Threat DF.C.ACDF-VSC-i.3.2

URI: DF.C.ACDF-VSC-i.3.2

Package: ProcessComms

< prev | next >

Description: Flow of data Data from FlowsFrom to FlowsTo leaked to false client of compromised service Service: if service Service is compromised by an attacker, they can allow a false client to request data by acting as Client.

Threat Type: Primary Threat

Matching Pattern:

MP-ACDF-VSC-i

Finds a data flow not encrypted with keys from a vault, that goes via a service and thence a client, and the related channel and any data fields, where the connection is direct and not via any credential-sharing intermediaries.

Triggers Secondary Threats (2)

Co.C.CoPD.0

Data leakage at controller Controller: if the control input data for a controller leaks, it is modelled as a loss of confidentiality for the controller.

Se.C.SePD.0

Data leakage at sensor Sensor: if the onboard data at a sensor leaks, it is modelled as a loss of confidentiality at the sensor.