records a message and replays it
unchanged at a later time.
Examples
- An adversary records the authentication data (e.g. user ID and
password) during a user's logon dialogue and uses this information to
obtain access to a system by feigning a false identity (see also T 5.21 -
Trojan horses).
- An employee places an authorised order several times with the intention
of causing financial loss to his employer.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000