Threat DS.A.HPmDFDAcDS-k.6

URI: DS.A.HPmDFDAcDS-k.6

Package: DataLifecycle

< prev | next >

Description: Decrypted data Data cannot be stored on Host by Process: service Process manages storage of an encrypted copy of data Data, so if all flows of Data to Process are decrypted the stored copy cannot be created unless Process has an encryption key.

Threat Type: Primary Threat

Matching Pattern:

MP-HPmDFDAcDS-k

Finds a Host running a Process that CRUD creates locally stored Data not encryptable with keys from a vault from one or more incoming flows, plus optionally the host and process managers.

Triggers Secondary Threats (5)

D.A.DallDS.0

Loss of availability in all copies of Data: the system is supposed to store the data Data, so if there are no available stored copies, the system-level availability of Data is affected.

DF.A.HPDSDADF.0

Service Process cannot serve unavailable data Data to FlowsTo: the locally stored copy of Data on Host used by Process is not available, so cannot be sent in a data flow to FlowsTo.

Hu.T.HuirPvDS.0.2

User Human affected by out of date data Data read by process Process: if a locally stored copy of Data is unavailable, and this would have been loaded by process Process and displayed to user Human, they may make decisions based on out of date information.

P.A.HPuDSDI.0

Process Process cannot access copy of Data stored on Host: since process Process depends on having access to Data via a stored copy on its host device Host , if the stored copy is not available then the availability of Process will be affected.

P.T.HP-uDSDI.0

Lack of stored input Data at Host delays Process: since process Process uses the locally stored copy of data Data but does not depend on it, if that copy is unavailable, the process can continue but will be processing out of date information.