Threat DB.O.DSPDFVDB.6.2

URI: DB.O.DSPDFVDB.6.2

Description: Data service Process overloaded by decryption of data Data for Service: since data Data stored on Host is encrypted with keys from Vault, query processing by Service will require decryption of a large volume of data. The resulting computational overhead may overload the data server Process.

Threat Type: Secondary Threat

Matching Pattern:

MP-DSPDFVDB

Finds a DB serving data obtained via a data flow from a remote data store, where the stored data is encrypted with keys from a vault.

DS.Y.HDS-V.8

Stored copy of Data on Host is unencrypted: which means this copy is not available for encrypted access.

H.O.HP-iT.0

Effect of overload at process Process on Host: if the process Process is overloaded, it may cause an overload on its host Host.

P.A.HP-iT.6

Effect of overload at low priority process Process: the priority of process Process may be reduced to prevent it from overloading its host Host, but in that case Process may become unavailable even if Host is not.

(empty)

Overloaded at Role_Process

CSG-ParquetDataEncryption

Database service Service stores data using Parquet format, enabling it to run queries by selective decryption of the stored data Data, whether this is done locally or at a remote data store. This imposes far less overheads, as the amount of data that must be decrypted is small.

Threat DB.O.DSPDFVDB.6.2

MP-DSPDFVDB

Triggered by Threat (1)

DS.Y.HDS-V.8

Triggers Secondary Threats (2)

H.O.HP-iT.0

P.A.HP-iT.6

Triggered By Control Strategy (0)

Misbehaviour Sets (1)

Control Strategies (1)