Threat DF.I.HPDSDADF.0

P.IS.HP.8

Process Process in service: if host Host is in service, then Process running on Host will also be in service and subject to attack, unless explicitly disabled.

P.IS.HPsAC.1

Process Process running on Host not disabled: if an attacker has the rights of Process on its host Host, then they can override a policy to disable Process by restarting it.

P.IS.HP.2

Process Process re-enabled on stolen device Host: if an attacker gains access to stolen device Host, they can restart Process, overriding the policy to disable Process.

DS.I.HPDFDADS.0

Flow of corrupt data Data from FlowsFrom is stored by data service Process: if the flow of data Data from FlowsFrom to Process is corrupt, then so will be the copy saved locally on device Host by Process.

DS.I.HP-iDS.0

Unreliable process Process corrupts locally stored copy of Data: if process Process is not reliable, it may accidentally corrupt a copy of Data stored on its host device Host, to which it has write access.

DS.I.HuirPiDS.0

User Human interacting with Process provides incorrect input Data: user Human provides incorrect input Data to Process, due to having previously received corrupt data from the system.

DF.I.PDFIDADFI.0

Corrupt data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is corrupt, so is the forwarded flow to FlowsTo.

DF.I.PDFODADFO.0

Corrupt data Data from FlowsFrom forwarded by Process to FlowsTo: if the flow of data Data from process FlowsFrom to process Process is corrupt, so is the forwarded flow to FlowsTo.

DS.I.HPDFDADS.0

Flow of corrupt data Data from FlowsFrom is stored by data service Process: if the flow of data Data from FlowsFrom to Process is corrupt, then so will be the copy saved locally on device Host by Process.

Hu.U.HuirPvDF.0

User Human affected by corrupt data Data from FlowsFrom received by Process: if the flow of data Data to Process is corrupt, and this is displayed to user Human, they may make decisions based on the incorrect information.

P.U.P-iDFDI.0

Loss of reliability at process Process due to corrupt input Data from FlowsFrom: process Process uses the copy of Data sent by FlowsFrom as input so if this is corrupt, Process may become unreliable.

Se.I.SePDsFF.0

Loss of integrity at sensor Sensor: if the onboard data received from a sensor by any client is corrupt, it is modelled as a loss of integrity at the sensor.

(empty)

LossOfIntegrity at Role_DataFlow

(empty)

Threat DF.I.HPDSDADF.0

MP-HPDSDADF

Triggered by Threat (6)

P.IS.HP.8

P.IS.HPsAC.1

P.IS.HP.2

DS.I.HPDFDADS.0

DS.I.HP-iDS.0

DS.I.HuirPiDS.0

Triggers Secondary Threats (6)

DF.I.PDFIDADFI.0

DF.I.PDFODADFO.0

DS.I.HPDFDADS.0

Hu.U.HuirPvDF.0

P.U.P-iDFDI.0

Se.I.SePDsFF.0

Triggered By Control Strategy (0)

Misbehaviour Sets (1)

Control Strategies (0)