Threat DS.Y.HDS-V.8

URI: DS.Y.HDS-V.8

Description: Stored copy of Data on Host is unencrypted: which means this copy is not available for encrypted access.

Threat Type: Primary Threat

Matching Pattern:

MP-HDS-V

Finds a copy of Data not encrypted with a key from a vault, stored on a Host, and the Physical Host where this is deployed.

(empty)

DB.O.DSPDFVDB.6.2

Data service Process overloaded by decryption of data Data for Service: since data Data stored on Host is encrypted with keys from Vault, query processing by Service will require decryption of a large volume of data. The resulting computational overhead may overload the data server Process.

DB.O.DSPDF-VDB.6.2

Data service Process overloaded by decryption of data Data for Service: since data Data stored on Host is encrypted, query processing by Service will require decryption of a large volume of data. The resulting computational overhead may overload the data server Process.

DF.A.HPDSDADF-V.6

Service Process cannot send unencrypted data Data to FlowsTo: because the stored copy of Data on Host is not encrypted, and FlowsTo expects an encrypted version, it is not possible for Process to send it without a key.

(empty)

NotEncrypted at Role_DataCopy

CSG-DataStorageEncryption

The copy of Data stored on Host is encrypted.

Threat DS.Y.HDS-V.8

MP-HDS-V

Triggered by Threat (0)

Triggers Secondary Threats (3)

DB.O.DSPDFVDB.6.2

DB.O.DSPDF-VDB.6.2

DF.A.HPDSDADF-V.6

Triggered By Control Strategy (0)

Misbehaviour Sets (1)

Control Strategies (1)