Matching ACDFVFS-i

URI: MP-ACDFVFS-i

Description: Finds a data flow encrypted with keys from a vault flowing from a service to/via a client, plus any data fields, and the associated client channel, where the connection is direct.

Root Pattern: R-ACDFVFS

R-ACDFVFS

Finds a data flow encrypted with keys from a vault, flowing from a service to/via a client, and the associated channel, data and data access. Note that roles FlowsFrom and Service are matched by the same asset(s). Having two roles makes it possible to create links to control strategies using either role name.

(empty)

DF.Auth.ACDFVFS-i.3.6

Encrypted flow of data Data to FlowsTo altered by compromised service Service: if an attacker can compromise service Service, they can access its cryptographic key and alter data Data flowing between Service and FlowsTo.

DF.C.ACDFVFS-i.3.6

Encrypted flow of data Data from FlowsFrom leaked to false client of compromised service Service: if service Service is compromised by an attacker, they can access its cryptographic key to decrypt data and accept a request for it from a false client acting as Client.

Matching ACDFVFS-i

R-ACDFVFS

Construction Patterns (0)

Threat Patterns (2)

DF.Auth.ACDFVFS-i.3.6

DF.C.ACDFVFS-i.3.6