Control Strategy EncryptedDataProcessing

URI: CSG-EncryptedDataProcessing

Description: Process Process uses homomorphic encryption technology to perform calculations on data Data in an encrypted domain, allowing it to process the data without first decrypting.

(empty)

DF.A.HPDF-VDI.6

Process Process cannot consume encrypted data Data from FlowsFrom: the flow of Data from FlowsFrom to Process is encrypted, so it cannot be consumed without a key.

DF.A.HPDODF-V.6.1

Process Process cannot encrypt output Data for transmission to FlowsTo: the flow of output data Data from Process to FlowsTo should be encrypted, but Process has no means to encrypt the data before sending it.

DS.A.HPDOcDS-V.6

Process Process cannot create encrypted data Data: if the local copy of Data is encrypted, then process Process that creates the data will be unable to store that copy unless it has a key or can produce the data in the encrypted domain.

DS.Auth.HPsACdpDS-V.1

Use of Process to alter Data on Host: someone with the rights of Process on its host device Host can exploit the rights of Process to process and update the locally stored copy of Data.

DS.C.HPsACrpDS-V.1

Use of Process to access Data stored on Host: someone with the rights of Process on its host device Host can exploit the rights of Process to read and process the locally stored copy of Data.

DS.T.HPDOuDS-V.6

Process Process cannot update encrypted data Data stored on Host: if the local copy of Data on Host is encrypted, then process Process that creates the data will be unable to save updates unless it has a key or can produce the data in the encrypted domain, so this copy of Data will become out of date.

P.A.HPuDS-VDI.6

Process Process cannot read encrypted input Data stored on Host: the stored copy of input Data at Host is encrypted, and the process does not have a key.

P.T.HP-uDS-VDI.6

Process Process cannot read encrypted input Data: the stored copy of input Data at Host is encrypted, so if the process lacks a key and cannot read updates of the data, it will be forced to work using outdated inputs.

DS.C.HPsACrpDS-V.2

Use of Process to access Data on stolen device Host: if an attacker can access Process on stolen device Host, they can use the rights of Process to read a local stored copy of Data.

DS.Auth.HPsACdpDS-V.4

Attacker exploit at Process alters output Data stored on Host: the attacker exploits a vulnerability in process Process and is able to alter the stored copy of Data updated by the process on its host device Host.

DS.C.HPsACrpDS-V.4

Attacker exploit at Process accesses its input Data: the attacker is able to exploit a vulnerability in process Process, gaining access to the stored copy of Data used by the process on its host device Host.

DF.A.HPDODF-V.6.2

Process Process cannot decrypt output Data computed in the encrypted domain: the flow of output data Data from Process to FlowsTo should be decrypted, but process Process computed it in an encrypted domain (using a secure computation method such as homomorphic encryption) and has no means to decrypt the result before sending it.

DS.A.HPsACDOdDS-V.6

Process Process cannot create decrypted output data Data: if the local copy of Data is sypposed to be decrypted, then process Process creating the data in the encrypted domain will be unable to store the output.

P.E.DAVPDA.9

Process Process should not consume Databy using homomorphic encryption: the serialised form of Data is encrypted using a shared key controlled by Vault, so it makes no sense to process this data in the encrypted domain. The domain model does not support such an arrangement.

P.E.HuirPD.9

Inappropriate use of encrypted domain processing of Data at Process: Process is interactive, so user Human will need to work with data Data, which means the processing cannot be done in the encrypted domain. To fix this error, deselect encrypted processing controls.

P.E.PDADAV.9

Process Process should not produce Databy using homomorphic encryption: the serialised form of Data is encrypted using a shared key controlled by Vault, so it makes no sense to process this data in the encrypted domain. The domain model does not support such an arrangement.

P.O.DA-VPpDA.6

Encrypted processing of input Data by Process causes overload: if Process performs calculations in the encrypted domain, the performance overhead will be significant.

P.O.PpDADA-V.6