Threat DS.T.HPDFDAuDS.0

URI: DS.T.HPDFDAuDS.0

Description: Data Data stored on Host cannot be updated by Process with input from FlowsFrom: process Process manages a stored copy of data Data on Host, so if a flows of updates from FlowsFrom is not available, then Process cannot update this copy of Data which will become out of date.

Threat Type: Secondary Threat

Matching Pattern:

MP-HPDFDAuDS

Finds a Host running a Process that CRUD updates locally stored Data by saving an incoming Data Flow, plus optionally the host and process managers.

DF.A.PDF.6.2

Loss of availability from suspending the flow of unauthentic data Data from FlowsFrom to Process: if a contingency plan is used in which the flow of Data between FlowsFrom to Process is disabled if the data was subject to malicious tampering, then the flow of data Data from FlowsFrom to Process will become unavailable.

DF.A.HPDF-VDI.6

Process Process cannot consume encrypted data Data from FlowsFrom: the flow of Data from FlowsFrom to Process is encrypted, so it cannot be consumed without a key.

DF.A.HPDODF-V.6.1

Process Process cannot encrypt output Data for transmission to FlowsTo: the flow of output data Data from Process to FlowsTo should be encrypted, but Process has no means to encrypt the data before sending it.

DF.A.HPDODF-V.6.2

Process Process cannot decrypt output Data computed in the encrypted domain: the flow of output data Data from Process to FlowsTo should be decrypted, but process Process computed it in an encrypted domain (using a secure computation method such as homomorphic encryption) and has no means to decrypt the result before sending it.

DF.A.HPDSDADF.0

Service Process cannot serve unavailable data Data to FlowsTo: the locally stored copy of Data on Host used by Process is not available, so cannot be sent in a data flow to FlowsTo.

DF.A.HPDSDADF-V.6

Service Process cannot send unencrypted data Data to FlowsTo: because the stored copy of Data on Host is not encrypted, and FlowsTo expects an encrypted version, it is not possible for Process to send it without a key.

DF.A.HPDS-VDADF.6

Service Process cannot decrypt data Data for transmission to FlowsTo: the stored copy of Data on Host is encrypted, but FlowsTo expects an unencrypted version, and Process has no means to decrypt the data before sending it.

DF.A.PDF.6.1

Loss of availability in the disabled flow of data Data from FlowsFrom to Process: the flow of Data between FlowsFrom to Process has been disabled to maintain security or prevent a breach of regulations, but as a result the data flow is now unavailable.

DF.A.PDF.6.3

Loss of availability from suspending the flow of corrupt data Data from FlowsFrom to Process: if a contingency plan is used in which the flow of Data between FlowsFrom to Process is disabled if the data is corrupt, then the flow of data Data from FlowsFrom to Process will become unavailable.

DF.A.PDF.6.4

Loss of availability from suspending the flow of infected data Data from FlowsFrom to Process: if a contingency plan is used in which the flow of Data between FlowsFrom to Process is disabled if the data becomes infected with malware, then the flow of data Data from FlowsFrom to Process will become unavailable.

DF.A.PmDFIDADFI.0

Data Data cannot be forwarded by Process to FlowsTo because the incoming data flow is not available: if the flow of data Data to Process is unavailable, the flow of the same data from Process to FlowsTo will also be unavailable.

DF.A.PmDFIDADFI-k.6

Unencrypted data Data cannot be forwarded by Process to FlowsTo: if the flow of data Data to Process is not encrypted, it cannot be forwarded to FlowsTo which expects it to be encrypted.

DF.A.PmDFI-kDADFI.6

Encrypted data Data cannot be forwarded by Process to FlowsTo: if the flow of data Data to Process is encrypted, it cannot be forwarded to FlowsTo which expects it to be unencrypted.

DF.A.PmDFODADFO.0

DF.A.PmDFODADFO-k.6

DF.A.PmDFO-kDADFO.6

DF.A.DScSePDmFF.3

Malicious control of Sensor prevents generation of sensed output Data: if an attacker can tamper with the stored control inputs to sensor Sensor, they may be able to prevent measurement of the environment by Sensor.

DF.A.CCDFCS.6.3

Flow of data Data from FlowsFrom to FlowsTo via untrustworthy Service disabled: if the system operates a policy to disable the flow of data Data from FlowsFrom if there is a perceived loss of trustworthiness in a recipient Service, then there will also be a loss of availability if Service is untrustworthy.

DF.A.CCDFSC.6.3

Flow of data Data from FlowsFrom to FlowsTo via untrustworthy process Client disabled: if the system operates a policy to disable the flow of data Data from FlowsFrom if there is a perceived loss of trustworthiness in the recipient Client, then there will also be a loss of availability if Client is untrustworthy.

DF.A.CC-iDFCS.0

Flow of data Data from FlowsFrom to FlowsTo interrupted because Client cannot access Service: if client Client cannot access service Service, the end to end flow of data Data from FlowsFrom to FlowsTo that uses this client-service connection will be interrupted.

DF.A.CC-iDFC-SS.0

Flow of data Data from FlowsFrom to FlowsTo interrupted by unavailable process Client: if process Client is not available then it will be unable to initiate or forward the flow of Data between FlowsFrom to FlowsTo.

DF.A.CC-iDFSC.0

DF.T.HPDSDADF.0

Service Process serves an out of date stored copy of data Data to FlowsTo: if the locally stored copy of Data on Host served by Process is out of date, so will the flow of Data served to FlowsTo.

Hu.T.HuirPvDS.0.1

User Human affected by out of date data Data read by process Process: if a locally stored copy of Data is out of date, and this is loaded by process Process and displayed to user Human, they may make decisions based on the out of date information.

P.T.HP-iDSDI.0

Stale input Data stored at Host delays Process: since process Process uses the locally stored copy of data Data on Host, if that copy becomes out of date, Process will be processing out of date information.

Co.U.CoPDS.0.2

Loss of reliability due to out of date input at Controller: if the onboard data at a controller is out of date, it means the controller will not be reliable unless it does not require real-time updates to operate safely.

DF.I.DScSePDmFF.0.2

Out of date control input causes loss of integrity in output Data from Sensor: if the control input to Sensor is out of date, and Sensor depends on real-time updating of this input, then measurement of the environment by Sensor will be affected, leading to faulty or corrupt sensor output Data.

(empty)

LossOfTimeliness at Role_Data

LossOfTimeliness at Role_DataCopy