Could the design be inadequate?

[Kr0nox]

Could the design be inadequate?

Description

Requirements cannot be fully satisfied or include latent behaviors.

Literature Reference

Classifications

Category	Option
Location	Behavior
Architectural Element Type	Component
Type	Scenario Uncertainty
Manageability	Irreducible
Resolution Time	Design Time
Reducible by ADD	Yes
Impact on Confidentiality	Direct
Severity of the Impact	High

Keywords

Human Error, Assumptions

Example

Inadequate design breaks with the security by design principle, e.g., because data is stored centrally with a lack of proper measures against theft and manipulation.

Related Uncertainties

Children:

#68, #35

Related Uncertainties:

#70, #78