Control Strategy DataServiceKey

URI: CSG-DataServiceKey

Description: Process Service has a key for encrypting or decrypting data Data.

(empty)

DB.A.DBsDRDF-V.6

Database Service cannot process queries on encrypted data Data accessed via FlowsFrom: the flow of data Data supplied by FlowsFrom is encrypted. While a database can serve encrypted data, it cannot process a query based on data values without some means of access.

DB.A.HDBsD-V.6

Database Service cannot process queries on encrypted data Data stored on Host: the stored copy of input Data at Host is encrypted. While a database can serve encrypted data, it cannot process a query based on data values without some means of access.

DB.O.DSPDF-VDB.6.1

Database service Service overloaded by decryption of data Data from Process: since data Data stored on Host is encrypted, query processing by Service will require retrieval and decryption of a large volume of data. The resulting computational overhead may overload database service Service.

DB.O.DSPDF-VDB.6.2

Data service Process overloaded by decryption of data Data for Service: since data Data stored on Host is encrypted, query processing by Service will require decryption of a large volume of data. The resulting computational overhead may overload the data server Process.

DB.O.HDBsD-V.6

Database service Service overloaded by cryptographic overheads: the stored copy of Data on device Host is encrypted, so the database service Service has to decrypt entire tables to run queries, making query processing inefficient.

AccessKey at Role_DataAccess

Control Strategy DataServiceKey

Mitigated Threats (0)

Blocked Threats (2)

DB.A.DBsDRDF-V.6

DB.A.HDBsD-V.6

Triggers Threats (3)

DB.O.DSPDF-VDB.6.1

DB.O.DSPDF-VDB.6.2

DB.O.HDBsD-V.6

Control Sets (1)