Control Strategy AutoSuspendCorruptDataFlow.Implementation

URI: CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime

Package: CloudManagement

< prev | next >

Description: The flow of data Data from FlowsFrom to FlowsTo has been automatically disabled to prevent corrupt or malicious content (including malware) from disrupting the receipient FlowsTo. This strategy represents activation of a contingency plan at runtime, and can be enabled to discover what effect this would have on risk levels, allowing this to be used for decision support calculations. Activation at runtime requires FlowsTo to be managed by a suitable adaptation framework. The Disabled Data Flow control should be deselected if and when the flow of data is enabled once again.

        (empty)

CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
DF.Auth.PDFIDADFI.0

Unauthentic data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is unauthentic, so is the forwarded flow to FlowsTo.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
DF.Auth.PDFODADFO.0

Unauthentic data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is unauthentic, so is the forwarded flow to FlowsTo.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
DF.I.PDFIDADFI.0

Corrupt data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is corrupt, so is the forwarded flow to FlowsTo.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
DF.I.PDFODADFO.0

Corrupt data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is corrupt, so is the forwarded flow to FlowsTo.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
DF.W.PDFIDADFI.0

Infected data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is infected by malware, so is the forwarded flow to FlowsTo.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
DF.W.PDFODADFO.0

Infected data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is infected by malware, so is the forwarded flow to FlowsTo.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
DS.Auth.HPDFDADS.0

Flow of unauthentic data Data from FlowsFrom is stored by data service Process: if the flow of data Data from FlowsFrom to Process is unauthentic, then so will be the copy saved locally on device Host by Process.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
DS.I.HPDFDADS.0

Flow of corrupt data Data from FlowsFrom is stored by data service Process: if the flow of data Data from FlowsFrom to Process is corrupt, then so will be the copy saved locally on device Host by Process.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
DS.W.HPDFDADS.0

Flow of infected data Data from FlowsFrom is stored by data service Process: if the flow of data Data from FlowsFrom to Process is infected by malware, then so will be the copy saved locally on device Host by Process.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
P.U.P-iDFDI.0

Loss of reliability at process Process due to corrupt input Data from FlowsFrom: process Process uses the copy of Data sent by FlowsFrom as input so if this is corrupt, Process may become unreliable.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
P.U.P-iDFDI.3

Loss of reliability at process Process due to forged input Data: process Process uses the copy of Data sent by FlowsFrom as input so if this is forged by an attacker, Process may become unreliable.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
CC.AuC.DFsXSS.3

Stored XSS exploit against Client by Service injected via input Data from FlowsFrom: an attacker who can inject malicious content into input Data flowing to Service from FlowsFrom can exploit a bug in Service, and send a harmful script to a trusting client browser Client. We assume this will make the browser leak authentication credentials, such as a password or session key.
CSG-AutoSuspendCorruptDataFlow-Implementation-Runtime
P.W.HPDFDI.2

Infection of Process via malware in flow of Data from FlowsFrom: if the copy of Data received from FlowsFrom is infected with malware, process Process may become infected when it consumes the data as an input.