GnuPG Signature modelliert, Innentäter begonnen

1 files changed, 63 insertions, 0 deletions

diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml
new file mode 100644
index 0000000..0f63748
--- /dev/null
+++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml
@@ -0,0 +1,63 @@
+@startuml
+!include <archimate/Archimate>
+left to right direction
+
+Title  Page 9:  Fig. 9: NetBSD Download Risk Assessment Pattern - Malicious Security Officer
+
+Grouping(M_Group,"RiskExperience"){
+' Elemente
+together{
+Motivation_Driver(driver, "Manipulated ISO Image") 
+Motivation_Stakeholder(assessor, "NetBSD User")
+}
+
+Motivation_Assessment(assessment, "Risk of \n Integrity and Authenticity")
+
+}
+
+
+
+Strategy_Resource(trust_anchor, "Trust Anchor\nPublic Signature Key")
+Strategy_Resource(artifact, "NetBSD ISO Image")
+Rel_Association(trust_anchor,artifact)
+
+
+
+together{
+Motivation_Goal(goal, "Secure Integrity and Authenticity\n of NetBSD ISO Image")
+
+Motivation_Requirement(req, "Check GnuPG Signature of ISO Image")
+
+Motivation_Requirement(reqwot, "Check WoT of Public Signing Key")
+}
+
+
+
+Business_Actor(threat_agent, "Malicious Security Officer")
+Business_Event(threat_event, "signs manipulated ISO image")
+Business_Event(loss_event,   "loss of trust in ISO image")
+
+Rel_Assignment(threat_agent,threat_event,Assign)
+
+
+
+
+
+
+
+' driver -[hidden]-> trust
+' trust -[hidden]-> resource
+' intention -[hidden]down-> trust
+
+
+
+' Beziehungen
+Rel_Association(driver, assessment)
+Rel_Association(assessor, assessment)
+Rel_Association(assessment,goal)
+
+Rel_Realization(req,goal,"realises integrity")
+Rel_Realization(reqwot,goal,"realises authenticity")
+
+@enduml
+