Control Strategy DataFlowSharedKeyInbound

URI: CSG-DataFlowSharedKeyInbound

Package: DataLifecycle

< prev | next >

Description: The data Data flowing between processes FlowsFrom and FlowsTo is encrypted end-to-end (i.e. not relying on transport level encryption), and FlowsTo has the key needed to decrypt the data on arrival.

Triggers Threats (2)

DF.C.AC-iDF-VTC.2.6

Client Client on stolen host CHost reads the encrypted flow of Data from/via Service: if an attacker has possession of host CHost and can access client Client, they can they can access its cryptographic key and read data Data flowing to Client from FlowsFrom.

DF.C.AC-iDF-VTC.3.6

Compromised client Client reads the encrypted flow of Data from/via Service: if an attacker can compromise client Client, they can they can access its cryptographic key and read data Data flowing to Client from FlowsFrom.