Threat DB.O.HDBsDV.6

URI: DB.O.HDBsDV.6

Package: DataLifecycle

< prev | next >

Description: Database service Service overloaded by cryptographic overheads: the stored copy of Data on device Host is encrypted with keys from Vault, so the database service Service has to decrypt entire tables to run queries, making query processing inefficient.

Threat Type: Secondary Threat

Matching Pattern:

DB.O.HDBsDV.6
MP-HDBsDV

Finds a Host running a Database process that serves a stored DataCopy encrypted with keys from a vault, and the associated DataPool.

        (empty)

        (empty)

CSG-ParquetDataEncryption

Database service Service stores data using Parquet format, enabling it to run queries by selective decryption of the stored data Data, whether this is done locally or at a remote data store. This imposes far less overheads, as the amount of data that must be decrypted is small.