Threat DF.C.ACDFVTS-i.3.6

URI: DF.C.ACDFVTS-i.3.6

Package: ProcessComms

< prev | next >

Description: Compromised service Service reads the encrypted flow of Data from/via Client: if an attacker can compromise service Service, they can they can access its cryptographic key and read data Data flowing to Service from FlowsFrom.

Threat Type: Primary Threat

Matching Pattern:

MP-ACDFVTS-i

Finds a data flow encrypted with keys from a vault, flowing to a service from/via a client, plus any data fields, the data access, and the associated client channel, where the connection is direct and not via any credential-sharing intermediaries.

Triggers Secondary Threats (2)

Co.C.CoPD.0

Data leakage at controller Controller: if the control input data for a controller leaks, it is modelled as a loss of confidentiality for the controller.

Se.C.SePD.0

Data leakage at sensor Sensor: if the onboard data at a sensor leaks, it is modelled as a loss of confidentiality at the sensor.