Threat DS.T.HPDF-VDAuDS.6

URI: DS.T.HPDF-VDAuDS.6

Package: DataLifecycle

< prev | next >

Description: Unencrypted data Data stored on Host cannot be updated by Process with encrypted input from FlowsFrom: process Process manages an unencrypted stored copy of data Data on Host, so if the flows of updates from FlowsFrom is encrypted, then Process cannot update this copy of Data without a key, so this copy will become out of date.

Threat Type: Secondary Threat

Matching Pattern:

MP-HPDF-VDAuDS

Finds a Host running a Process that CRUD updates locally stored Data, by saving an incoming Data Flow not encrypted with keys from a vault, plus optionally the host and process managers.

Triggered by Threat (2)

DF.X.PDFV.6

Flow of Data from FlowsFrom to Process is encrypted: which means the inflowing copy of the data is not available for unencrypted access.

DF.X.PDF-V.6

Flow of Data from FlowsFrom to Process is encrypted: which means the inflowing copy of the data is not available for unencrypted access.

Triggers Secondary Threats (5)

DF.T.HPDSDADF.0

Service Process serves an out of date stored copy of data Data to FlowsTo: if the locally stored copy of Data on Host served by Process is out of date, so will the flow of Data served to FlowsTo.

Hu.T.HuirPvDS.0.1

User Human affected by out of date data Data read by process Process: if a locally stored copy of Data is out of date, and this is loaded by process Process and displayed to user Human, they may make decisions based on the out of date information.

P.T.HP-iDSDI.0

Stale input Data stored at Host delays Process: since process Process uses the locally stored copy of data Data on Host, if that copy becomes out of date, Process will be processing out of date information.

Co.U.CoPDS.0.2

Loss of reliability due to out of date input at Controller: if the onboard data at a controller is out of date, it means the controller will not be reliable unless it does not require real-time updates to operate safely.

DF.I.DScSePDmFF.0.2

Out of date control input causes loss of integrity in output Data from Sensor: if the control input to Sensor is out of date, and Sensor depends on real-time updating of this input, then measurement of the environment by Sensor will be affected, leading to faulty or corrupt sensor output Data.