From 0c7f33663339ffeab917443901a07914ff58709b Mon Sep 17 00:00:00 2001 From: stefan Date: Sat, 21 Feb 2026 21:32:50 +0100 Subject: GnuPG Signature modelliert, Innentäter begonnen MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../9-9-GnuPG-RiskAssessmentPattern3.puml | 63 ++++++++++++++++++++++ 1 file changed, 63 insertions(+) create mode 100644 PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml (limited to 'PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml') diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml new file mode 100644 index 0000000..0f63748 --- /dev/null +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml @@ -0,0 +1,63 @@ +@startuml +!include +left to right direction + +Title Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern - Malicious Security Officer + +Grouping(M_Group,"RiskExperience"){ +' Elemente +together{ +Motivation_Driver(driver, "Manipulated ISO Image") +Motivation_Stakeholder(assessor, "NetBSD User") +} + +Motivation_Assessment(assessment, "Risk of \n Integrity and Authenticity") + +} + + + +Strategy_Resource(trust_anchor, "Trust Anchor\nPublic Signature Key") +Strategy_Resource(artifact, "NetBSD ISO Image") +Rel_Association(trust_anchor,artifact) + + + +together{ +Motivation_Goal(goal, "Secure Integrity and Authenticity\n of NetBSD ISO Image") + +Motivation_Requirement(req, "Check GnuPG Signature of ISO Image") + +Motivation_Requirement(reqwot, "Check WoT of Public Signing Key") +} + + + +Business_Actor(threat_agent, "Malicious Security Officer") +Business_Event(threat_event, "signs manipulated ISO image") +Business_Event(loss_event, "loss of trust in ISO image") + +Rel_Assignment(threat_agent,threat_event,Assign) + + + + + + + +' driver -[hidden]-> trust +' trust -[hidden]-> resource +' intention -[hidden]down-> trust + + + +' Beziehungen +Rel_Association(driver, assessment) +Rel_Association(assessor, assessment) +Rel_Association(assessment,goal) + +Rel_Realization(req,goal,"realises integrity") +Rel_Realization(reqwot,goal,"realises authenticity") + +@enduml + -- cgit v1.2.3