Matching ACDFVTS-i

URI: MP-ACDFVTS-i

Package: ProcessComms

< prev | next >

Description: Finds a data flow encrypted with keys from a vault, flowing to a service from/via a client, plus any data fields, the data access, and the associated client channel, where the connection is direct and not via any credential-sharing intermediaries.

Root Pattern: R-ACDFVTS

R-ACDFVTS

Finds a data flow encrypted with keys from a vault, flowing to a service from/via a client, and the associated channel, data and data access. Note that roles FlowsTo and Service are matched by the same asset(s). Having two roles makes it possible to create links to control strategies using either role name.

Threat Patterns (1)

DF.C.ACDFVTS-i.3.6

Compromised service Service reads the encrypted flow of Data from/via Client: if an attacker can compromise service Service, they can they can access its cryptographic key and read data Data flowing to Service from FlowsFrom.