Fusa_Medini/ESL/commons/settings.cybersec

38 lines
7.9 KiB
XML
Raw Permalink Blame History

This file contains ambiguous Unicode characters!

This file contains ambiguous Unicode characters that may be confused with others in your current locale. If your use case is intentional and legitimate, you can safely ignore this warning. Use the Escape button to highlight these characters.

<?xml version="1.1" encoding="UTF-8"?>
<cybersecurity:SecurityConfiguration xmi:version="2.0" xmlns:xmi="http://www.omg.org/XMI" xmlns:cybersecurity="http://www.ikv.de/medini/cybersecurity" xmi:id="_UAACoM74EemH8PpOxVZSBg" mediniIdentifier="_UAACoM74EemH8PpOxVZSBg">
<securityAttributes xmi:id="_VLY3sM74EemH8PpOxVZSBg" mediniIdentifier="_VLY3sM74EemH8PpOxVZSBg" name="Confidentiality" description="Absence of unauthorized disclosure of information" source="CIA Triad / HEAVENS"/>
<securityAttributes xmi:id="_l4NOwM8CEemOvMGPpWSWoA" mediniIdentifier="_l4NOwM8CEemOvMGPpWSWoA" name="Integrity" description="Absence of improper system alternations" source="CIA Triad / HEAVENS"/>
<securityAttributes xmi:id="_l8D0AM8CEemOvMGPpWSWoA" mediniIdentifier="_l8D0AM8CEemOvMGPpWSWoA" name="Availability" description="Readiness for usage" source="CIA Triad / HEAVENS"/>
<securityAttributes xmi:id="_sNvNcM8CEemOvMGPpWSWoA" mediniIdentifier="_sNvNcM8CEemOvMGPpWSWoA" name="Authenticity" description="The property that an entity is what it claims to be" source="CIAA / HEAVENS "/>
<securityAttributes xmi:id="_KnpbsNYVEemme5in8-9nig" mediniIdentifier="_KnpbsNYVEemme5in8-9nig" name="Authorization" description="Access privileges granted to a user, program, or process" source="HEAVENS"/>
<securityAttributes xmi:id="_MdwBsNYVEemme5in8-9nig" mediniIdentifier="_MdwBsNYVEemme5in8-9nig" name="Non-Repudiation" description="The ability to prove the occurrence of a claimed event or action and its originating entities" source="HEAVENS"/>
<threatCategories xmi:id="_jG9qQNYVEemme5in8-9nig" mediniIdentifier="_jG9qQNYVEemme5in8-9nig" name="Spoofing" description="Attackers pretend to be someone or something else"/>
<threatCategories xmi:id="_32c9AM8CEemOvMGPpWSWoA" mediniIdentifier="_32c9AM8CEemOvMGPpWSWoA" name="Tampering" description="Attackers change data in transit or in a data store"/>
<threatCategories xmi:id="_m1i00NYVEemme5in8-9nig" mediniIdentifier="_m1i00NYVEemme5in8-9nig" name="Repudiation" description="Attackers perform actions that cannot be traced back to them"/>
<threatCategories xmi:id="_yhzzkM8CEemOvMGPpWSWoA" mediniIdentifier="_yhzzkM8CEemOvMGPpWSWoA" name="Information Disclosure" description="Attackers get access to data in transit or in data store"/>
<threatCategories xmi:id="_35uTcM8CEemOvMGPpWSWoA" mediniIdentifier="_35uTcM8CEemOvMGPpWSWoA" name="Denial of Service" description="Attackers interrupt a systems legitimate operation"/>
<threatCategories xmi:id="_qNmVwNYVEemme5in8-9nig" mediniIdentifier="_qNmVwNYVEemme5in8-9nig" name="Elevation of Privilege" description="Attackers perform actions they are not authorized to perform"/>
<componentTypes xmi:id="_s8BIYM8FEemRYOazSJC8YQ" mediniIdentifier="_s8BIYM8FEemRYOazSJC8YQ" name="Data Flow" description="Path for data to move from one part of the information system to another"/>
<componentTypes xmi:id="_txewwM8FEemRYOazSJC8YQ" mediniIdentifier="_txewwM8FEemRYOazSJC8YQ" name="Data Store" description="System must retain data because one or more processes need to use the stored data in a later time"/>
<componentTypes xmi:id="_SiRTcNYWEemme5in8-9nig" mediniIdentifier="_SiRTcNYWEemme5in8-9nig" name="Process" description="Receives input data and produces output with a different content or form"/>
<componentTypes xmi:id="_6mwgENYWEemme5in8-9nig" mediniIdentifier="_6mwgENYWEemme5in8-9nig" name="Interactor" description="End points of the system like the people, services and servers, generally data providers and consumers that are outside the scope of your system, but clearly related"/>
<componentTypes xmi:id="_7x1MENYWEemme5in8-9nig" mediniIdentifier="_7x1MENYWEemme5in8-9nig" name="Hardware Component"/>
<componentTypes xmi:id="_9CZcENYWEemme5in8-9nig" mediniIdentifier="_9CZcENYWEemme5in8-9nig" name="*" description="Anything else"/>
<stakeholderObjectives xmi:id="_WuX3sO9VEem4Cr4fVugTyA" mediniIdentifier="_WuX3sO9VEem4Cr4fVugTyA" name="Safety" description="Ensure the safety of vehicle occupants, other road users and infrastructures, e.g. prevent denial of use/service that can cause an accident" source="HEAVENS"/>
<stakeholderObjectives xmi:id="_9TMSgM8CEemOvMGPpWSWoA" mediniIdentifier="_9TMSgM8CEemOvMGPpWSWoA" name="Financial" description="Prevent negative financial impact, e.g. prevent damage to reputation, prevent insurance and warranty fraud" source="HEAVENS"/>
<stakeholderObjectives xmi:id="_653DoM8CEemOvMGPpWSWoA" mediniIdentifier="_653DoM8CEemOvMGPpWSWoA" name="Operational" description="Maintain the intended operational performance of all vehicle, system functions and related infrastructures" source="HEAVENS"/>
<stakeholderObjectives xmi:id="_8MskgM8CEemOvMGPpWSWoA" mediniIdentifier="_8MskgM8CEemOvMGPpWSWoA" name="Privacy and Legislation" description="Ensure the privacy of all relevant parties and to fulfill all relevant legislations, e.g. protect the privacy of vehicle drivers, vehicle owners and fleet owners" source="HEAVENS"/>
<attributeMappings xmi:id="_k2ImYM8FEemRYOazSJC8YQ" mediniIdentifier="_k2ImYM8FEemRYOazSJC8YQ" threatCategories="_yhzzkM8CEemOvMGPpWSWoA" securityAttribute="_VLY3sM74EemH8PpOxVZSBg"/>
<attributeMappings xmi:id="_ndRnwM8FEemRYOazSJC8YQ" mediniIdentifier="_ndRnwM8FEemRYOazSJC8YQ" threatCategories="_32c9AM8CEemOvMGPpWSWoA" securityAttribute="_l4NOwM8CEemOvMGPpWSWoA"/>
<attributeMappings xmi:id="_pv1gQM8FEemRYOazSJC8YQ" mediniIdentifier="_pv1gQM8FEemRYOazSJC8YQ" threatCategories="_35uTcM8CEemOvMGPpWSWoA" securityAttribute="_l8D0AM8CEemOvMGPpWSWoA"/>
<attributeMappings xmi:id="_uKheUNYVEemme5in8-9nig" mediniIdentifier="_uKheUNYVEemme5in8-9nig" threatCategories="_jG9qQNYVEemme5in8-9nig" securityAttribute="_sNvNcM8CEemOvMGPpWSWoA"/>
<attributeMappings xmi:id="_2WmH4NYVEemme5in8-9nig" mediniIdentifier="_2WmH4NYVEemme5in8-9nig" threatCategories="_m1i00NYVEemme5in8-9nig" securityAttribute="_MdwBsNYVEemme5in8-9nig"/>
<attributeMappings xmi:id="_I8BK4NYWEemme5in8-9nig" mediniIdentifier="_I8BK4NYWEemme5in8-9nig" threatCategories="_qNmVwNYVEemme5in8-9nig" securityAttribute="_KnpbsNYVEemme5in8-9nig"/>
<componentTypeMappings xmi:id="_sJ0PYM8FEemRYOazSJC8YQ" mediniIdentifier="_sJ0PYM8FEemRYOazSJC8YQ" threatCategories="_32c9AM8CEemOvMGPpWSWoA _yhzzkM8CEemOvMGPpWSWoA _35uTcM8CEemOvMGPpWSWoA" componentType="_s8BIYM8FEemRYOazSJC8YQ" expression="self instanceof Metamodel.sysml.SysMLConnector || self instanceof Metamodel.sysml.SysMLActivityEdge"/>
<componentTypeMappings xmi:id="_xoYJ0M8FEemRYOazSJC8YQ" mediniIdentifier="_xoYJ0M8FEemRYOazSJC8YQ" threatCategories="_32c9AM8CEemOvMGPpWSWoA _m1i00NYVEemme5in8-9nig _yhzzkM8CEemOvMGPpWSWoA _35uTcM8CEemOvMGPpWSWoA" componentType="_txewwM8FEemRYOazSJC8YQ" expression="self.typeCode == 'Data Store'"/>
<componentTypeMappings xmi:id="_RdmKYNYWEemme5in8-9nig" mediniIdentifier="_RdmKYNYWEemme5in8-9nig" threatCategories="_jG9qQNYVEemme5in8-9nig _32c9AM8CEemOvMGPpWSWoA _m1i00NYVEemme5in8-9nig _yhzzkM8CEemOvMGPpWSWoA _35uTcM8CEemOvMGPpWSWoA _qNmVwNYVEemme5in8-9nig" componentType="_SiRTcNYWEemme5in8-9nig" expression="self.typeCode == 'Process'"/>
<componentTypeMappings xmi:id="_-xolENYWEemme5in8-9nig" mediniIdentifier="_-xolENYWEemme5in8-9nig" threatCategories="_jG9qQNYVEemme5in8-9nig _m1i00NYVEemme5in8-9nig" componentType="_6mwgENYWEemme5in8-9nig" expression="self instanceof Metamodel.sysml.SysMLPort || self instanceof Metamodel.sysml.SysMLPortUsage"/>
<componentTypeMappings xmi:id="_-4HnkNYWEemme5in8-9nig" mediniIdentifier="_-4HnkNYWEemme5in8-9nig" threatCategories="_jG9qQNYVEemme5in8-9nig _32c9AM8CEemOvMGPpWSWoA _m1i00NYVEemme5in8-9nig _yhzzkM8CEemOvMGPpWSWoA _35uTcM8CEemOvMGPpWSWoA _qNmVwNYVEemme5in8-9nig" componentType="_7x1MENYWEemme5in8-9nig" expression="self.typeCode == 'Hardware Part'"/>
<componentTypeMappings xmi:id="_BGtmENYXEemme5in8-9nig" mediniIdentifier="_BGtmENYXEemme5in8-9nig" threatCategories="_jG9qQNYVEemme5in8-9nig _32c9AM8CEemOvMGPpWSWoA _m1i00NYVEemme5in8-9nig _yhzzkM8CEemOvMGPpWSWoA _35uTcM8CEemOvMGPpWSWoA _qNmVwNYVEemme5in8-9nig" componentType="_9CZcENYWEemme5in8-9nig" expression="true"/>
</cybersecurity:SecurityConfiguration>