Threat DF.A.CC-iDFC-SS.0

URI: DF.A.CC-iDFC-SS.0

Description: Flow of data Data from FlowsFrom to FlowsTo interrupted by unavailable process Client: if process Client is not available then it will be unable to initiate or forward the flow of Data between FlowsFrom to FlowsTo.

Threat Type: Secondary Threat

Matching Pattern:

MP-CC-iDFC-SS

Finds a data flow that goes via a client and thence via a service, plus the related client channel and data, where the client and service have a trust relationship w.r.t. the data flow (i.e., they are not intermediaries in an end-to-end credential sharing chain), and the client does not get the data from its own client. The last restriction is so related threats are not duplicated if the client also acts as a service when exchanging this data.

P.A.PcPuDS-V.6

Process Client cannot access input Data from Service due to inconsistent encryption: processes Client and Service both access a copy of Data stored in encrypted form, so they need a secure way to also share the cryptographic keys used.

DS.T.HPDFDAuDS.0

Data Data stored on Host cannot be updated by Process with input from FlowsFrom: process Process manages a stored copy of data Data on Host, so if a flows of updates from FlowsFrom is not available, then Process cannot update this copy of Data which will become out of date.

Hu.T.HuirPvDF.0.2

User Human affected by unavailable data Data from FlowsFrom received by Process: if the flow of data Data to Process is interrupted, that would have been displayed to user Human, they may make decisions based on the out of date information.

P.A.PuDFDI.0

Lack of incoming Data affects availability of Process: process Process depends on an incoming flow of Data from FlowsFrom, so if that is unavailable the availablity of the process will be affected.

P.T.P-uDFDI.0

Loss of availability in flow of Data to Process caused a delay in processing: since process Process uses the incoming copy of data Data but does not depend on it, if that copy is unavailable, the process can continue but will be processing out of date information.

Se.A.SePDmFF.0

Loss of availability at sensor Sensor: if the onboard data from a sensor is not available to any client, it is modelled as a loss of availability at the sensor.

(empty)

LossOfAvailability at Role_DataFlow

(empty)

Threat DF.A.CC-iDFC-SS.0

MP-CC-iDFC-SS

Triggered by Threat (1)

P.A.PcPuDS-V.6

Triggers Secondary Threats (5)

DS.T.HPDFDAuDS.0

Hu.T.HuirPvDF.0.2

P.A.PuDFDI.0

P.T.P-uDFDI.0

Se.A.SePDmFF.0

Triggered By Control Strategy (0)

Misbehaviour Sets (1)

Control Strategies (0)