Models the relationship between Threats, Weaknesses, and Countermeasures in a Component.
If we have a Component A with:
- a threat T inside
- a weakness W inside the threat T,
- a countermeasure C inside the weakness W.
We will have the following rows in this dataset:
Component |
Threat ID |
Weakness ID |
Countermeasure ID |
Mitigation |
---|---|---|---|---|
A |
T |
null |
null |
null |
A |
T |
W |
null |
null |
A |
T |
null |
C |
50 |
A |
T |
W |
C |
50 |
Exists an entry for the Threat, another for the Threat-Weakness, another for the Threat-Countermeasure, and another for the Threat-Weakness-Countermeasure. In the rows with Threat and Countermeasure, exists a mitigation value.
The most common use case is to retrieve the Threat and Countermeasure with Weakness null, to get the mitigation value.
Threat Model Field |
Description |
---|---|
Threat Model ID THREAT MODEL CONNECTOR |
The ID of the Threat Model. |
Project ID PROJECT CONNECTOR ONE OR MANY |
The ID of the Project NOT NULL |
Component ID COMPONENT CONNECTOR ONE OR MANY |
The ID of the Component NOT NULL |
Threat ID THREAT CONNECTOR ONE OR MANY |
The ID of the Threat NOT NULL |
Countermeasure ID COUNTERMEASURE CONNECTOR ONE OR MANY |
The ID of the Countermeasure NULL |
Threat Model Mitigation |
Mitigation percentage of the Countermeasure over the Threat NULL |
Comments
0 comments
Please sign in to leave a comment.