Misbehaviour NotEncrypted

URI: NotEncrypted

Description: An adverse behaviour of stored or flowing copies of data, signifying that the copy is not available in an encrypted form. Considered as an adverse effect as it means confidentiality could be breached without compromising a decryption key, and used to model side effects of encryption controls.

This misbehaviour affects the trustworthiness attribute Encrypted

DataAsset

A base class for all assets representing Data. Used partly to provide a classifier for the palette.

DF.Y.PDF-V.8

Flow of Data from FlowsFrom to Process is unencrypted: which means the inflowing copy of the data is not available for encrypted access.

DS.Y.HDS-V.8

Stored copy of Data on Host is unencrypted: which means this copy is not available for encrypted access.

DB.O.DSPDFVDB.6.2

Data service Process overloaded by decryption of data Data for Service: since data Data stored on Host is encrypted with keys from Vault, query processing by Service will require decryption of a large volume of data. The resulting computational overhead may overload the data server Process.

DB.O.DSPDF-VDB.6.2

Data service Process overloaded by decryption of data Data for Service: since data Data stored on Host is encrypted, query processing by Service will require decryption of a large volume of data. The resulting computational overhead may overload the data server Process.

DF.A.HPDODF-V.6.2

Process Process cannot decrypt output Data computed in the encrypted domain: the flow of output data Data from Process to FlowsTo should be decrypted, but process Process computed it in an encrypted domain (using a secure computation method such as homomorphic encryption) and has no means to decrypt the result before sending it.

DF.A.HPDSDADF-V.6

Service Process cannot send unencrypted data Data to FlowsTo: because the stored copy of Data on Host is not encrypted, and FlowsTo expects an encrypted version, it is not possible for Process to send it without a key.

DF.A.PmDFIDADFI-k.6

Unencrypted data Data cannot be forwarded by Process to FlowsTo: if the flow of data Data to Process is not encrypted, it cannot be forwarded to FlowsTo which expects it to be encrypted.

DF.A.PmDFODADFO-k.6

DS.A.HPmDFDAcDS-k.6

Decrypted data Data cannot be stored on Host by Process: service Process manages storage of an encrypted copy of data Data, so if all flows of Data to Process are decrypted the stored copy cannot be created unless Process has an encryption key.

DS.T.HPDFDAuDS-V.6

Encrypted data Data stored on Host cannot be updated by Process with unencrypted input from FlowsFrom: process Process manages an encrypted stored copy of data Data on Host, so if the flows of updates from FlowsFrom is not encrypted, then Process cannot update this copy of Data without a key, so this copy will become out of date.

(empty)