Construction CScP-v+AA

URI: CP-CScP-v+AA

Package: ProcessCommsInference

< prev | next >

< prev | next > (by absolute priority)

Description: Finds a client using a service, where the service is controlled by another process that is not itself used by the service, i.e. the process is an OIDC-style authenticator. Adds relationships specifying that the client is redirected to the authenticator by the service, and does not authenticate directly with the service.

Priority: 7150

Iterate: True

Matching Pattern:

CP-CScP-v+AA
MP-CScP-v

Finds a client directly or indirectly accessing a service which is controlled by another process, where the three processes are not in a credential forwarding or sharing chain and there is no link to say the cilent uses the third process for authentication.