Threat DS.T.HPDAuDS.0

URI: DS.T.HPDAuDS.0

Description: Unavailable process Process cannot update stored copy of Data: if process Process is not available, then it cannot update a local stored copy of Data on Host, which will become out of date.

Threat Type: Secondary Threat

Matching Pattern:

MP-HPDAuDS

Finds a Host running a Process that CRUD updates locally stored Data, plus optionally the host and process managers.

P.A.HPuDSDI.0

Process Process cannot access copy of Data stored on Host: since process Process depends on having access to Data via a stored copy on its host device Host , if the stored copy is not available then the availability of Process will be affected.

P.A.HPuDS-VDI.6

Process Process cannot read encrypted input Data stored on Host: the stored copy of input Data at Host is encrypted, and the process does not have a key.

P.A.PuDFDI.0

Lack of incoming Data affects availability of Process: process Process depends on an incoming flow of Data from FlowsFrom, so if that is unavailable the availablity of the process will be affected.

P.A.HP.0

Loss of availability at Host affects Process: if device Host becomes unavailable, so will the process Process hosted there.

P.A.HP.1.1

Use of privileges at Host to control provisioning of Process: anyone who controls resource allocation for Host instances can do the same for instances of Process hosted by Host instances.

P.A.HP.6.1

Loss of availability in disabled process Process: if process Process has been disabled to prevent it being attacked, this will mean Process is no longer available.

P.A.HP-iT.1.3

Use of privileges at Process to control availability: anyone with local user rights (i.e. local control) of a process Process can shut it down. However, this does not prevent access where there are other instances of Process running on independent instances of Host.

P.A.HP-iT.5

Software bug crashes Process: a software bug in process Process causes it to crash, compromising availability.

P.A.HP-iT.6

Effect of overload at low priority process Process: the priority of process Process may be reduced to prevent it from overloading its host Host, but in that case Process may become unavailable even if Host is not.

P.A.HsACP.1.2

Use of rights at Host to control availability of Process : anyone with admin rights on device Host can shut down process Process. For mobile hosts, we assume the process can be permanently disabled, so access in any context is sufficient, causing Process to become unavailable in any context unless there are instances running on independent instances of class Host.

P.A.HuiHP.6

User Human cannot access device Host to operate Process: if access to device Host is restricted, and user Human lacks the means to gain access, they will be unable to log in and hence unable to interact with process Process.

P.A.HuiHPSP.6

User Human cannot access private space Space to operate Process: if access to space Space is restricted, and user Human lacks the means to gain access, they will be unable to log in to device Host and hence unable to interact with process Process.

P.A.HuirP.0

Unavailable Human affects Process: if user Human is unable to make decisions in their system role and interact with process Process, then it also will become unavailable.

P.A.HuirRACP.0

Unavailable remote access client RemoteAccessClient affects Process: because user Human accesses process Process via RemoteAccessClient, if RemoteAccessClient becomes unavailable then Human will be unable to interact with Process, rendering it non-operational.

P.A.HumHP-iT.6.2

Loss of availability through disabling vulnerable process Process: if process Process may be vulnerable to attack, and the contingency plan is that its host manager HostManager will disable Process to prevent adverse consequences, this may lead to a loss of availability.

P.A.HumHP-iT.6.4

Loss of availability through disabling infected process Process: if process Process may be infected by malware, and the contingency plan is that its host manager HostManager will disable Process to prevent adverse consequences, this may lead to a loss of availability.

P.A.HuirRACSPH.0

Loss of connectivity from Client to Service affects Process: because user Human interacts with Process via remote access client Client and the shell on SHost, if Client cannot connect to remote access service Service on SHost, Human will be unable to interact with Process which will be rendered non-operational.

P.A.HP-iT.4

Attacker exploit disables Process: the attacker exploits a vulnerability in the process Process and is able to crash it or otherwise prevent access to it.

DF.T.HPDSDADF.0

Service Process serves an out of date stored copy of data Data to FlowsTo: if the locally stored copy of Data on Host served by Process is out of date, so will the flow of Data served to FlowsTo.

Hu.T.HuirPvDS.0.1

User Human affected by out of date data Data read by process Process: if a locally stored copy of Data is out of date, and this is loaded by process Process and displayed to user Human, they may make decisions based on the out of date information.

P.T.HP-iDSDI.0

Stale input Data stored at Host delays Process: since process Process uses the locally stored copy of data Data on Host, if that copy becomes out of date, Process will be processing out of date information.

Co.U.CoPDS.0.2

Loss of reliability due to out of date input at Controller: if the onboard data at a controller is out of date, it means the controller will not be reliable unless it does not require real-time updates to operate safely.

DF.I.DScSePDmFF.0.2

Out of date control input causes loss of integrity in output Data from Sensor: if the control input to Sensor is out of date, and Sensor depends on real-time updating of this input, then measurement of the environment by Sensor will be affected, leading to faulty or corrupt sensor output Data.

(empty)

LossOfTimeliness at Role_Data

LossOfTimeliness at Role_DataCopy