Threat DF.C.ACDF-VTS-i.3.6

URI: DF.C.ACDF-VTS-i.3.6

Package: ProcessComms

< prev | next >

Description: Compromised service Service reads the encrypted flow of Data from/via Client: if an attacker can compromise service Service, they can they can access its cryptographic key and read data Data flowing to Service from FlowsFrom.

Threat Type: Primary Threat

Matching Pattern:

MP-ACDF-VTS-i

Finds a data flow not encrypted with keys from a vault, flowing to a service from/via a client, plus the data, data access and any data fields, and the associated channel, where the connection is direct and not via any credential-sharing intermediaries.

Triggers Secondary Threats (2)

Co.C.CoPD.0

Data leakage at controller Controller: if the control input data for a controller leaks, it is modelled as a loss of confidentiality for the controller.

Se.C.SePD.0

Data leakage at sensor Sensor: if the onboard data at a sensor leaks, it is modelled as a loss of confidentiality at the sensor.