Threat DF.C.ACDFVFS-i.3.6

URI: DF.C.ACDFVFS-i.3.6

Package: ProcessComms

< prev | next >

Description: Encrypted flow of data Data from FlowsFrom leaked to false client of compromised service Service: if service Service is compromised by an attacker, they can access its cryptographic key to decrypt data and accept a request for it from a false client acting as Client.

Threat Type: Primary Threat

Matching Pattern:

MP-ACDFVFS-i

Finds a data flow encrypted with keys from a vault flowing from a service to/via a client, plus any data fields, and the associated client channel, where the connection is direct.

Triggers Secondary Threats (2)

Co.C.CoPD.0

Data leakage at controller Controller: if the control input data for a controller leaks, it is modelled as a loss of confidentiality for the controller.

Se.C.SePD.0

Data leakage at sensor Sensor: if the onboard data at a sensor leaks, it is modelled as a loss of confidentiality at the sensor.