Threat DS.Auth.HPsACdDSCCV.1

URI: DS.Auth.HPsACdDSCCV.1

Description: Use of Process to access Data stored on Host: someone with the rights of Process on its host device Host, and able to obtain a key from Vault can exploit the rights of Process to alter the locally stored copy of Data.

Threat Type: Primary Threat

Matching Pattern:

MP-HPsACdDSCCV

Finds a host running a Process with write/delete access (crudd) to a locally stored data copy, plus the data access asset representing the data deserialization, and a channel to a key vault that controls the stored data, plus any data fields included in the data copy and used by the process, the process access contexts (a non-unique sufficient match), and optionally the process host manager.

(empty)

DF.Auth.HPDSDADF.0

Service Process serves an unauthentic stored copy of data Data to FlowsTo: if the locally stored copy of Data on Host served by Process is unauthentic, so will the flow of Data served to FlowsTo.

Co.M.CoPDS.0

Loss of control due to compromised input at controller Controller: if the onboard data received by the onboard control process at a controller is not authentic, the attacker can assume control, which is represented as loss of control over the controller.

(empty)

LossOfAuthenticity at Role_Data

LossOfAuthenticity at Role_DataCopy

LossOfAuthenticity at Role_DataField

(empty)

Threat DS.Auth.HPsACdDSCCV.1

MP-HPsACdDSCCV

Triggered by Threat (0)

Triggers Secondary Threats (2)

DF.Auth.HPDSDADF.0

Co.M.CoPDS.0

Triggered By Control Strategy (0)

Misbehaviour Sets (3)

Control Strategies (0)