{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Network & Communications Security","Secure Development (SDLC) & Application Security"],"inherent_rating":"medium","taxonomy":["iso-27005-threat","nist-800-30-threat-event"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Anet-untrustworthy-input-data","description":"Injection or acceptance of data from untrusted or malicious sources (including position-detection/tracking data) causes incorrect processing or decisions and can seed downstream integrity loss.","details":{"category":"cyber_security","impact":"medium","inherent_rating":"medium","likelihood":"medium","risk_id":"net-untrustworthy-input-data","taxonomies":["iso-27005-threat","nist-800-30-threat-event"],"treatment":"mitigate"},"id":"risk:net-untrustworthy-input-data","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Anet-untrustworthy-input-data","sourceIds":["cobit-2019","iso-27001","nist-800-53"],"sourceUrl":null,"title":"Acceptance of data from untrustworthy sources","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:137db857c1c648f7bd5f985bb47bb4e196a8e7300be980cf414205f88981f8c4","properties":{"rationale":"DNSSEC data-origin authentication and integrity validation in resolvers prevent acceptance of spoofed or cache-poisoned name-resolution data.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-net-07-53c6774f.json","sourceId":"uc:UC-NET-07","targetDetailPath":"/data/v1/records/risk-net-untrustworthy-input-data-6465a381.json","targetId":"risk:net-untrustworthy-input-data","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:23cd16ef46145483264f61a0ea48082f172f55a13ee195e17c714293f6729bed","properties":{"rationale":"Category/reputation web filtering and mobile-code control reduce acceptance and execution of content from untrustworthy sources.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-net-13-df790edf.json","sourceId":"uc:UC-NET-13","targetDetailPath":"/data/v1/records/risk-net-untrustworthy-input-data-6465a381.json","targetId":"risk:net-untrustworthy-input-data","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2acaf0d9d3fdc7fe2c36a4447e7b431d9b006026d525f2dd18bc9b3e0e307d12","properties":{"rationale":"Binding and enforcing security/privacy attribute labels and permitted data types filters unauthorized/untrusted data crossing domains.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-net-14-bacae152.json","sourceId":"uc:UC-NET-14","targetDetailPath":"/data/v1/records/risk-net-untrustworthy-input-data-6465a381.json","targetId":"risk:net-untrustworthy-input-data","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:52871d5dd30821226535db87064fa54f93771eb29f08a37c98d9d7fde967b5e6","properties":{"rationale":"Requiring input/output-handling requirements sets the validation obligations that UC-05 then operates at trust boundaries.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-03-5de4daf8.json","sourceId":"uc:UC-SDLC-03","targetDetailPath":"/data/v1/records/risk-net-untrustworthy-input-data-6465a381.json","targetId":"risk:net-untrustworthy-input-data","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:83d5de37f0a872875b0e02b1b0dc95a2ca705a2d34b1e21a77ada399caa8c445","properties":{"rationale":"Validating all inputs for syntax/semantics/type/length/range at trust boundaries rejects malicious or untrusted data.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-sdlc-05-053afd62.json","sourceId":"uc:UC-SDLC-05","targetDetailPath":"/data/v1/records/risk-net-untrustworthy-input-data-6465a381.json","targetId":"risk:net-untrustworthy-input-data","type":"mitigates"}],"schemaVersion":1}