[Prev]

2.9 Exposure threats

T91-Eavesdrop

Exposure of data due to network sniffing or eavesdropping. Counter measure: encrypt data and manage keys right.

T91-DBLeak

Exposure of data due to database files or transaction logs. Counter measure: encrypt data and manage keys right.

T92-TamperNet

Modification of data in transit. Counter measuers: signing or verification of a hash over the data.

T93-TamperDB

Modification of data in database.

T94-ExptLeak

Error condition or exception reveals too much data or system details (usually to aid debugging). Exception output that appears in user interface or over the network is especially damning. Leakage to logs is also a threat.

T95-CoreLeak

Error condition or exception causes a core dump that reveals too much data or system details (usually to aid debugging).


[Prev | Next]