misappropriation

A type of threat action whereby an entity assumes unauthorized logical or physical control of a system resource. (See: usurpation.)

Usage: This type of threat action includes the following subtypes:

• Theft of data: Unauthorized acquisition and use of data contained in a system.
• Theft of service: Unauthorized use of a system service.
• Theft of functionality: Unauthorized acquisition of actual hardware, firmware, or software of a system component.