Threat DF.I.DScSePDmFF.0.1

URI: DF.I.DScSePDmFF.0.1

Package: IoT

Description: Corrupt control input causes loss of integrity in output Data from Sensor: if the control input to Sensor is faulty or corrupt, then measurement of the environment by Sensor will be affected, leading to faulty or corrupt sensor output Data.

Threat Type: Secondary Threat

Matching Pattern:

MP-DScSePDmFF

Finds a Sensor with its onboard process and output data, and its stored copy of control input data, plus all flows of this data from the process (i.e., out of the sensor), all of which must be involved in the pattern.

DS.I.HPDFDADS.0

Flow of corrupt data Data from FlowsFrom is stored by data service Process: if the flow of data Data from FlowsFrom to Process is corrupt, then so will be the copy saved locally on device Host by Process.

DS.I.HP-iDS.0

Unreliable process Process corrupts locally stored copy of Data: if process Process is not reliable, it may accidentally corrupt a copy of Data stored on its host device Host, to which it has write access.

DS.I.HuirPiDS.0

User Human interacting with Process provides incorrect input Data: user Human provides incorrect input Data to Process, due to having previously received corrupt data from the system.

DF.I.PDFIDADFI.0

Corrupt data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is corrupt, so is the forwarded flow to FlowsTo.

DF.I.PDFODADFO.0

DS.I.HPDFDADS.0

Hu.U.HuirPvDF.0

User Human affected by corrupt data Data from FlowsFrom received by Process: if the flow of data Data to Process is corrupt, and this is displayed to user Human, they may make decisions based on the incorrect information.

P.U.P-iDFDI.0

Loss of reliability at process Process due to corrupt input Data from FlowsFrom: process Process uses the copy of Data sent by FlowsFrom as input so if this is corrupt, Process may become unreliable.

Se.I.SePDsFF.0

Loss of integrity at sensor Sensor: if the onboard data received from a sensor by any client is corrupt, it is modelled as a loss of integrity at the sensor.

(empty)

LossOfIntegrity at Role_DataFlow

(empty)

Threat DF.I.DScSePDmFF.0.1

MP-DScSePDmFF

Triggered by Threat (3)

DS.I.HPDFDADS.0

DS.I.HP-iDS.0

DS.I.HuirPiDS.0

Triggers Secondary Threats (6)

DF.I.PDFIDADFI.0

DF.I.PDFODADFO.0

DS.I.HPDFDADS.0

Hu.U.HuirPvDF.0

P.U.P-iDFDI.0

Se.I.SePDsFF.0

Triggered By Control Strategy (0)

Misbehaviour Sets (1)

Control Strategies (0)