AD04 Data Loss By Cloud Application
| Context | Someone interacts with a cloud application |
| Problem | Data loss (modification) by the cloud application |
| Solution | Ensure data integrity of cloud infrastructure; Apply digital signatures; Apply data backup; Apply Data Loss Prevention (DLP); |
| References | R.19: Compromise service engine [ENISA]; Compromise service engine [QUIRC]; |
| Type | ns:type_ThreatPattern |
| Victim | su:comp_CloudApplication |
| Aggressor | su:comp_CloudApplication; su:comp_ExternalService; su:comp_RemoteUser |
| Aggr. role | ns:role_Client |
| STRIDE | ns:STRIDE_Tampering |
| Threat | ns:threat_txMessageIntegrityViolation; ns:threat_txCorruption |