Threat DF.C.AC-iDF-VCS.3.3

URI: DF.C.AC-iDF-VCS.3.3

Package: ProcessComms

< prev | next >

Description: Snooped flow of data Data from FlowsFrom to FlowsTo between Client and Service: if communications between Client and Service are subject to snooping, the snooper could read data Data flowing from FlowsFrom to FlowsTo.

Threat Type: Primary Threat

Matching Pattern:

MP-AC-iDF-VCS

Finds a data flow not encrypted with keys from a vault, that goes via a client and thence a service, plus any data fields, and the related auth channel, where the client and service have a trust relationship w.r.t. the data flow (i.e., they are not intermediaries in an end-to-end relationship).

Triggers Secondary Threats (2)

Co.C.CoPD.0

Data leakage at controller Controller: if the control input data for a controller leaks, it is modelled as a loss of confidentiality for the controller.

Se.C.SePD.0

Data leakage at sensor Sensor: if the onboard data at a sensor leaks, it is modelled as a loss of confidentiality at the sensor.