Matching AC-iDF-VFC

URI: MP-AC-iDF-VFC

Package: ProcessComms

< prev | next >

Description: Finds a data flow not encrypted by a key from a vault, flowing from a client to or via a service, and the associated auth channel which must not be to a trust intermediary, the data and data access, any data fields, and process contexts in which the data flows from the client (of which any can cause the threat). The source of the flow is matched twice, so it can be referred to by either role name (FlowsFrom or Client) in control strategies.

Root Pattern: R-ACDFFC

R-ACDFFC

Finds a data flow from a client to/via a service, and the associated auth channel, data and data access. The source and destination of the flow are matched twice, so they can be referred to by either role name in control strategies.

Threat Patterns (2)

DF.Auth.AC-iDF-VFC.3.6

Compromised client Client injects fake content into the encrypted flow of Data to/via Service: if an attacker can compromise client Client, they can access its cryptographic key and alter data Data flowing between Client and FlowsTo.

DF.Auth.AC-iDF-VFC.2.6

Client Client on stolen host CHost injects fake content into the encrypted flow of Data via Service: if an attacker has possession of host CHost and can access client Client, they can access its cryptographic key and inject malicious content into the flow of Data from Client to FlowsTo.