From eb4668408ceac440972213053ab0d97f6fa7ae89 Mon Sep 17 00:00:00 2001
From: stefan <stefan@i3mint.local>
Date: Mon, 23 Feb 2026 18:53:35 +0100
Subject: SLSA models added

Signed-off-by: stefan <stefan@i3mint.local>
---
 PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg')

diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg
index 6f3cbac..16b0263 100644
--- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg
+++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg
@@ -1 +1 @@
-<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="1006px" preserveAspectRatio="none" style="width:818px;height:1006px;background:#FFFFFF;" version="1.1" viewBox="0 0 818 1006" width="818px" zoomAndPan="magnify"><title>Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</title><defs/><g><g class="header" data-source-line="8"><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="242.507" x="562.0221" y="14.9659">Attack Flows and Trust Boundaries</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="169.4799" x="635.0492" y="29.7579">Timestamp: 2026-02-22 15:47 +0100</text></g><g class="title" data-source-line="6"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="750.1033" x="27.2129" y="58.6538">Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</text></g><!--cluster Internet--><g class="cluster" data-qualified-name="Internet" data-source-line="38" id="ent0002"><rect fill="none" height="133.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="94" x="557.18" y="262.8258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="58.7718" x="574.7941" y="279.7918">Internet</text></g><!--cluster DMZ--><g class="cluster" data-qualified-name="DMZ" data-source-line="42" id="ent0004"><rect fill="none" height="93.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="310" x="113.18" y="496.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="31.5559" x="252.4021" y="513.3218">DMZ</text></g><!--cluster Internal Network--><g class="cluster" data-qualified-name="Internal Network" data-source-line="47" id="ent0009"><rect fill="none" height="326.6" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="487" x="36.18" y="80.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="122.0235" x="218.6682" y="97.7218">Internal Network</text></g><!--entity Attacker--><g class="entity" data-qualified-name="Internet.Attacker" data-source-line="39" id="ent0003"><ellipse cx="604.1819" cy="309.3258" fill="#FF0000" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M604.1819,317.3258 L604.1819,344.3258 M591.1819,325.3258 L617.1819,325.3258 M604.1819,344.3258 L591.1819,359.3258 M604.1819,344.3258 L617.1819,359.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="61.6838" x="573.34" y="375.7918">Black Hat</text></g><!--entity WWW--><g class="entity" data-qualified-name="DMZ.WWW" data-source-line="43" id="ent0005"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:0.5;" width="142.3875" x="128.98" y="534.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="122.3875" x="138.98" y="559.3218">Public Web Server:</text></g><g class="entity" data-qualified-name="DMZ.GMN6" data-source-line="44" id="ent0007"><path d="M306.84,540.0358 L306.84,549.8958 L271.62,553.8958 L306.84,557.8958 L306.84,567.7418 A0,0 0 0 0 306.84,567.7418 L407.5171,567.7418 A0,0 0 0 0 407.5171,567.7418 L407.5171,550.0358 L397.5171,540.0358 L306.84,540.0358 A0,0 0 0 0 306.84,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M397.5171,540.0358 L397.5171,550.0358 L407.5171,550.0358 L397.5171,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="79.6771" x="312.84" y="558.9328">T, I, DoS, EoP</text></g><!--entity BS--><g class="entity" data-qualified-name="Internal Network.BS" data-source-line="48" id="ent0010"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:0.5;" width="93.8357" x="52.26" y="138.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="73.8357" x="62.26" y="163.7218">CVS RelEng</text></g><g class="entity" data-qualified-name="Internal Network.GMN11" data-source-line="49" id="ent0012"><path d="M180.68,144.4358 L180.68,154.2858 L146.19,158.2858 L180.68,162.2858 L180.68,172.1418 A0,0 0 0 0 180.68,172.1418 L253.6801,172.1418 A0,0 0 0 0 253.6801,172.1418 L253.6801,154.4358 L243.6801,144.4358 L180.68,144.4358 A0,0 0 0 0 180.68,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M243.6801,144.4358 L243.6801,154.4358 L253.6801,154.4358 L243.6801,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="52.0001" x="186.68" y="163.3328">T, R, EoP</text></g><!--entity Repo--><g class="entity" data-qualified-name="Internal Network.Repo" data-source-line="50" id="ent0014"><path d="M60.13,326.3258 C60.13,316.3258 129.1748,316.3258 129.1748,316.3258 C129.1748,316.3258 198.2195,316.3258 198.2195,326.3258 L198.2195,354.3937 C198.2195,364.3937 129.1748,364.3937 129.1748,364.3937 C129.1748,364.3937 60.13,364.3937 60.13,354.3937 L60.13,326.3258" fill="#F1F1F1" style="stroke:#181818;stroke-width:0.5;"/><path d="M60.13,326.3258 C60.13,336.3258 129.1748,336.3258 129.1748,336.3258 C129.1748,336.3258 198.2195,336.3258 198.2195,326.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="87.8916" x="70.13" y="355.2918">Release Repo</text><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.5579" x="161.6616" y="355.2918">HVT</text></g><g class="entity" data-qualified-name="Internal Network.GMN15" data-source-line="51" id="ent0016"><path d="M369.36,326.5058 L369.36,336.3558 L198.58,340.3558 L369.36,344.3558 L369.36,354.2118 A0,0 0 0 0 369.36,354.2118 L498.9881,354.2118 A0,0 0 0 0 498.9881,354.2118 L498.9881,336.5058 L488.9881,326.5058 L369.36,326.5058 A0,0 0 0 0 369.36,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M488.9881,326.5058 L488.9881,336.5058 L498.9881,336.5058 L488.9881,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="108.6281" x="375.36" y="345.4028">S, T, R, I, DoS, EoP</text></g><!--entity Security Officer--><g class="entity" data-qualified-name="Internal Network.Security Officer" data-source-line="52" id="ent0018"><ellipse cx="339.1788" cy="127.2558" fill="#00FF00" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M339.1788,135.2558 L339.1788,162.2558 M326.1788,143.2558 L352.1788,143.2558 M339.1788,162.2558 L326.1788,177.2558 M339.1788,162.2558 L352.1788,177.2558" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="100.7576" x="288.8" y="193.7218">Security Officer</text></g><!--link BS to Repo--><g class="link" data-entity-1="ent0010" data-entity-2="ent0014" data-link-type="dependency" data-source-line="63" id="lnk19"><path d="M91.63,178.1958 C85.53,196.0058 78.78,223.3858 84.18,246.8258 C89.95,271.8958 100.4099,292.8748 111.1299,310.9548" fill="none" id="BS-to-Repo" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="114.19,316.1158,113.0406,306.3343,111.6399,311.815,106.1592,310.4144,114.19,316.1158" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.3962" x="85.18" y="242.7228">(DF1) Publish ISO + Checksums</text></g><!--link Security Officer to Repo--><g class="link" data-entity-1="ent0018" data-entity-2="ent0014" data-link-type="dependency" data-source-line="64" id="lnk20"><path d="M316.99,198.1058 C306.54,214.3358 293.09,232.6758 278.18,246.8258 C248.35,275.1158 213.8418,296.4679 182.8718,313.0179" fill="none" id="Security Officer-to-Repo" style="stroke:#008000;stroke-width:2;"/><polygon fill="#008000" points="177.58,315.8458,187.4029,315.1319,181.9898,313.4893,183.6324,308.0761,177.58,315.8458" style="stroke:#008000;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.2012" x="295.01" y="242.7228">(DF2) Sign Checksums (GnuPG)</text></g><!--link Repo to WWW--><g class="link" data-entity-1="ent0014" data-entity-2="ent0005" data-link-type="dependency" data-source-line="65" id="lnk21"><path d="M132.85,364.5058 C137.7,392.5258 147.41,440.8658 162.18,480.3558 C169.3,499.3958 177.2972,514.6129 185.6372,528.9129" fill="none" id="Repo-to-WWW" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="188.66,534.0958,187.5811,524.3062,186.141,529.7767,180.6705,528.3366,188.66,534.0958" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="131.5471" x="163.18" y="457.2528">(DF3) Deploy Artifacts</text></g><!--link WWW to Repo--><g class="link" data-entity-1="ent0005" data-entity-2="ent0014" data-link-type="dependency" data-source-line="77" id="lnk24"><path d="M128.73,543.5358 C89.66,534.3758 44.4,516.2358 20.18,480.3558 C6,459.3658 8.86,446.0258 20.18,423.3558 C32.81,398.0358 52.2623,381.5848 74.8923,367.9348" fill="none" id="WWW-to-Repo" style="stroke:#800080;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#800080" points="80.03,364.8358,70.2574,366.0591,75.7486,367.4183,74.3894,372.9095,80.03,364.8358" style="stroke:#800080;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="115.1281" x="21.18" y="438.2528">(AT2) Pivot to Repo</text><path d="M56.7651,448.0618 L56.7651,475.0618 L99.7651,475.0618 L99.7651,458.0618 L89.7651,448.0618 L56.7651,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M89.7651,448.0618 L89.7651,458.0618 L99.7651,458.0618 L89.7651,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="22.958" x="62.7651" y="466.9589">EoP</text></g><!--link WWW to Attacker--><g class="link" data-entity-1="ent0005" data-entity-2="ent0003" data-link-type="dependency" data-source-line="66" id="lnk22"><path d="M226.65,533.8658 C254.94,513.4858 296.14,483.6058 299.18,480.3558 C319.62,458.4558 309.25,438.3758 335.18,423.3558 C371.36,402.3958 484.52,431.3058 523.18,415.3558 C542.02,407.5858 555.0498,397.6506 568.7398,383.7506" fill="none" id="WWW-to-Attacker" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="572.95,379.4758,563.7848,383.0812,569.4415,383.0382,569.4845,388.6949,572.95,379.4758" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="277.5113" x="336.18" y="457.2528">(DF4) Distribute ISO + Checksums + Signature</text></g><!--link Attacker to WWW--><g class="link" data-entity-1="ent0003" data-entity-2="ent0005" data-link-type="dependency" data-source-line="74" id="lnk23"><path d="M622.7,380.3558 C634.53,411.6458 643.42,454.4958 618.18,480.3558 C605.41,493.4458 306.5,482.5058 289.18,488.3558 C261.87,497.5858 240.2273,514.3045 223.4373,529.8145" fill="none" id="Attacker-to-WWW" style="stroke:#FF0000;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#FF0000" points="219.03,533.8858,228.3552,530.7171,222.7028,530.4931,222.9268,524.8406,219.03,533.8858" style="stroke:#FF0000;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="175.1492" x="635.38" y="438.2528">(AT1) Exploit Webserver Vuln</text><path d="M700.9756,448.0618 L700.9756,475.0618 L743.9756,475.0618 L743.9756,458.0618 L733.9756,448.0618 L700.9756,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M733.9756,448.0618 L733.9756,458.0618 L743.9756,458.0618 L733.9756,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="22.958" x="706.9756" y="466.9589">EoP</text></g><!--link Repo to Repo--><g class="link" data-entity-1="ent0014" data-entity-2="ent0014" data-link-type="dependency" data-source-line="80" id="lnk25"><path d="M198.71,321.1358 C218.23,321.9758 233.22,328.3858 233.22,340.3558 C233.22,352.3358 224.2243,358.4748 204.7043,359.3248" fill="none" id="Repo-to-Repo" style="stroke:#FFA500;stroke-width:2;stroke-dasharray:7,7;"/><polygon fill="#FFA500" points="198.71,359.5858,207.8755,363.1905,203.7053,359.3683,207.5275,355.1981,198.71,359.5858" style="stroke:#FFA500;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="106.8601" x="239.22" y="309.2528">(AT3) Replace ISO</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="85.5921" x="249.854" y="326.9589">&amp;&amp; Checksum</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="81.6531" x="251.8235" y="344.6649">&amp;&amp; Signature</text><path d="M258.464,359.4739 L258.464,386.4739 L326.464,386.4739 L326.464,369.4739 L316.464,359.4739 L258.464,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M316.464,359.4739 L316.464,369.4739 L326.464,369.4739 L316.464,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="47.372" x="264.464" y="378.3709">Tamper</text></g><g class="legend" data-source-line="13"><rect fill="#DDDDDD" height="380.2904" rx="7.5" ry="7.5" style="stroke:#000000;stroke-width:1;" width="242.5111" x="550.0181" y="606.4258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="48.5098" x="558.6581" y="628.3918">STRIDE</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="90.6777" x="614.4478" y="628.3918">Abbreviation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.686" x="558.6581" y="647.4597">S</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="58.9258" x="614.4478" y="647.4597">Spoofing</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.784" x="558.6581" y="666.5276">T</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="71.8897" x="614.4478" y="666.5276">Tampering</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="8.708" x="558.6581" y="685.5955">R</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="79.7297" x="614.4478" y="685.5955">Repudiation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="4.746" x="558.6581" y="704.6634">I</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="151.2134" x="614.4478" y="704.6634">Information Disclosure</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.3759" x="555.0181" y="723.7313">DoS</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="109.1156" x="614.4478" y="723.7313">Denial of Service</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="24.7239" x="555.0181" y="742.7993">EoP</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="137.2135" x="614.4478" y="742.7993">Elevation of Privilege</text><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="613.4258" y2="613.4258"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="632.4937" y2="632.4937"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="651.5617" y2="651.5617"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="670.6296" y2="670.6296"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="689.6975" y2="689.6975"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="708.7654" y2="708.7654"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="727.8333" y2="727.8333"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="746.9012" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="555.0181" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="610.8079" x2="610.8079" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="769.3012" x2="769.3012" y1="613.4258" y2="746.9012"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="555.0181" y="763.8672">&#160;</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="128.9115" x="555.0181" y="782.9351">Relationship Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="46.0178" x="558.6581" y="804.003">Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="91.3356" x="643.5817" y="804.003">Attack Phase</text><rect fill="#FF0000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="808.105"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="25.2139" x="558.6581" y="823.0709">Red</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="85.3297" x="643.5817" y="823.0709">Initial Exploit</text><rect fill="#800080" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="827.1729"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="81.2837" x="558.6581" y="842.1388">Deep Purple</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="119.8955" x="643.5817" y="842.1388">Lateral Movement</text><rect fill="#FFA500" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="846.2408"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="49.7278" x="558.6581" y="861.2068">Orange</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="117.9216" x="643.5817" y="861.2068">Integrity Violation</text><rect fill="#008000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="865.3087"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="40.4178" x="558.6581" y="880.2747">Green</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="123.0875" x="643.5817" y="880.2747">Legitimate Signing</text><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="789.0371" y2="789.0371"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="808.105" y2="808.105"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="827.1729" y2="827.1729"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="846.2408" y2="846.2408"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="865.3087" y2="865.3087"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="884.3767" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="555.0181" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="639.9417" x2="639.9417" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="770.3092" x2="770.3092" y1="789.0371" y2="884.3767"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="555.0181" y="901.3426">&#160;</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="201.6272" x="555.0181" y="920.4105">LightGray box: Trust Boundary</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="232.5111" x="555.0181" y="939.4784">Notes on Relation: STRIDE category</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="89.8517" x="555.0181" y="958.5463">DF: Data Flow</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="98.8956" x="555.0181" y="977.6143">AT: Attack Path</text></g><?plantuml-src rLLjQzj84Fvy-oicDjV4d4tJtXMAI09E_593d1ZB9D2q7zRII5eixOhTbLDpxd-_sLNyrhhqkFjmdC0WpSu-y_8yCuPJMA2G20dNSvGd9-mKJco61K8X2bIfvcN6c5a8MNBD2p0PZzMpa2dTo0qoDXCsH-XQowC537Br35p6CDELiN2jAXbpBT04K70foYhd5cCOXVSW2fxIlRlUmKcKORGmLM5U6v5ARYkD1ix2sx3xfiLOXZn6pIxtmvcZyIYj0etbHHd0hp51dpLMz7J6uquSms8H50LyRBI0eOnVK5cEANs15cbcsVeImjbqrEi3lNNdSurBmQrGSitM40BzIgKIrmTdc95XHi5GRonJiaonhEBwbhUDo3QIYT95RUi94-NAK8tkkAV2DVHG2fw3IY14lHIHF-choHhwEIxhQtGuqM8fNBvqpAQO-mEJYH9kLAugxTAlttpwTRSc6JT8S1VD93cdvueIZ5r6mhgO_IzbheG5x_6Upj-JHm-nX4cbonpNS4jzrEGvLaiIY7nnJHB-pe7TQovJT7WMKoti2Xw4ohVLNpGTedCSQaH9Q9XIO6e5GaXSrurZjwxxGyrNC5TVWaDUL-nEMT830Mvg3ZOiHOIJAdBf3GBeSSkzE5Xt5cpBvpPpTDSqCnBwwJzy66CQ8qlbal8RhbujqJQWcTCa1RiA_cG0FB9AG-CY8ZPqe36-kivTDX-ulNZjZLSDuEObITJG70mSEUmh74JfZJyU3x3dCwdckOZW4UTUFQW33_tu-4X-lqZgNIrkfo0o0hMt3QCsaFBQG29ZNuyKHdpVeNrMUl7J-3SFeIEcBrCVzphyFknrM4UT-e3W76Ww-PoK2GswY-w5vaR1NiS-FCmEUkNEsJV0_au005HAZRzVs9Q74AFAQ_C-IMYwDDLqVkx6mTNE_fKe_fkhZ55BEvshJGFEUeCtBV1AC9bVjB_1pMQfiYFrTvwQgHl8jir4j91epENRpmTuRrj-G7SmS3QKrMJOOjx71Q_LHBw_jsXbq1vPGLTRaL3N3NE7pcahSU_vHyljFwl5l28UlqcKtiFD_lz_qh8jblfB6cx7t6GOVzxrgZiZdZOxbqRM-8c5XogNp4kRjXoDsoAe1wNkubEpzBju3sx3KtT6F4t4KbcmgXwHOp0rPKzDvRVr2ywFkE_EY4_we8tbAVeaNxtQakG_TYmT1gl_31rnHmCU1Y4fZ5KiajLE09yaNJqAUGf_3_JTBlFXPBXBzCV8zFm5?></g></svg>
\ No newline at end of file
+<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="1006px" preserveAspectRatio="none" style="width:818px;height:1006px;background:#FFFFFF;" version="1.1" viewBox="0 0 818 1006" width="818px" zoomAndPan="magnify"><title>Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</title><defs/><g><g class="header" data-source-line="8"><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="242.507" x="562.0221" y="14.9659">Attack Flows and Trust Boundaries</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="169.4799" x="635.0492" y="29.7579">Timestamp: 2026-02-23 18:52 +0100</text></g><g class="title" data-source-line="6"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="750.1033" x="27.2129" y="58.6538">Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</text></g><!--cluster Internet--><g class="cluster" data-qualified-name="Internet" data-source-line="38" id="ent0002"><rect fill="none" height="133.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="94" x="557.18" y="262.8258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="58.7718" x="574.7941" y="279.7918">Internet</text></g><!--cluster DMZ--><g class="cluster" data-qualified-name="DMZ" data-source-line="42" id="ent0004"><rect fill="none" height="93.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="310" x="113.18" y="496.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="31.5559" x="252.4021" y="513.3218">DMZ</text></g><!--cluster Internal Network--><g class="cluster" data-qualified-name="Internal Network" data-source-line="47" id="ent0009"><rect fill="none" height="326.6" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="487" x="36.18" y="80.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="122.0235" x="218.6682" y="97.7218">Internal Network</text></g><!--entity Attacker--><g class="entity" data-qualified-name="Internet.Attacker" data-source-line="39" id="ent0003"><ellipse cx="604.1819" cy="309.3258" fill="#FF0000" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M604.1819,317.3258 L604.1819,344.3258 M591.1819,325.3258 L617.1819,325.3258 M604.1819,344.3258 L591.1819,359.3258 M604.1819,344.3258 L617.1819,359.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="61.6838" x="573.34" y="375.7918">Black Hat</text></g><!--entity WWW--><g class="entity" data-qualified-name="DMZ.WWW" data-source-line="43" id="ent0005"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:0.5;" width="142.3875" x="128.98" y="534.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="122.3875" x="138.98" y="559.3218">Public Web Server:</text></g><g class="entity" data-qualified-name="DMZ.GMN6" data-source-line="44" id="ent0007"><path d="M306.84,540.0358 L306.84,549.8958 L271.62,553.8958 L306.84,557.8958 L306.84,567.7418 A0,0 0 0 0 306.84,567.7418 L407.5171,567.7418 A0,0 0 0 0 407.5171,567.7418 L407.5171,550.0358 L397.5171,540.0358 L306.84,540.0358 A0,0 0 0 0 306.84,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M397.5171,540.0358 L397.5171,550.0358 L407.5171,550.0358 L397.5171,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="79.6771" x="312.84" y="558.9328">T, I, DoS, EoP</text></g><!--entity BS--><g class="entity" data-qualified-name="Internal Network.BS" data-source-line="48" id="ent0010"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:0.5;" width="93.8357" x="52.26" y="138.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="73.8357" x="62.26" y="163.7218">CVS RelEng</text></g><g class="entity" data-qualified-name="Internal Network.GMN11" data-source-line="49" id="ent0012"><path d="M180.68,144.4358 L180.68,154.2858 L146.19,158.2858 L180.68,162.2858 L180.68,172.1418 A0,0 0 0 0 180.68,172.1418 L253.6801,172.1418 A0,0 0 0 0 253.6801,172.1418 L253.6801,154.4358 L243.6801,144.4358 L180.68,144.4358 A0,0 0 0 0 180.68,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M243.6801,144.4358 L243.6801,154.4358 L253.6801,154.4358 L243.6801,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="52.0001" x="186.68" y="163.3328">T, R, EoP</text></g><!--entity Repo--><g class="entity" data-qualified-name="Internal Network.Repo" data-source-line="50" id="ent0014"><path d="M60.13,326.3258 C60.13,316.3258 129.1748,316.3258 129.1748,316.3258 C129.1748,316.3258 198.2195,316.3258 198.2195,326.3258 L198.2195,354.3937 C198.2195,364.3937 129.1748,364.3937 129.1748,364.3937 C129.1748,364.3937 60.13,364.3937 60.13,354.3937 L60.13,326.3258" fill="#F1F1F1" style="stroke:#181818;stroke-width:0.5;"/><path d="M60.13,326.3258 C60.13,336.3258 129.1748,336.3258 129.1748,336.3258 C129.1748,336.3258 198.2195,336.3258 198.2195,326.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="87.8916" x="70.13" y="355.2918">Release Repo</text><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.5579" x="161.6616" y="355.2918">HVT</text></g><g class="entity" data-qualified-name="Internal Network.GMN15" data-source-line="51" id="ent0016"><path d="M369.36,326.5058 L369.36,336.3558 L198.58,340.3558 L369.36,344.3558 L369.36,354.2118 A0,0 0 0 0 369.36,354.2118 L498.9881,354.2118 A0,0 0 0 0 498.9881,354.2118 L498.9881,336.5058 L488.9881,326.5058 L369.36,326.5058 A0,0 0 0 0 369.36,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M488.9881,326.5058 L488.9881,336.5058 L498.9881,336.5058 L488.9881,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="108.6281" x="375.36" y="345.4028">S, T, R, I, DoS, EoP</text></g><!--entity Security Officer--><g class="entity" data-qualified-name="Internal Network.Security Officer" data-source-line="52" id="ent0018"><ellipse cx="339.1788" cy="127.2558" fill="#00FF00" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M339.1788,135.2558 L339.1788,162.2558 M326.1788,143.2558 L352.1788,143.2558 M339.1788,162.2558 L326.1788,177.2558 M339.1788,162.2558 L352.1788,177.2558" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="100.7576" x="288.8" y="193.7218">Security Officer</text></g><!--link BS to Repo--><g class="link" data-entity-1="ent0010" data-entity-2="ent0014" data-link-type="dependency" data-source-line="63" id="lnk19"><path d="M91.63,178.1958 C85.53,196.0058 78.78,223.3858 84.18,246.8258 C89.95,271.8958 100.4099,292.8748 111.1299,310.9548" fill="none" id="BS-to-Repo" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="114.19,316.1158,113.0406,306.3343,111.6399,311.815,106.1592,310.4144,114.19,316.1158" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.3962" x="85.18" y="242.7228">(DF1) Publish ISO + Checksums</text></g><!--link Security Officer to Repo--><g class="link" data-entity-1="ent0018" data-entity-2="ent0014" data-link-type="dependency" data-source-line="64" id="lnk20"><path d="M316.99,198.1058 C306.54,214.3358 293.09,232.6758 278.18,246.8258 C248.35,275.1158 213.8418,296.4679 182.8718,313.0179" fill="none" id="Security Officer-to-Repo" style="stroke:#008000;stroke-width:2;"/><polygon fill="#008000" points="177.58,315.8458,187.4029,315.1319,181.9898,313.4893,183.6324,308.0761,177.58,315.8458" style="stroke:#008000;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.2012" x="295.01" y="242.7228">(DF2) Sign Checksums (GnuPG)</text></g><!--link Repo to WWW--><g class="link" data-entity-1="ent0014" data-entity-2="ent0005" data-link-type="dependency" data-source-line="65" id="lnk21"><path d="M132.85,364.5058 C137.7,392.5258 147.41,440.8658 162.18,480.3558 C169.3,499.3958 177.2972,514.6129 185.6372,528.9129" fill="none" id="Repo-to-WWW" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="188.66,534.0958,187.5811,524.3062,186.141,529.7767,180.6705,528.3366,188.66,534.0958" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="131.5471" x="163.18" y="457.2528">(DF3) Deploy Artifacts</text></g><!--link WWW to Repo--><g class="link" data-entity-1="ent0005" data-entity-2="ent0014" data-link-type="dependency" data-source-line="77" id="lnk24"><path d="M128.73,543.5358 C89.66,534.3758 44.4,516.2358 20.18,480.3558 C6,459.3658 8.86,446.0258 20.18,423.3558 C32.81,398.0358 52.2623,381.5848 74.8923,367.9348" fill="none" id="WWW-to-Repo" style="stroke:#800080;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#800080" points="80.03,364.8358,70.2574,366.0591,75.7486,367.4183,74.3894,372.9095,80.03,364.8358" style="stroke:#800080;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="115.1281" x="21.18" y="438.2528">(AT2) Pivot to Repo</text><path d="M56.7651,448.0618 L56.7651,475.0618 L99.7651,475.0618 L99.7651,458.0618 L89.7651,448.0618 L56.7651,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M89.7651,448.0618 L89.7651,458.0618 L99.7651,458.0618 L89.7651,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="22.958" x="62.7651" y="466.9589">EoP</text></g><!--link WWW to Attacker--><g class="link" data-entity-1="ent0005" data-entity-2="ent0003" data-link-type="dependency" data-source-line="66" id="lnk22"><path d="M226.65,533.8658 C254.94,513.4858 296.14,483.6058 299.18,480.3558 C319.62,458.4558 309.25,438.3758 335.18,423.3558 C371.36,402.3958 484.52,431.3058 523.18,415.3558 C542.02,407.5858 555.0498,397.6506 568.7398,383.7506" fill="none" id="WWW-to-Attacker" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="572.95,379.4758,563.7848,383.0812,569.4415,383.0382,569.4845,388.6949,572.95,379.4758" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="277.5113" x="336.18" y="457.2528">(DF4) Distribute ISO + Checksums + Signature</text></g><!--link Attacker to WWW--><g class="link" data-entity-1="ent0003" data-entity-2="ent0005" data-link-type="dependency" data-source-line="74" id="lnk23"><path d="M622.7,380.3558 C634.53,411.6458 643.42,454.4958 618.18,480.3558 C605.41,493.4458 306.5,482.5058 289.18,488.3558 C261.87,497.5858 240.2273,514.3045 223.4373,529.8145" fill="none" id="Attacker-to-WWW" style="stroke:#FF0000;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#FF0000" points="219.03,533.8858,228.3552,530.7171,222.7028,530.4931,222.9268,524.8406,219.03,533.8858" style="stroke:#FF0000;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="175.1492" x="635.38" y="438.2528">(AT1) Exploit Webserver Vuln</text><path d="M700.9756,448.0618 L700.9756,475.0618 L743.9756,475.0618 L743.9756,458.0618 L733.9756,448.0618 L700.9756,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M733.9756,448.0618 L733.9756,458.0618 L743.9756,458.0618 L733.9756,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="22.958" x="706.9756" y="466.9589">EoP</text></g><!--link Repo to Repo--><g class="link" data-entity-1="ent0014" data-entity-2="ent0014" data-link-type="dependency" data-source-line="80" id="lnk25"><path d="M198.71,321.1358 C218.23,321.9758 233.22,328.3858 233.22,340.3558 C233.22,352.3358 224.2243,358.4748 204.7043,359.3248" fill="none" id="Repo-to-Repo" style="stroke:#FFA500;stroke-width:2;stroke-dasharray:7,7;"/><polygon fill="#FFA500" points="198.71,359.5858,207.8755,363.1905,203.7053,359.3683,207.5275,355.1981,198.71,359.5858" style="stroke:#FFA500;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="106.8601" x="239.22" y="309.2528">(AT3) Replace ISO</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="85.5921" x="249.854" y="326.9589">&amp;&amp; Checksum</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="81.6531" x="251.8235" y="344.6649">&amp;&amp; Signature</text><path d="M258.464,359.4739 L258.464,386.4739 L326.464,386.4739 L326.464,369.4739 L316.464,359.4739 L258.464,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M316.464,359.4739 L316.464,369.4739 L326.464,369.4739 L316.464,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="47.372" x="264.464" y="378.3709">Tamper</text></g><g class="legend" data-source-line="13"><rect fill="#DDDDDD" height="380.2904" rx="7.5" ry="7.5" style="stroke:#000000;stroke-width:1;" width="242.5111" x="550.0181" y="606.4258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="48.5098" x="558.6581" y="628.3918">STRIDE</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="90.6777" x="614.4478" y="628.3918">Abbreviation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.686" x="558.6581" y="647.4597">S</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="58.9258" x="614.4478" y="647.4597">Spoofing</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.784" x="558.6581" y="666.5276">T</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="71.8897" x="614.4478" y="666.5276">Tampering</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="8.708" x="558.6581" y="685.5955">R</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="79.7297" x="614.4478" y="685.5955">Repudiation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="4.746" x="558.6581" y="704.6634">I</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="151.2134" x="614.4478" y="704.6634">Information Disclosure</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.3759" x="555.0181" y="723.7313">DoS</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="109.1156" x="614.4478" y="723.7313">Denial of Service</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="24.7239" x="555.0181" y="742.7993">EoP</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="137.2135" x="614.4478" y="742.7993">Elevation of Privilege</text><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="613.4258" y2="613.4258"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="632.4937" y2="632.4937"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="651.5617" y2="651.5617"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="670.6296" y2="670.6296"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="689.6975" y2="689.6975"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="708.7654" y2="708.7654"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="727.8333" y2="727.8333"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="746.9012" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="555.0181" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="610.8079" x2="610.8079" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="769.3012" x2="769.3012" y1="613.4258" y2="746.9012"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="555.0181" y="763.8672">&#160;</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="128.9115" x="555.0181" y="782.9351">Relationship Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="46.0178" x="558.6581" y="804.003">Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="91.3356" x="643.5817" y="804.003">Attack Phase</text><rect fill="#FF0000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="808.105"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="25.2139" x="558.6581" y="823.0709">Red</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="85.3297" x="643.5817" y="823.0709">Initial Exploit</text><rect fill="#800080" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="827.1729"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="81.2837" x="558.6581" y="842.1388">Deep Purple</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="119.8955" x="643.5817" y="842.1388">Lateral Movement</text><rect fill="#FFA500" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="846.2408"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="49.7278" x="558.6581" y="861.2068">Orange</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="117.9216" x="643.5817" y="861.2068">Integrity Violation</text><rect fill="#008000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="865.3087"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="40.4178" x="558.6581" y="880.2747">Green</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="123.0875" x="643.5817" y="880.2747">Legitimate Signing</text><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="789.0371" y2="789.0371"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="808.105" y2="808.105"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="827.1729" y2="827.1729"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="846.2408" y2="846.2408"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="865.3087" y2="865.3087"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="884.3767" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="555.0181" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="639.9417" x2="639.9417" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="770.3092" x2="770.3092" y1="789.0371" y2="884.3767"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="555.0181" y="901.3426">&#160;</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="201.6272" x="555.0181" y="920.4105">LightGray box: Trust Boundary</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="232.5111" x="555.0181" y="939.4784">Notes on Relation: STRIDE category</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="89.8517" x="555.0181" y="958.5463">DF: Data Flow</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="98.8956" x="555.0181" y="977.6143">AT: Attack Path</text></g><?plantuml-src rLLjQzj84Fvy-oicDjV4d4tJtXMAI09E_593d1ZB9D2q7zRII5eixOhTbLDpxd-_sLNyrhhqkFjmdC0WpSu-y_8yCuPJMA2G20dNSvGd9-mKJco61K8X2bIfvcN6c5a8MNBD2p0PZzMpa2dTo0qoDXCsH-XQowC537Br35p6CDELiN2jAXbpBT04K70foYhd5cCOXVSW2fxIlRlUmKcKORGmLM5U6v5ARYkD1ix2sx3xfiLOXZn6pIxtmvcZyIYj0etbHHd0hp51dpLMz7J6uquSms8H50LyRBI0eOnVK5cEANs15cbcsVeImjbqrEi3lNNdSurBmQrGSitM40BzIgKIrmTdc95XHi5GRonJiaonhEBwbhUDo3QIYT95RUi94-NAK8tkkAV2DVHG2fw3IY14lHIHF-choHhwEIxhQtGuqM8fNBvqpAQO-mEJYH9kLAugxTAlttpwTRSc6JT8S1VD93cdvueIZ5r6mhgO_IzbheG5x_6Upj-JHm-nX4cbonpNS4jzrEGvLaiIY7nnJHB-pe7TQovJT7WMKoti2Xw4ohVLNpGTedCSQaH9Q9XIO6e5GaXSrurZjwxxGyrNC5TVWaDUL-nEMT830Mvg3ZOiHOIJAdBf3GBeSSkzE5Xt5cpBvpPpTDSqCnBwwJzy66CQ8qlbal8RhbujqJQWcTCa1RiA_cG0FB9AG-CY8ZPqe36-kivTDX-ulNZjZLSDuEObITJG70mSEUmh74JfZJyU3x3dCwdckOZW4UTUFQW33_tu-4X-lqZgNIrkfo0o0hMt3QCsaFBQG29ZNuyKHdpVeNrMUl7J-3SFeIEcBrCVzphyFknrM4UT-e3W76Ww-PoK2GswY-w5vaR1NiS-FCmEUkNEsJV0_au005HAZRzVs9Q74AFAQ_C-IMYwDDLqVkx6mTNE_fKe_fkhZ55BEvshJGFEUeCtBV1AC9bVjB_1pMQfiYFrTvwQgHl8jir4j91epENRpmTuRrj-G7SmS3QKrMJOOjx71Q_LHBw_jsXbq1vPGLTRaL3N3NE7pcahSU_vHyljFwl5l28UlqcKtiFD_lz_qh8jblfB6cx7t6GOVzxrgZiZdZOxbqRM-8c5XogNp4kRjXoDsoAe1wNkubEpzBju3sx3KtT6F4t4KbcmgXwHOp0rPKzDvRVr2ywFkE_EY4_we8tbAVeaNxtQakG_TYmT1gl_31rnHmCU1Y4fZ5KiajLE09yaNJqAUGf_3_JTBlFXPBXBzCV8zFm5?></g></svg>
\ No newline at end of file
-- 
cgit v1.2.3