risk
Acceptance of data from untrustworthy sources
Injection or acceptance of data from untrusted or malicious sources (including position-detection/tracking data) causes incorrect processing or decisions and can seed downstream integrity loss.
Record JSON · Open in map · Data retrieval guide
Catalog revision: f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e. A connection does not establish full coverage.
Attributes
- category
- cyber_security
- domain
- Network & Communications Security
- Secure Development (SDLC) & Application Security
- taxonomy
- iso-27005-threat
- nist-800-30-threat-event
- inherent_rating
- medium
Details
- risk_id
- net-untrustworthy-input-data
- category
- cyber_security
- likelihood
- medium
- impact
- medium
- inherent_rating
- medium
- treatment
- mitigate
- taxonomies
- iso-27005-threat
- nist-800-30-threat-event
Source
No record-specific source URL is provided.
Connections
- UC-NET-07 — Secure name resolution and time services mitigates Acceptance of data from untrustworthy sources
- strength
- primary
- rationale
- DNSSEC data-origin authentication and integrity validation in resolvers prevent acceptance of spoofed or cache-poisoned name-resolution data.
- UC-NET-13 — Control mobile code and web content mitigates Acceptance of data from untrustworthy sources
- strength
- related
- rationale
- Category/reputation web filtering and mobile-code control reduce acceptance and execution of content from untrustworthy sources.
- UC-NET-14 — Enforce policy on cross-domain information exchange mitigates Acceptance of data from untrustworthy sources
- strength
- related
- rationale
- Binding and enforcing security/privacy attribute labels and permitted data types filters unauthorized/untrusted data crossing domains.
- UC-SDLC-03 — Define and approve security requirements for applications mitigates Acceptance of data from untrustworthy sources
- strength
- related
- rationale
- Requiring input/output-handling requirements sets the validation obligations that UC-05 then operates at trust boundaries.
- UC-SDLC-05 — Enforce secure coding and input validation standards mitigates Acceptance of data from untrustworthy sources
- strength
- primary
- rationale
- Validating all inputs for syntax/semantics/type/length/range at trust boundaries rejects malicious or untrusted data.