From 0925d7a2d383d93d05c7c68ee130c48b20629b23 Mon Sep 17 00:00:00 2001
From: stefan <stefan@i3mint.local>
Date: Sun, 22 Feb 2026 15:44:18 +0100
Subject: Typos

---
 PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg')

diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg
index 257ddfc..29b64de 100644
--- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg
+++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg
@@ -1 +1 @@
-<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="1006px" preserveAspectRatio="none" style="width:821px;height:1006px;background:#FFFFFF;" version="1.1" viewBox="0 0 821 1006" width="821px" zoomAndPan="magnify"><title>Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</title><defs/><g><g class="header" data-source-line="11"><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="242.507" x="565.4621" y="14.9659">Attack Flows and Trust Boundaries</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="169.4799" x="638.4892" y="29.7579">Timestamp: 2026-02-22 15:37 +0100</text></g><g class="title" data-source-line="9"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="750.1033" x="28.9329" y="58.6538">Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</text></g><!--cluster Internet--><g class="cluster" data-qualified-name="Internet" data-source-line="41" id="ent0002"><rect fill="none" height="133.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:2;" width="100" x="559.26" y="262.8258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="58.7718" x="579.8741" y="279.7918">Internet</text></g><!--cluster DMZ--><g class="cluster" data-qualified-name="DMZ" data-source-line="45" id="ent0004"><rect fill="none" height="93.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:2;" width="310" x="117.26" y="496.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="31.5559" x="256.4821" y="513.3218">DMZ</text></g><!--cluster Internal Network--><g class="cluster" data-qualified-name="Internal Network" data-source-line="50" id="ent0009"><rect fill="none" height="326.6" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:2;" width="487" x="39.26" y="80.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="122.0235" x="221.7482" y="97.7218">Internal Network</text></g><!--entity Attacker--><g class="entity" data-qualified-name="Internet.Attacker" data-source-line="42" id="ent0003"><ellipse cx="609.2579" cy="309.3258" fill="#FF0000" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M609.2579,317.3258 L609.2579,344.3258 M596.2579,325.3258 L622.2579,325.3258 M609.2579,344.3258 L596.2579,359.3258 M609.2579,344.3258 L622.2579,359.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="61.6838" x="575.56" y="375.7918">Black Hat</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="5.712" x="637.2438" y="375.7918">"</text></g><!--entity WWW--><g class="entity" data-qualified-name="DMZ.WWW" data-source-line="46" id="ent0005"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:2;" width="142.3875" x="133.06" y="534.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="122.3875" x="143.06" y="559.3218">Public Web Server:</text></g><g class="entity" data-qualified-name="DMZ.GMN6" data-source-line="47" id="ent0007"><path d="M310.92,540.0358 L310.92,549.8958 L275.71,553.8958 L310.92,557.8958 L310.92,567.7418 A0,0 0 0 0 310.92,567.7418 L411.5971,567.7418 A0,0 0 0 0 411.5971,567.7418 L411.5971,550.0358 L401.5971,540.0358 L310.92,540.0358 A0,0 0 0 0 310.92,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M401.5971,540.0358 L401.5971,550.0358 L411.5971,550.0358 L401.5971,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="79.6771" x="316.92" y="558.9328">T, I, DoS, EoP</text></g><!--entity BS--><g class="entity" data-qualified-name="Internal Network.BS" data-source-line="51" id="ent0010"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:2;" width="93.8357" x="55.34" y="138.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="73.8357" x="65.34" y="163.7218">CVS RelEng</text></g><g class="entity" data-qualified-name="Internal Network.GMN11" data-source-line="52" id="ent0012"><path d="M183.76,144.4358 L183.76,154.2858 L149.27,158.2858 L183.76,162.2858 L183.76,172.1418 A0,0 0 0 0 183.76,172.1418 L256.7601,172.1418 A0,0 0 0 0 256.7601,172.1418 L256.7601,154.4358 L246.7601,144.4358 L183.76,144.4358 A0,0 0 0 0 183.76,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M246.7601,144.4358 L246.7601,154.4358 L256.7601,154.4358 L246.7601,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="52.0001" x="189.76" y="163.3328">T, R, EoP</text></g><!--entity Repo--><g class="entity" data-qualified-name="Internal Network.Repo" data-source-line="53" id="ent0014"><path d="M63.21,326.3258 C63.21,316.3258 132.2548,316.3258 132.2548,316.3258 C132.2548,316.3258 201.2995,316.3258 201.2995,326.3258 L201.2995,354.3937 C201.2995,364.3937 132.2548,364.3937 132.2548,364.3937 C132.2548,364.3937 63.21,364.3937 63.21,354.3937 L63.21,326.3258" fill="#F1F1F1" style="stroke:#181818;stroke-width:0.5;"/><path d="M63.21,326.3258 C63.21,336.3258 132.2548,336.3258 132.2548,336.3258 C132.2548,336.3258 201.2995,336.3258 201.2995,326.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="87.8916" x="73.21" y="355.2918">Release Repo</text><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.5579" x="164.7416" y="355.2918">HVT</text></g><g class="entity" data-qualified-name="Internal Network.GMN15" data-source-line="54" id="ent0016"><path d="M372.44,326.5058 L372.44,336.3558 L201.66,340.3558 L372.44,344.3558 L372.44,354.2118 A0,0 0 0 0 372.44,354.2118 L502.0681,354.2118 A0,0 0 0 0 502.0681,354.2118 L502.0681,336.5058 L492.0681,326.5058 L372.44,326.5058 A0,0 0 0 0 372.44,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M492.0681,326.5058 L492.0681,336.5058 L502.0681,336.5058 L492.0681,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="108.6281" x="378.44" y="345.4028">S, T, R, I, DoS, EoP</text></g><!--entity Security Officer--><g class="entity" data-qualified-name="Internal Network.Security Officer" data-source-line="55" id="ent0018"><ellipse cx="342.2588" cy="127.2558" fill="#00FF00" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M342.2588,135.2558 L342.2588,162.2558 M329.2588,143.2558 L355.2588,143.2558 M342.2588,162.2558 L329.2588,177.2558 M342.2588,162.2558 L355.2588,177.2558" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="100.7576" x="291.88" y="193.7218">Security Officer</text></g><!--link BS to Repo--><g class="link" data-entity-1="ent0010" data-entity-2="ent0014" data-link-type="dependency" data-source-line="66" id="lnk19"><path d="M94.71,178.1958 C88.61,196.0058 81.86,223.3858 87.26,246.8258 C93.03,271.8958 103.4899,292.8748 114.2099,310.9548" fill="none" id="BS-to-Repo" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="117.27,316.1158,116.1206,306.3343,114.7199,311.815,109.2392,310.4144,117.27,316.1158" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.3962" x="88.26" y="242.7228">(DF1) Publish ISO + Checksums</text></g><!--link Security Officer to Repo--><g class="link" data-entity-1="ent0018" data-entity-2="ent0014" data-link-type="dependency" data-source-line="67" id="lnk20"><path d="M320.07,198.1058 C309.62,214.3358 296.18,232.6758 281.26,246.8258 C251.43,275.1158 216.9218,296.4679 185.9518,313.0179" fill="none" id="Security Officer-to-Repo" style="stroke:#008000;stroke-width:2;"/><polygon fill="#008000" points="180.66,315.8458,190.4829,315.1319,185.0698,313.4893,186.7124,308.0761,180.66,315.8458" style="stroke:#008000;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.2012" x="298.1" y="242.7228">(DF2) Sign Checksums (GnuPG)</text></g><!--link Repo to WWW--><g class="link" data-entity-1="ent0014" data-entity-2="ent0005" data-link-type="dependency" data-source-line="68" id="lnk21"><path d="M135.86,364.5358 C140.64,392.5758 150.28,440.9458 165.26,480.3558 C172.52,499.4658 180.7498,514.7228 189.3298,529.0028" fill="none" id="Repo-to-WWW" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="192.42,534.1458,191.2135,524.3711,189.8449,529.8599,184.3561,528.4913,192.42,534.1458" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="131.5471" x="166.26" y="457.2528">(DF3) Deploy Artifacts</text></g><!--link WWW to Repo--><g class="link" data-entity-1="ent0005" data-entity-2="ent0014" data-link-type="dependency" data-source-line="80" id="lnk24"><path d="M132.67,544.2958 C92.43,535.3858 45.38,517.2558 20.26,480.3558 C6,459.4158 8.8,445.9558 20.26,423.3558 C33.18,397.8858 52.9558,381.4635 76.0358,367.9135" fill="none" id="WWW-to-Repo" style="stroke:#800080;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#800080" points="81.21,364.8758,71.4236,365.9829,76.8982,367.4072,75.4738,372.8819,81.21,364.8758" style="stroke:#800080;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="115.1281" x="22.929" y="438.2528">(AT2) Pivot to Repo</text><path d="M25.26,448.0618 L25.26,475.0618 L135.26,475.0618 L135.26,458.0618 L125.26,448.0618 L25.26,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M125.26,448.0618 L125.26,458.0618 L135.26,458.0618 L125.26,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="89.4661" x="31.26" y="466.9589">EoP [#Orange]</text></g><!--link WWW to Attacker--><g class="link" data-entity-1="ent0005" data-entity-2="ent0003" data-link-type="dependency" data-source-line="69" id="lnk22"><path d="M230.84,533.9858 C257.79,514.6958 296.35,486.7158 302.26,480.3558 C322.65,458.4058 312.33,438.3758 338.26,423.3558 C356.35,412.8758 506.88,423.2158 526.26,415.3558 C545.04,407.7358 558.096,398.1267 572.016,384.4767" fill="none" id="WWW-to-Attacker" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="576.3,380.2758,567.0734,383.7212,572.73,383.7766,572.6746,389.4331,576.3,380.2758" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="277.5113" x="339.26" y="457.2528">(DF4) Distribute ISO + Checksums + Signature</text></g><!--link Attacker to WWW--><g class="link" data-entity-1="ent0003" data-entity-2="ent0005" data-link-type="dependency" data-source-line="77" id="lnk23"><path d="M627.01,380.3758 C638.26,411.6758 646.46,454.5258 621.26,480.3558 C608.53,493.4058 310.53,482.5258 293.26,488.3558 C265.95,497.5858 244.3073,514.3045 227.5173,529.8145" fill="none" id="Attacker-to-WWW" style="stroke:#FF0000;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#FF0000" points="223.11,533.8858,232.4352,530.7171,226.7828,530.4931,227.0068,524.8406,223.11,533.8858" style="stroke:#FF0000;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="175.1492" x="638.82" y="438.2528">(AT1) Exploit Webserver Vuln</text><path d="M704.4156,448.0618 L704.4156,475.0618 L747.4156,475.0618 L747.4156,458.0618 L737.4156,448.0618 L704.4156,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M737.4156,448.0618 L737.4156,458.0618 L747.4156,458.0618 L737.4156,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="22.958" x="710.4156" y="466.9589">EoP</text></g><!--link Repo to Repo--><g class="link" data-entity-1="ent0014" data-entity-2="ent0014" data-link-type="dependency" data-source-line="83" id="lnk25"><path d="M201.79,321.1358 C221.31,321.9758 236.3,328.3858 236.3,340.3558 C236.3,352.3358 227.3043,358.4748 207.7843,359.3248" fill="none" id="Repo-to-Repo" style="stroke:#FFA500;stroke-width:2;stroke-dasharray:7,7;"/><polygon fill="#FFA500" points="201.79,359.5858,210.9555,363.1905,206.7853,359.3683,210.6075,355.1981,201.79,359.5858" style="stroke:#FFA500;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="106.8601" x="242.3" y="309.2528">(AT3) Replace ISO</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="85.5921" x="252.934" y="326.9589">&amp;&amp; Checksum</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="81.6531" x="254.9035" y="344.6649">&amp;&amp; Signature</text><path d="M261.544,359.4739 L261.544,386.4739 L329.544,386.4739 L329.544,369.4739 L319.544,359.4739 L261.544,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M319.544,359.4739 L319.544,369.4739 L329.544,369.4739 L319.544,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="47.372" x="267.544" y="378.3709">Tamper</text></g><g class="legend" data-source-line="16"><rect fill="#DDDDDD" height="380.2904" rx="7.5" ry="7.5" style="stroke:#000000;stroke-width:1;" width="242.5111" x="553.4581" y="606.4258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="48.5098" x="562.0981" y="628.3918">STRIDE</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="86.4917" x="617.8878" y="628.3918">Abbrevation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.686" x="558.4581" y="647.4597">S</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="58.9258" x="617.8878" y="647.4597">Spoofing</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.784" x="558.4581" y="666.5276">T</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="71.8897" x="617.8878" y="666.5276">Tampering</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="8.708" x="558.4581" y="685.5955">R</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="79.7297" x="617.8878" y="685.5955">Repudiation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="4.746" x="558.4581" y="704.6634">I</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="151.2134" x="617.8878" y="704.6634">Information Disclosure</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.3759" x="558.4581" y="723.7313">DoS</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="109.1156" x="617.8878" y="723.7313">Denial of Service</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="24.7239" x="558.4581" y="742.7993">EoP</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="137.2135" x="617.8878" y="742.7993">Elevation of Privilege</text><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="772.7412" y1="613.4258" y2="613.4258"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="772.7412" y1="632.4937" y2="632.4937"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="772.7412" y1="651.5617" y2="651.5617"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="772.7412" y1="670.6296" y2="670.6296"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="772.7412" y1="689.6975" y2="689.6975"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="772.7412" y1="708.7654" y2="708.7654"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="772.7412" y1="727.8333" y2="727.8333"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="772.7412" y1="746.9012" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="558.4581" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="614.2479" x2="614.2479" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="772.7412" x2="772.7412" y1="613.4258" y2="746.9012"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="558.4581" y="763.8672">&#160;</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="128.9115" x="558.4581" y="782.9351">Relationship Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="46.0178" x="562.0981" y="804.003">Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="91.3356" x="647.0217" y="804.003">Attack Phase</text><rect fill="#FF0000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="558.4581" y="808.105"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="25.2139" x="562.0981" y="823.0709">Red</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="85.3297" x="647.0217" y="823.0709">Initial Exploit</text><rect fill="#800080" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="558.4581" y="827.1729"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="81.2837" x="562.0981" y="842.1388">Deep Purple</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="119.8955" x="647.0217" y="842.1388">Lateral Movement</text><rect fill="#FFA500" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="558.4581" y="846.2408"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="49.7278" x="562.0981" y="861.2068">Orange</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="117.9216" x="647.0217" y="861.2068">Integrity Violation</text><rect fill="#008000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="558.4581" y="865.3087"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="40.4178" x="562.0981" y="880.2747">Green</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="123.0875" x="647.0217" y="880.2747">Legitimate Signing</text><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="773.7492" y1="789.0371" y2="789.0371"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="773.7492" y1="808.105" y2="808.105"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="773.7492" y1="827.1729" y2="827.1729"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="773.7492" y1="846.2408" y2="846.2408"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="773.7492" y1="865.3087" y2="865.3087"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="773.7492" y1="884.3767" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="558.4581" x2="558.4581" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="643.3817" x2="643.3817" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="773.7492" x2="773.7492" y1="789.0371" y2="884.3767"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="558.4581" y="901.3426">&#160;</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="201.6272" x="558.4581" y="920.4105">LightGray box: Trust Boundary</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="232.5111" x="558.4581" y="939.4784">Notes on Relation: STRIDE category</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="89.8517" x="558.4581" y="958.5463">DF: Data Flow</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="98.8956" x="558.4581" y="977.6143">AT: Attack Path</text></g><?plantuml-src rLNRRjiu47qkls9YOviO6wDfTWiKGXB0YHmtG2v692H0qppGqaWYB942IIKrwlvxXvIlJOfTx3uiLayIPtZcSiwCO1UcA2H2nlK4vSuEsuKTMs25K8aALQvvNJ1cfaBMNFCAJC5JzInaJZTAWniMZOdbCYyHlW5xSwfqYZekH3ALQ0mS0llEM2misGVMycGAvwLw1YvJY7LZB9ogHgPS2pG1L5oAkYcvnHGkeXiG5S_ftdMuPKaAJAQcgSmx8tB9RQFHm5vq6GtUznWha5C6x7Wpd7ar7gLLeR6ygWFuBINelSwCdlxLLJzDOJeDgWe-Tth0KAOBL5PYJb-WHLvODZ-6ABwz28T0RuF9HECJjqB9EPj7SuXgfJBNCVgCvn1J7DIBxzivt6BTfCBxkvEBELp8JEcgFGc5IKfbg3Hd31NXXIW5Bq5b4A5-4ect3DLu3iDo4TWPnrey2PSccTajbjvW2b73cIfLertMxPlFkctIkE062UwecsK7z9nGUgdBI5WNS_YrBfMmu3q-alqZUOI8DOmRNPSuXqjgdoRFA_L48f8BropZ7npOZIQ5eCEpc6jXPt0dLBcg_QZh49tZI2DAGiES0bCh42AYk6qQktHD7sa-Wudw6cpJEMFNof8C271PSx0a9o6SN95BU1v0o2ttcc23E5YLpstXM6xPPJGCk__mOOoj1wBZwjKIRGUw9KrRiAxW6mFWYLKQEaS9iQ43ZUd9QUco-SJjqJj_UDBf03UBB553z_pSiSE-mrQOyEhpwn4sVCRDf1G9tEF4omTruA7lx-_9xusavhMYTXAYGw3-xiF5Ff3qze5KviRuHML4-3NQPwMdVnd_x2vop0nbxkEUHY_3daPjr5iV49m3JIMVa3IXGtVHlT3OADXesQUxUDKi1-pix2TWVoS002gbnTyiR4L4X4dZnNcJPJHUccewE73pu6fd_qeL_yrLngYb_Vx9iW5xuVdx7dWbcC8lsD_XRBbCsIlrzn-wkPl8VRjSwCU7ZrjuXpq_eMiOs1l9PZpgCU_ZWhTg8jy_UhGpQ97COA2joAZhXZcZSrf9t7l-sNCBq6enQOZ7dnAbzsYvz_-VjAoAfVwIXlTJRWfC7zUz6iJ4qtBfqiWQFx5mrvIIUMdJcgDncmRjeBHTVEZMVXblm2rv6iJ4qrWyAGjMjIFo4kQXswxfHxRWxg6h_C42y5SY6CH4B7tGxl9SVP5ltwxOyXzhkhQZjhz4n-2h0RU3a2QkL2gosLe9NoHTVHLo5_uUw8TrvgFnQ9tehv7f-G40?></g></svg>
\ No newline at end of file
+<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="1006px" preserveAspectRatio="none" style="width:818px;height:1006px;background:#FFFFFF;" version="1.1" viewBox="0 0 818 1006" width="818px" zoomAndPan="magnify"><title>Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</title><defs/><g><g class="header" data-source-line="8"><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="242.507" x="562.0221" y="14.9659">Attack Flows and Trust Boundaries</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="169.4799" x="635.0492" y="29.7579">Timestamp: 2026-02-22 15:43 +0100</text></g><g class="title" data-source-line="6"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="750.1033" x="27.2129" y="58.6538">Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</text></g><!--cluster Internet--><g class="cluster" data-qualified-name="Internet" data-source-line="38" id="ent0002"><rect fill="none" height="133.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="94" x="557.18" y="262.8258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="58.7718" x="574.7941" y="279.7918">Internet</text></g><!--cluster DMZ--><g class="cluster" data-qualified-name="DMZ" data-source-line="42" id="ent0004"><rect fill="none" height="93.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="310" x="113.18" y="496.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="31.5559" x="252.4021" y="513.3218">DMZ</text></g><!--cluster Internal Network--><g class="cluster" data-qualified-name="Internal Network" data-source-line="47" id="ent0009"><rect fill="none" height="326.6" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="487" x="36.18" y="80.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="122.0235" x="218.6682" y="97.7218">Internal Network</text></g><!--entity Attacker--><g class="entity" data-qualified-name="Internet.Attacker" data-source-line="39" id="ent0003"><ellipse cx="604.1819" cy="309.3258" fill="#FF0000" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M604.1819,317.3258 L604.1819,344.3258 M591.1819,325.3258 L617.1819,325.3258 M604.1819,344.3258 L591.1819,359.3258 M604.1819,344.3258 L617.1819,359.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="61.6838" x="573.34" y="375.7918">Black Hat</text></g><!--entity WWW--><g class="entity" data-qualified-name="DMZ.WWW" data-source-line="43" id="ent0005"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:0.5;" width="142.3875" x="128.98" y="534.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="122.3875" x="138.98" y="559.3218">Public Web Server:</text></g><g class="entity" data-qualified-name="DMZ.GMN6" data-source-line="44" id="ent0007"><path d="M306.84,540.0358 L306.84,549.8958 L271.62,553.8958 L306.84,557.8958 L306.84,567.7418 A0,0 0 0 0 306.84,567.7418 L407.5171,567.7418 A0,0 0 0 0 407.5171,567.7418 L407.5171,550.0358 L397.5171,540.0358 L306.84,540.0358 A0,0 0 0 0 306.84,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M397.5171,540.0358 L397.5171,550.0358 L407.5171,550.0358 L397.5171,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="79.6771" x="312.84" y="558.9328">T, I, DoS, EoP</text></g><!--entity BS--><g class="entity" data-qualified-name="Internal Network.BS" data-source-line="48" id="ent0010"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:0.5;" width="93.8357" x="52.26" y="138.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="73.8357" x="62.26" y="163.7218">CVS RelEng</text></g><g class="entity" data-qualified-name="Internal Network.GMN11" data-source-line="49" id="ent0012"><path d="M180.68,144.4358 L180.68,154.2858 L146.19,158.2858 L180.68,162.2858 L180.68,172.1418 A0,0 0 0 0 180.68,172.1418 L253.6801,172.1418 A0,0 0 0 0 253.6801,172.1418 L253.6801,154.4358 L243.6801,144.4358 L180.68,144.4358 A0,0 0 0 0 180.68,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M243.6801,144.4358 L243.6801,154.4358 L253.6801,154.4358 L243.6801,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="52.0001" x="186.68" y="163.3328">T, R, EoP</text></g><!--entity Repo--><g class="entity" data-qualified-name="Internal Network.Repo" data-source-line="50" id="ent0014"><path d="M60.13,326.3258 C60.13,316.3258 129.1748,316.3258 129.1748,316.3258 C129.1748,316.3258 198.2195,316.3258 198.2195,326.3258 L198.2195,354.3937 C198.2195,364.3937 129.1748,364.3937 129.1748,364.3937 C129.1748,364.3937 60.13,364.3937 60.13,354.3937 L60.13,326.3258" fill="#F1F1F1" style="stroke:#181818;stroke-width:0.5;"/><path d="M60.13,326.3258 C60.13,336.3258 129.1748,336.3258 129.1748,336.3258 C129.1748,336.3258 198.2195,336.3258 198.2195,326.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="87.8916" x="70.13" y="355.2918">Release Repo</text><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.5579" x="161.6616" y="355.2918">HVT</text></g><g class="entity" data-qualified-name="Internal Network.GMN15" data-source-line="51" id="ent0016"><path d="M369.36,326.5058 L369.36,336.3558 L198.58,340.3558 L369.36,344.3558 L369.36,354.2118 A0,0 0 0 0 369.36,354.2118 L498.9881,354.2118 A0,0 0 0 0 498.9881,354.2118 L498.9881,336.5058 L488.9881,326.5058 L369.36,326.5058 A0,0 0 0 0 369.36,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M488.9881,326.5058 L488.9881,336.5058 L498.9881,336.5058 L488.9881,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="108.6281" x="375.36" y="345.4028">S, T, R, I, DoS, EoP</text></g><!--entity Security Officer--><g class="entity" data-qualified-name="Internal Network.Security Officer" data-source-line="52" id="ent0018"><ellipse cx="339.1788" cy="127.2558" fill="#00FF00" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M339.1788,135.2558 L339.1788,162.2558 M326.1788,143.2558 L352.1788,143.2558 M339.1788,162.2558 L326.1788,177.2558 M339.1788,162.2558 L352.1788,177.2558" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="100.7576" x="288.8" y="193.7218">Security Officer</text></g><!--link BS to Repo--><g class="link" data-entity-1="ent0010" data-entity-2="ent0014" data-link-type="dependency" data-source-line="63" id="lnk19"><path d="M91.63,178.1958 C85.53,196.0058 78.78,223.3858 84.18,246.8258 C89.95,271.8958 100.4099,292.8748 111.1299,310.9548" fill="none" id="BS-to-Repo" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="114.19,316.1158,113.0406,306.3343,111.6399,311.815,106.1592,310.4144,114.19,316.1158" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.3962" x="85.18" y="242.7228">(DF1) Publish ISO + Checksums</text></g><!--link Security Officer to Repo--><g class="link" data-entity-1="ent0018" data-entity-2="ent0014" data-link-type="dependency" data-source-line="64" id="lnk20"><path d="M316.99,198.1058 C306.54,214.3358 293.09,232.6758 278.18,246.8258 C248.35,275.1158 213.8418,296.4679 182.8718,313.0179" fill="none" id="Security Officer-to-Repo" style="stroke:#008000;stroke-width:2;"/><polygon fill="#008000" points="177.58,315.8458,187.4029,315.1319,181.9898,313.4893,183.6324,308.0761,177.58,315.8458" style="stroke:#008000;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.2012" x="295.01" y="242.7228">(DF2) Sign Checksums (GnuPG)</text></g><!--link Repo to WWW--><g class="link" data-entity-1="ent0014" data-entity-2="ent0005" data-link-type="dependency" data-source-line="65" id="lnk21"><path d="M132.85,364.5058 C137.7,392.5258 147.41,440.8658 162.18,480.3558 C169.3,499.3958 177.2972,514.6129 185.6372,528.9129" fill="none" id="Repo-to-WWW" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="188.66,534.0958,187.5811,524.3062,186.141,529.7767,180.6705,528.3366,188.66,534.0958" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="131.5471" x="163.18" y="457.2528">(DF3) Deploy Artifacts</text></g><!--link WWW to Repo--><g class="link" data-entity-1="ent0005" data-entity-2="ent0014" data-link-type="dependency" data-source-line="77" id="lnk24"><path d="M128.73,543.5358 C89.66,534.3758 44.4,516.2358 20.18,480.3558 C6,459.3658 8.86,446.0258 20.18,423.3558 C32.81,398.0358 52.2623,381.5848 74.8923,367.9348" fill="none" id="WWW-to-Repo" style="stroke:#800080;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#800080" points="80.03,364.8358,70.2574,366.0591,75.7486,367.4183,74.3894,372.9095,80.03,364.8358" style="stroke:#800080;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="115.1281" x="21.18" y="438.2528">(AT2) Pivot to Repo</text><path d="M56.7651,448.0618 L56.7651,475.0618 L99.7651,475.0618 L99.7651,458.0618 L89.7651,448.0618 L56.7651,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M89.7651,448.0618 L89.7651,458.0618 L99.7651,458.0618 L89.7651,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="22.958" x="62.7651" y="466.9589">EoP</text></g><!--link WWW to Attacker--><g class="link" data-entity-1="ent0005" data-entity-2="ent0003" data-link-type="dependency" data-source-line="66" id="lnk22"><path d="M226.65,533.8658 C254.94,513.4858 296.14,483.6058 299.18,480.3558 C319.62,458.4558 309.25,438.3758 335.18,423.3558 C371.36,402.3958 484.52,431.3058 523.18,415.3558 C542.02,407.5858 555.0498,397.6506 568.7398,383.7506" fill="none" id="WWW-to-Attacker" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="572.95,379.4758,563.7848,383.0812,569.4415,383.0382,569.4845,388.6949,572.95,379.4758" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="277.5113" x="336.18" y="457.2528">(DF4) Distribute ISO + Checksums + Signature</text></g><!--link Attacker to WWW--><g class="link" data-entity-1="ent0003" data-entity-2="ent0005" data-link-type="dependency" data-source-line="74" id="lnk23"><path d="M622.7,380.3558 C634.53,411.6458 643.42,454.4958 618.18,480.3558 C605.41,493.4458 306.5,482.5058 289.18,488.3558 C261.87,497.5858 240.2273,514.3045 223.4373,529.8145" fill="none" id="Attacker-to-WWW" style="stroke:#FF0000;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#FF0000" points="219.03,533.8858,228.3552,530.7171,222.7028,530.4931,222.9268,524.8406,219.03,533.8858" style="stroke:#FF0000;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="175.1492" x="635.38" y="438.2528">(AT1) Exploit Webserver Vuln</text><path d="M700.9756,448.0618 L700.9756,475.0618 L743.9756,475.0618 L743.9756,458.0618 L733.9756,448.0618 L700.9756,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M733.9756,448.0618 L733.9756,458.0618 L743.9756,458.0618 L733.9756,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="22.958" x="706.9756" y="466.9589">EoP</text></g><!--link Repo to Repo--><g class="link" data-entity-1="ent0014" data-entity-2="ent0014" data-link-type="dependency" data-source-line="80" id="lnk25"><path d="M198.71,321.1358 C218.23,321.9758 233.22,328.3858 233.22,340.3558 C233.22,352.3358 224.2243,358.4748 204.7043,359.3248" fill="none" id="Repo-to-Repo" style="stroke:#FFA500;stroke-width:2;stroke-dasharray:7,7;"/><polygon fill="#FFA500" points="198.71,359.5858,207.8755,363.1905,203.7053,359.3683,207.5275,355.1981,198.71,359.5858" style="stroke:#FFA500;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="106.8601" x="239.22" y="309.2528">(AT3) Replace ISO</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="85.5921" x="249.854" y="326.9589">&amp;&amp; Checksum</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="81.6531" x="251.8235" y="344.6649">&amp;&amp; Signature</text><path d="M258.464,359.4739 L258.464,386.4739 L326.464,386.4739 L326.464,369.4739 L316.464,359.4739 L258.464,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M316.464,359.4739 L316.464,369.4739 L326.464,369.4739 L316.464,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="47.372" x="264.464" y="378.3709">Tamper</text></g><g class="legend" data-source-line="13"><rect fill="#DDDDDD" height="380.2904" rx="7.5" ry="7.5" style="stroke:#000000;stroke-width:1;" width="242.5111" x="550.0181" y="606.4258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="48.5098" x="558.6581" y="628.3918">STRIDE</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="90.6777" x="614.4478" y="628.3918">Abbreviation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.686" x="555.0181" y="647.4597">S</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="58.9258" x="614.4478" y="647.4597">Spoofing</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.784" x="555.0181" y="666.5276">T</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="71.8897" x="614.4478" y="666.5276">Tampering</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="8.708" x="555.0181" y="685.5955">R</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="79.7297" x="614.4478" y="685.5955">Repudiation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="4.746" x="555.0181" y="704.6634">I</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="151.2134" x="614.4478" y="704.6634">Information Disclosure</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.3759" x="555.0181" y="723.7313">DoS</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="109.1156" x="614.4478" y="723.7313">Denial of Service</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="24.7239" x="555.0181" y="742.7993">EoP</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="137.2135" x="614.4478" y="742.7993">Elevation of Privilege</text><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="613.4258" y2="613.4258"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="632.4937" y2="632.4937"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="651.5617" y2="651.5617"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="670.6296" y2="670.6296"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="689.6975" y2="689.6975"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="708.7654" y2="708.7654"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="727.8333" y2="727.8333"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="746.9012" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="555.0181" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="610.8079" x2="610.8079" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="769.3012" x2="769.3012" y1="613.4258" y2="746.9012"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="555.0181" y="763.8672">&#160;</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="128.9115" x="555.0181" y="782.9351">Relationship Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="46.0178" x="558.6581" y="804.003">Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="91.3356" x="643.5817" y="804.003">Attack Phase</text><rect fill="#FF0000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="808.105"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="25.2139" x="558.6581" y="823.0709">Red</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="85.3297" x="643.5817" y="823.0709">Initial Exploit</text><rect fill="#800080" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="827.1729"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="81.2837" x="558.6581" y="842.1388">Deep Purple</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="119.8955" x="643.5817" y="842.1388">Lateral Movement</text><rect fill="#FFA500" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="846.2408"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="49.7278" x="558.6581" y="861.2068">Orange</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="117.9216" x="643.5817" y="861.2068">Integrity Violation</text><rect fill="#008000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="865.3087"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="40.4178" x="558.6581" y="880.2747">Green</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="123.0875" x="643.5817" y="880.2747">Legitimate Signing</text><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="789.0371" y2="789.0371"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="808.105" y2="808.105"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="827.1729" y2="827.1729"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="846.2408" y2="846.2408"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="865.3087" y2="865.3087"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="884.3767" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="555.0181" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="639.9417" x2="639.9417" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="770.3092" x2="770.3092" y1="789.0371" y2="884.3767"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="555.0181" y="901.3426">&#160;</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="201.6272" x="555.0181" y="920.4105">LightGray box: Trust Boundary</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="232.5111" x="555.0181" y="939.4784">Notes on Relation: STRIDE category</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="89.8517" x="555.0181" y="958.5463">DF: Data Flow</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="98.8956" x="555.0181" y="977.6143">AT: Attack Path</text></g><?plantuml-src rLLjRzis4Fuy_egBZJKnPgDfjmA5a0HmujWr42U6PIH0qtwWfPD4M285ad9gpFtlEr9-RLrqs3uCqoTHTtpkvNdk1ASmHo4H4gvdA4zEs2cSs0mBX48Kg5BDoumnCnUov9eNO38UgnSXKxgH6sHiAcoEqBMMHtFev-e5k8nXgYjZuLfLCkPQe0cWu5AKLSujnZ0C7q0KFALxzxq3IvHXD3TLOLuRaKfkAuq6piAxiFkcnLY6F4RDBlV3cQFnAAq2ZUL56S2lCK6VDPRqT4QZJXp3V1uK1Nnij82XZDUeBCUKJg15cbcskeHmEXdsRe7UkhEPneNWLYYvOgjm1M6fLEAwGCVf2gOK2FNwF5d11CighltTb-4AXZ9HkgY_z8I9ScMeDcViASBheHGy1vL0Y7eX8c-vLUCLtEQugA-HSQp5GhWyoSmcc7k3oKG9DofNbNPfrsy-xRfBuumR9BYBPfASqtD5wSKk8s5TpDilPQw41U_ndkploQE7MCAuqcMEAxYZ_cdo7Aa52KEkNPE4ltDW3vhB51sUnLGBkuH7eV9jxHTDX-WS1nfH4Xgc59XQWH0IntNJs9th-a3p9SpKb-2GpoMxLvPqG82RceCDEn7Xf8fSUlq0UjnoBmhMdGRRyhdD7CqrlOm4VleF7yQOniXIkQJuXgjNIxGDQEOqGS6kWZyP08-iqj2uY8WD7MYChwvpbyq7RYzU-uzN3U1cdIHgQFRxZXps5GwYz4OVZmVOynbNirn4y8GphnxKWOT-UdeYlryazQuMjLCGVGHgRnk6RI3bjO54nhuUAOpulaVxelJyf_5l7aD7pArCVTphyFkmrs4TTU83WdEWgUGpKYOqw2ww5veQ1NiT-_0uFUYLixDlWFsT002eb1f_lx0j3o56bTVcGvBGT6cgwVpSZOEhdVqhKVmtLncZbdOwLvi6dFNwRrhWbM0ols1_WvlDCcL7wkyyDrCta6sRYMWkqPZBjvyFyDws_83kOE1i8AlneCMyZmjUgubyVs_Hog0zieIkjYAXhXlcZCvfAt7l-KVBxJ-hnQmY7hz9bDx3pTx_VzAoBPRwInfknzna67_UzQex9PusEvT6rlY9XSSgbynBcxOSZTiyg0Ubxk9pi_IxU0zkmrDtIZoDnK9PiAeUaMCmDMNFJUMtzHhdHzntfyGd7MXZUOe-oLUljYJvmuwbms3rZz0HTpJWOH2ImaZ58bdk1F19qjMZaAVmzq3VxJ8VZ0UxH7-CJCzV?></g></svg>
\ No newline at end of file
-- 
cgit v1.2.3