Matching ACDF-VTS-i

URI: MP-ACDF-VTS-i

Package: ProcessComms

< prev | next >

Description: Finds a data flow not encrypted with keys from a vault, flowing to a service from/via a client, plus the data, data access and any data fields, and the associated channel, where the connection is direct and not via any credential-sharing intermediaries.

Root Pattern: R-ACDFTS

R-ACDFTS

Finds a data flow to a service from/via a client, and the associated channel, data and data access. Note that roles FlowsTo and Service are matched by the same asset(s). Having two roles makes it possible to create links to control strategies using either role name.

Threat Patterns (1)

DF.C.ACDF-VTS-i.3.6

Compromised service Service reads the encrypted flow of Data from/via Client: if an attacker can compromise service Service, they can they can access its cryptographic key and read data Data flowing to Service from FlowsFrom.