From dbc65c449fefa9aaebd7b5543122d1e14101be67 Mon Sep 17 00:00:00 2001 From: stefan Date: Sat, 21 Feb 2026 20:49:40 +0100 Subject: first version of Trust ontology in PlantUML --- PlantUML-ModelingTrust/README.html | 578 +++++++++++++++++++++++++++++++++++++ 1 file changed, 578 insertions(+) create mode 100644 PlantUML-ModelingTrust/README.html (limited to 'PlantUML-ModelingTrust/README.html') diff --git a/PlantUML-ModelingTrust/README.html b/PlantUML-ModelingTrust/README.html new file mode 100644 index 0000000..b04ae20 --- /dev/null +++ b/PlantUML-ModelingTrust/README.html @@ -0,0 +1,578 @@ + + + + + + + + +Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate + + + + + +
+
+

Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate

+
+
+ +
+
+

I use the patterns develop in this paper to model trust relationships (trust boarders, trust anchors) in Zero Trust Architectures.

+
+
+

As an example, I model the process of Downloading an NetBSD ISO Install Image, which has been signed by the NetBSD security officer with a detached GnuPG signature. This is SLSA Level 1 according to the »Supply-chain Levels for Software Artifacts«

+
+
+

I will extend the process from SLSA Level 1 to SLSA Level 4, which will include Reproducible Builds and an immutable linked list of hashes in concatenated Merkle trees.

+
+
+
+
+

Archimate Diagrams

+
+ +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Example from PaperApplied to the NetBSD download
+
+6 3a +
+
+
+6 3c +
+
+
+8 7a Trust Composition +
+
+
+8 7 GnuPG Trust Composition +
+
+
+RSO9 10 RiskSecurityOverlay +
+
+
+RSO9 10 GnuPG RiskSecurityOverlay +
+
+
+9 9 RiskAssessmentPattern +
+
+
+9 9 GnuPG RiskAssessmentPattern +
+
+
+
+
+ + + \ No newline at end of file -- cgit v1.2.3