From 2993aae60e019804e249de3f56e48eca365723df Mon Sep 17 00:00:00 2001 From: stefan Date: Tue, 24 Feb 2026 20:36:44 +0100 Subject: Risk/Security Overlay im Business/Motivation Layer angefangen --- .../GnuPG-WoT-Download/203-SLSA4-ReproducibleBuilds-L1-Motivation.svg | 1 + 1 file changed, 1 insertion(+) create mode 100644 PlantUML-ModelingTrust/GnuPG-WoT-Download/203-SLSA4-ReproducibleBuilds-L1-Motivation.svg (limited to 'PlantUML-ModelingTrust/GnuPG-WoT-Download/203-SLSA4-ReproducibleBuilds-L1-Motivation.svg') diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/203-SLSA4-ReproducibleBuilds-L1-Motivation.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/203-SLSA4-ReproducibleBuilds-L1-Motivation.svg new file mode 100644 index 0000000..690d46d --- /dev/null +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/203-SLSA4-ReproducibleBuilds-L1-Motivation.svg @@ -0,0 +1 @@ +SLSA4 - Risk and Security OverlaySLSA4 - Risk and Security OverlayRisk ExperienceHazard AssessmentThreat EnablerGnuPG Signature Secret KeyAsset at RiskISO-Image gets manipulatedVulnerability Capability Threat AgentBlackHat manipulates ISO-ImageBusiness Threat EventManipulated ISO-Image gets installedBusiness Loss EventNetBSD-Server has to be shutdownImplemented Control Measure Gloabl Goal:Run NetBSD-Server that is free from manipulationRisk AssessmentISO-Image might be manipulated«ControlObjective»GoalRisk DriverInstall Non-Manipulated ISO-ImageRisk AssessorInstall-Admin verifying SignatureRisk SubjectService Owner running NetBSDsec. requirementIntegrity of ISO-Imagecontrol requirementInstall Non-Manipulated ISO-ImageSecurity_Principle               RealiseRealiseRealiseRealiseFlowAssign \ No newline at end of file -- cgit v1.2.3