Threat P.E.PDO+DS-S.9

URI: P.E.PDO+DS-S.9

Package: DataLifecycle

< prev | next >

Description: Process Process cannot save data Data: process Process produces Data as output (or gets it from an interactive user), and Data is stored on at least one host. However, there is no way for Process to send new values for storage to a process on that host with access to the data, either directly or via other processes. You should add one or more process-process uses relationships (and possibly processes) to the model so a continuous path exists between such a process and Process.

Threat Type: Primary Threat

Matching Pattern:

MP-PDO+DS-S

Finds a Process that creates Data as output, or gets it from an interactive user, where there is at least one stored copy of the data, but there is no process that enables and controls access.