Threat DF.X.PDF-V.6

URI: DF.X.PDF-V.6

Description: Flow of Data from FlowsFrom to Process is encrypted: which means the inflowing copy of the data is not available for unencrypted access.

Threat Type: Primary Threat

Matching Pattern:

MP-PDF-V

Change from: Finds a Data Flow protected by keys from a vault, plus the data flow source and destination processes. The destination process is matched twice so it can be referred to in either role.

(empty)

DB.A.DBsDRDF-V.6

Database Service cannot process queries on encrypted data Data accessed via FlowsFrom: the flow of data Data supplied by FlowsFrom is encrypted. While a database can serve encrypted data, it cannot process a query based on data values without some means of access.

DF.A.HPDF-VDI.6

Process Process cannot consume encrypted data Data from FlowsFrom: the flow of Data from FlowsFrom to Process is encrypted, so it cannot be consumed without a key.

DF.A.HPDODF-V.6.1

Process Process cannot encrypt output Data for transmission to FlowsTo: the flow of output data Data from Process to FlowsTo should be encrypted, but Process has no means to encrypt the data before sending it.

DS.T.HPDF-VDAuDS.6

Unencrypted data Data stored on Host cannot be updated by Process with encrypted input from FlowsFrom: process Process manages an unencrypted stored copy of data Data on Host, so if the flows of updates from FlowsFrom is encrypted, then Process cannot update this copy of Data without a key, so this copy will become out of date.

CSG-DataFlowEncryption

NotDecrypted at Role_DataFlow

(empty)

Threat DF.X.PDF-V.6

MP-PDF-V

Triggered by Threat (0)

Triggers Secondary Threats (4)

DB.A.DBsDRDF-V.6

DF.A.HPDF-VDI.6

DF.A.HPDODF-V.6.1

DS.T.HPDF-VDAuDS.6

Triggered By Control Strategy (1)

Misbehaviour Sets (1)

Control Strategies (0)