Threat DS.X.HDS-V.6

URI: DS.X.HDS-V.6

Package: DataLifecycle

< prev | next >

Description: Stored copy of Data on Host is encrypted: which means this copy is not available for unencrypted access.

Threat Type: Primary Threat

Matching Pattern:

DS.X.HDS-V.6
MP-HDS-V

Finds a copy of Data not encrypted with a key from a vault, stored on a Host, and the Physical Host where this is deployed.

        (empty)

DS.X.HDS-V.6
DB.A.HDBsD-V.6

Database Service cannot process queries on encrypted data Data stored on Host: the stored copy of input Data at Host is encrypted. While a database can serve encrypted data, it cannot process a query based on data values without some means of access.
DS.X.HDS-V.6
DB.O.DSPDFVDB.6.1

Database service Service overloaded by decryption of data Data from Process: since data Data stored on Host is encrypted with keys from Vault, query processing by Service will require retrieval and decryption of a large volume of data. The resulting computational overhead may overload database service Service.
DS.X.HDS-V.6
DB.O.DSPDF-VDB.6.1

Database service Service overloaded by decryption of data Data from Process: since data Data stored on Host is encrypted, query processing by Service will require retrieval and decryption of a large volume of data. The resulting computational overhead may overload database service Service.
DS.X.HDS-V.6
DB.O.HDBsDV.6

Database service Service overloaded by cryptographic overheads: the stored copy of Data on device Host is encrypted with keys from Vault, so the database service Service has to decrypt entire tables to run queries, making query processing inefficient.
DS.X.HDS-V.6
DB.O.HDBsD-V.6

Database service Service overloaded by cryptographic overheads: the stored copy of Data on device Host is encrypted, so the database service Service has to decrypt entire tables to run queries, making query processing inefficient.
DS.X.HDS-V.6
DF.A.HPDS-VDADF.6

Service Process cannot decrypt data Data for transmission to FlowsTo: the stored copy of Data on Host is encrypted, but FlowsTo expects an unencrypted version, and Process has no means to decrypt the data before sending it.
DS.X.HDS-V.6
DS.A.HPDOcDS-V.6

Process Process cannot create encrypted data Data: if the local copy of Data is encrypted, then process Process that creates the data will be unable to store that copy unless it has a key or can produce the data in the encrypted domain.
DS.X.HDS-V.6
DS.A.HPsACDOdDS-V.6

Process Process cannot create decrypted output data Data: if the local copy of Data is sypposed to be decrypted, then process Process creating the data in the encrypted domain will be unable to store the output.
DS.X.HDS-V.6
DS.T.HPDOuDS-V.6

Process Process cannot update encrypted data Data stored on Host: if the local copy of Data on Host is encrypted, then process Process that creates the data will be unable to save updates unless it has a key or can produce the data in the encrypted domain, so this copy of Data will become out of date.
DS.X.HDS-V.6
P.A.HPuDS-VDI.6

Process Process cannot read encrypted input Data stored on Host: the stored copy of input Data at Host is encrypted, and the process does not have a key.
DS.X.HDS-V.6
P.T.HP-uDS-VDI.6

Process Process cannot read encrypted input Data: the stored copy of input Data at Host is encrypted, so if the process lacks a key and cannot read updates of the data, it will be forced to work using outdated inputs.

        (empty)