Threat DF.C.ACDF-VCS-i.3.1

URI: DF.C.ACDF-VCS-i.3.1

Package: ProcessComms

< prev | next >

Description: Compromised service Service reads the flow of data Data from FlowsFrom to FlowsTo sent from Client: if an attacker can compromise or impersonate service Service, they can read data in messages from Client.

Threat Type: Primary Threat

Matching Pattern:

MP-ACDF-VCS-i

Finds a data flow not encrypted with keys from a vault, that goes via a client and thence a service, plus any data fields, and the related channel, where the connection is direct and not via any credential-sharing intermediaries.

Triggers Secondary Threats (2)

Co.C.CoPD.0

Data leakage at controller Controller: if the control input data for a controller leaks, it is modelled as a loss of confidentiality for the controller.

Se.C.SePD.0

Data leakage at sensor Sensor: if the onboard data at a sensor leaks, it is modelled as a loss of confidentiality at the sensor.