Threat P.E.PccP.9

URI: P.E.PccP.9

Package: Network

< prev | next >

Description: Processes Client and Service cannot authenticate for each other: this forms a cyclic authentication dependency, which is a logical impossibility in a functioning system. This threat detects the presence of the simplest case (with two interdependent processes), but loops composed of more processes should also be avoided. This threat will appear twice per pair of processes as each processes will be matched to both roles in the threat.

Threat Type: Primary Threat

Matching Pattern:

MP-PccP

Finds two processes, each of which controls the other. This is the simplest case of a cyclic authentication dependency, which is a logical impossibility.