Matching ACDF-VFS-i

URI: MP-ACDF-VFS-i

Description: Finds a data flow not encrypted with keys from a vault flowing from a service to/via a client, plus any data fields, and the associated channel, where the connection is direct.

Root Pattern: R-ACDFFS

R-ACDFFS

Finds a data flow from a service to/via a client, and the associated channel, data and data access. Note that roles FlowsFrom and Service are matched by the same asset(s). Having two roles makes it possible to create links to control strategies using either role name.

(empty)

DF.Auth.ACDF-VFS-i.3.6

Encrypted flow of data Data to FlowsTo altered by compromised service Service: if an attacker can compromise service Service, they can access its cryptographic key and alter data Data flowing between Service and FlowsTo.

DF.C.ACDF-VFS-i.3.6

Encrypted flow of data Data from FlowsFrom leaked to false client of compromised service Service: if service Service is compromised by an attacker, they can access its cryptographic key to decrypt data and accept a request for it from a false client acting as Client.

Matching ACDF-VFS-i

R-ACDFFS

Construction Patterns (0)

Threat Patterns (2)

DF.Auth.ACDF-VFS-i.3.6

DF.C.ACDF-VFS-i.3.6