Data and Inference (DA)

Taxonomies › Care assistant › Data and Inference

Suit 08 of 9 · 8 threats, 2 of them life-safety · prefix DA

Data threats concern what the record reveals about a vulnerable person, and where its copies end up.

Scope: What the record reveals, where copies live and how long they last.

Table: Data and Inference (DA), 8 threats with their mitigation principles and design measures. The full text is in the PDF and Excel downloads on the care assistant taxonomy overview page.

Text version: every entry on this page is in the PDF and Excel downloads on the overview page, where it can be searched and copied.

The threats

  • EOC-DA-A Routine as Reconnaissance †
  • EOC-DA-K Evidence Against Them
  • EOC-DA-Q Missing Record †
  • EOC-DA-J Inferred Diagnosis
  • EOC-DA-10 Second Purpose
  • EOC-DA-9 Frailty Map
  • EOC-DA-8 Erasure That Doesn’t
  • EOC-DA-7 Copies That Linger

† marks a life-safety entry: one whose failure can leave someone without help when they need it.

Where this suit touches others

  • Resident and Data and Inference: the resident suit asks whether the watching is wanted; data and inference asks what the record says about them and who else can read it.
  • Data and Inference and Lifecycle: data covers what is kept and where; lifecycle covers what happens to it when the household, the device or the provider changes.

STRIDE, LINDDUN, CAPEC and CWE

Of the 8 entries here, STRIDE fits 2 cleanly and 4 only loosely, and none of its categories applies to 2. LINDDUN fits 6 cleanly and 1 only loosely, and has no category for 1. CAPEC 3.9 has only a generic parent pattern for 1 and has nothing for 7. CWE 5.0 names the weakness directly for 3, has only a broader weakness for 2 and has nothing for 3. All four frameworks miss 1 of them: no clean STRIDE or LINDDUN prompt, and no direct CAPEC or CWE match. The table below gives the mapping entry by entry, with the names of the CAPEC patterns and CWE weaknesses; what the mapping shows across the whole taxonomy is in Mapping the Care Assistant Threat Taxonomy to STRIDE, LINDDUN, CAPEC and CWE. The Excel, SKOS and STIX downloads carry the same mapping as text.

Table: STRIDE, LINDDUN, CAPEC and CWE mapping for Data and Inference (DA), 8 threats, with each entry's STRIDE and LINDDUN categories and fit, CAPEC 3.9 patterns and CWE 5.0 weaknesses. The full mapping is in the Excel, SKOS and STIX downloads on the care assistant taxonomy overview page.

← Resident (RE) · Care assistant overview · Lifecycle (LC) →

© 2026 Jonathan Brett Crawley. Licensed under CC BY-NC-ND 4.0 with additional permissions: see the licence on the care assistant overview.