Matching ACDF-VCS-i

URI: MP-ACDF-VCS-i

Package: ProcessComms

< prev | next >

Description: Finds a data flow not encrypted with keys from a vault, that goes via a client and thence a service, plus any data fields, and the related channel, where the connection is direct and not via any credential-sharing intermediaries.

Root Pattern: R-CCDFCS

R-CCDFCS

Finds a data flow that goes via a client and thence via a service, plus the related client channel and data.

Threat Patterns (1)

DF.C.ACDF-VCS-i.3.1

Compromised service Service reads the flow of data Data from FlowsFrom to FlowsTo sent from Client: if an attacker can compromise or impersonate service Service, they can read data in messages from Client.