Matching ACDF-VSC-i

URI: MP-ACDF-VSC-i

Package: ProcessComms

< prev | next >

Description: Finds a data flow not encrypted with keys from a vault, that goes via a service and thence a client, and the related channel and any data fields, where the connection is direct and not via any credential-sharing intermediaries.

Root Pattern: R-ACDFSC

R-ACDFSC

Finds a data flow that goes via a service and thence a client, and the related auth channel and data.

Threat Patterns (2)

DF.Auth.ACDF-VSC-i.3.1

Flow of data Data from FlowsFrom to FlowsTo altered by compromised service Service: if an attacker can compromise service Service, they can they can inject fake data via messages to Client.

DF.C.ACDF-VSC-i.3.2

Flow of data Data from FlowsFrom to FlowsTo leaked to false client of compromised service Service: if service Service is compromised by an attacker, they can allow a false client to request data by acting as Client.