Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern

From 0c7f33663339ffeab917443901a07914ff58709b Mon Sep 17 00:00:00 2001 From: stefan Date: Sat, 21 Feb 2026 21:32:50 +0100 Subject: GnuPG Signature modelliert, Innentäter begonnen MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../9-9-GnuPG-RiskAssessmentPattern.png | Bin 11227 -> 13687 bytes .../9-9-GnuPG-RiskAssessmentPattern.puml | 12 +- .../9-9-GnuPG-RiskAssessmentPattern.svg | 2 +- .../9-9-GnuPG-RiskAssessmentPattern2.png | Bin 0 -> 17503 bytes .../9-9-GnuPG-RiskAssessmentPattern2.puml | 43 + .../9-9-GnuPG-RiskAssessmentPattern2.svg | 1 + .../9-9-GnuPG-RiskAssessmentPattern3.png | Bin 0 -> 26691 bytes .../9-9-GnuPG-RiskAssessmentPattern3.puml | 63 + .../9-9-GnuPG-RiskAssessmentPattern3.svg | 1 + PlantUML-ModelingTrust/README.adoc | 2 + .../RSO9-10-RiskSecurityOverlay.png | Bin 45597 -> 42281 bytes .../RSO9-10-RiskSecurityOverlay.puml | 7 - .../RSO9-10-RiskSecurityOverlay.svg | 2 +- PlantUML-ModelingTrust/index.adoc | 8 +- PlantUML-ModelingTrust/index.html | 1448 ++++++++++++-------- 15 files changed, 993 insertions(+), 596 deletions(-) create mode 100644 PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.png create mode 100644 PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.puml create mode 100644 PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.svg create mode 100644 PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.png create mode 100644 PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml create mode 100644 PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.svg (limited to 'PlantUML-ModelingTrust') diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.png b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.png index 4328d50..0f886e6 100644 Binary files a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.png and b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.png differ diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.puml b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.puml index 08a84ca..995508a 100644 --- a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.puml +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.puml @@ -7,19 +7,19 @@ Title Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern Grouping(M_Group,"RiskExperience"){ ' Elemente together{ -Motivation_Driver(driver, "»Risk«\nDriver") -Motivation_Stakeholder(assessor, "Risk\nAssessor") +Motivation_Driver(driver, "Manipulated ISO Image") +Motivation_Stakeholder(assessor, "NetBSD User") } -Motivation_Assessment(assessment, "Risk\nAssessment") +Motivation_Assessment(assessment, "Risk of \n Integrity and Authenticity") } together{ -Motivation_Goal(goal, "<>\nGoal") +Motivation_Goal(goal, "Secure Integrity and Authenticity\n of NetBSD ISO Image") -Motivation_Requirement(req, "<>\nRequirement") +Motivation_Requirement(req, "Check GnuPG Signature of ISO Image") } @@ -34,7 +34,7 @@ Rel_Association(driver, assessment) Rel_Association(assessor, assessment) Rel_Association(assessment,goal) -Rel_Realization(req,goal) +Rel_Realization(req,goal,realises) @enduml diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.svg b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.svg index 7fbc4ae..d4a3f57 100644 --- a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.svg +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern.svg @@ -1 +1 @@ - \ No newline at end of file + \ No newline at end of file diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.png b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.png new file mode 100644 index 0000000..39fc0f1 Binary files /dev/null and b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.png differ diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.puml b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.puml new file mode 100644 index 0000000..bafcffa --- /dev/null +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.puml @@ -0,0 +1,43 @@ +@startuml +!include +left to right direction + +Title Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern - Manipulated Signature + +Grouping(M_Group,"RiskExperience"){ +' Elemente +together{ +Motivation_Driver(driver, "Manipulated ISO Image") +Motivation_Stakeholder(assessor, "NetBSD User") +} + +Motivation_Assessment(assessment, "Risk of \n Integrity and Authenticity") + +} + + +together{ +Motivation_Goal(goal, "Secure Integrity and Authenticity\n of NetBSD ISO Image") + +Motivation_Requirement(req, "Check GnuPG Signature of ISO Image") + +Motivation_Requirement(reqwot, "Check WoT of Public Signing Key") +} + + +' driver -[hidden]-> trust +' trust -[hidden]-> resource +' intention -[hidden]down-> trust + + + +' Beziehungen +Rel_Association(driver, assessment) +Rel_Association(assessor, assessment) +Rel_Association(assessment,goal) + +Rel_Realization(req,goal,"realises integrity") +Rel_Realization(reqwot,goal,"realises authenticity") + +@enduml + diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.svg b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.svg new file mode 100644 index 0000000..3721a39 --- /dev/null +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern2.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.png b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.png new file mode 100644 index 0000000..792d0b4 Binary files /dev/null and b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.png differ diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml new file mode 100644 index 0000000..0f63748 --- /dev/null +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.puml @@ -0,0 +1,63 @@ +@startuml +!include +left to right direction + +Title Page 9: Fig. 9: NetBSD Download Risk Assessment Pattern - Malicious Security Officer + +Grouping(M_Group,"RiskExperience"){ +' Elemente +together{ +Motivation_Driver(driver, "Manipulated ISO Image") +Motivation_Stakeholder(assessor, "NetBSD User") +} + +Motivation_Assessment(assessment, "Risk of \n Integrity and Authenticity") + +} + + + +Strategy_Resource(trust_anchor, "Trust Anchor\nPublic Signature Key") +Strategy_Resource(artifact, "NetBSD ISO Image") +Rel_Association(trust_anchor,artifact) + + + +together{ +Motivation_Goal(goal, "Secure Integrity and Authenticity\n of NetBSD ISO Image") + +Motivation_Requirement(req, "Check GnuPG Signature of ISO Image") + +Motivation_Requirement(reqwot, "Check WoT of Public Signing Key") +} + + + +Business_Actor(threat_agent, "Malicious Security Officer") +Business_Event(threat_event, "signs manipulated ISO image") +Business_Event(loss_event, "loss of trust in ISO image") + +Rel_Assignment(threat_agent,threat_event,Assign) + + + + + + + +' driver -[hidden]-> trust +' trust -[hidden]-> resource +' intention -[hidden]down-> trust + + + +' Beziehungen +Rel_Association(driver, assessment) +Rel_Association(assessor, assessment) +Rel_Association(assessment,goal) + +Rel_Realization(req,goal,"realises integrity") +Rel_Realization(reqwot,goal,"realises authenticity") + +@enduml + diff --git a/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.svg b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.svg new file mode 100644 index 0000000..c10899c --- /dev/null +++ b/PlantUML-ModelingTrust/9-9-GnuPG-RiskAssessmentPattern3.svg @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/PlantUML-ModelingTrust/README.adoc b/PlantUML-ModelingTrust/README.adoc index f45ee1b..39940da 100644 --- a/PlantUML-ModelingTrust/README.adoc +++ b/PlantUML-ModelingTrust/README.adoc @@ -29,5 +29,7 @@ I will extend the process from SLSA Level 1 to SLSA Level 4, which will include | image::8-7a-Trust-Composition.png[] | | image::8-7-GnuPG-Trust-Composition.png[] | image::RSO9-10-RiskSecurityOverlay.png[] | | image::RSO9-10-GnuPG-RiskSecurityOverlay.png[] | image::9-9-RiskAssessmentPattern.png[] | | image::9-9-GnuPG-RiskAssessmentPattern.png[] +| | | image::9-9-GnuPG-RiskAssessmentPattern2.png[] +| | | image::9-9-GnuPG-RiskAssessmentPattern3.png[] |=== diff --git a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.png b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.png index 23b4d54..396e104 100644 Binary files a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.png and b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.png differ diff --git a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.puml b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.puml index 9800e0c..33c58af 100644 --- a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.puml +++ b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.puml @@ -83,12 +83,5 @@ Rel_Assignment(threat_agent,threat_event,Assign) - -Strategy_Resource(root, "<>\nRoot Public Key") -Strategy_Resource(system, "Application") -Rel_Association(root, system) - - - @enduml diff --git a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.svg b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.svg index 72398f4..671bb01 100644 --- a/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.svg +++ b/PlantUML-ModelingTrust/RSO9-10-RiskSecurityOverlay.svg @@ -1 +1 @@ - \ No newline at end of file + \ No newline at end of file diff --git a/PlantUML-ModelingTrust/index.adoc b/PlantUML-ModelingTrust/index.adoc index ed40f79..218c327 100644 --- a/PlantUML-ModelingTrust/index.adoc +++ b/PlantUML-ModelingTrust/index.adoc @@ -25,9 +25,11 @@ I will extend the process from SLSA Level 1 to SLSA Level 4, which will include |=== | Example from Paper | | Applied to the NetBSD download -| image::6-3a.svg[] | | image::6-3c.svg[] -| image::8-7a-Trust-Composition.svg[] | | image::8-7-GnuPG-Trust-Composition.svg[] +| image::6-3a.svg[] | | image::6-3c.svg[] +| image::8-7a-Trust-Composition.svg[] | | image::8-7-GnuPG-Trust-Composition.svg[] | image::RSO9-10-RiskSecurityOverlay.svg[] | | image::RSO9-10-GnuPG-RiskSecurityOverlay.svg[] -| image::9-9-RiskAssessmentPattern.svg[] | | image::9-9-GnuPG-RiskAssessmentPattern.svg[] +| image::9-9-RiskAssessmentPattern.svg[] | | image::9-9-GnuPG-RiskAssessmentPattern.svg[] +| | | image::9-9-GnuPG-RiskAssessmentPattern2.svg[] +| | | image::9-9-GnuPG-RiskAssessmentPattern3.svg[] |=== diff --git a/PlantUML-ModelingTrust/index.html b/PlantUML-ModelingTrust/index.html index e2906d4..9f9b0bb 100644 --- a/PlantUML-ModelingTrust/index.html +++ b/PlantUML-ModelingTrust/index.html @@ -1,578 +1,870 @@ - - - - - - - - -Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate - - - - - -

Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate

-
»Ontological Analysis and Redesign of Risk Modeling in ArchiMate«
-
-
- -
  by Prince Sales, Tiago & Almeida, João & Santini, Sebastiano & Baião, Fernanda & Guizzardi, Giancarlo.
  -
  -
  - -
    https://www.researchgate.net/publication/326835902_Ontological_Analysis_and_Redesign_of_Risk_Modeling_in_ArchiMate
    -
  -
  -
-
-
-
»Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate«
-
-
- -
  by Glenda Amaral, Tiago Prince Sales, Giancarlo Guizzardi, João Paulo A. Almeida, and Daniele Porello
  -
  -
  - -
    https://www.researchgate.net/publication/344319377_Modeling_Trust_in_Enterprise_Architecture_A_Pattern_Language_for_ArchiMate
    -
  -
  -
-
-

I use the patterns develop in this paper to model trust relationships (trust boarders, trust anchors) in Zero Trust Architectures.

As an example, I model the process of Downloading an NetBSD ISO Install Image, which has been signed by the NetBSD security officer with a detached GnuPG signature. This is SLSA Level 1 according to the »Supply-chain Levels for Software Artifacts«

I will extend the process from SLSA Level 1 to SLSA Level 4, which will include Reproducible Builds and an immutable linked list of hashes in concatenated Merkle trees.

Archimate Diagrams

- ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Example from Paper		Applied to the NetBSD download
- - - -		- - - -
- - - -		- - - -
- - - -		- - - -
- - - -		- - - -

Example from Paper

Applied to the NetBSD download

- - - \ No newline at end of file + + + + + + +Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate + + + + + +

Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate

+
+»Ontological Analysis and Redesign of Risk Modeling in ArchiMate« +
+
- +
  +by Prince Sales, Tiago & Almeida, João & Santini, Sebastiano & Baião, Fernanda & Guizzardi, Giancarlo. +
  +
  - +
    +https://www.researchgate.net/publication/326835902_Ontological_Analysis_and_Redesign_of_Risk_Modeling_in_ArchiMate +
    +
  +
+
+
+»Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate« +
+
- +
  +by Glenda Amaral, Tiago Prince Sales, Giancarlo Guizzardi, João Paulo A. Almeida, and Daniele Porello +
  +
  - +
    +https://www.researchgate.net/publication/344319377_Modeling_Trust_in_Enterprise_Architecture_A_Pattern_Language_for_ArchiMate +
    +
  +
+

I use the patterns develop in this paper to model trust relationships (trust boarders, trust anchors) in Zero Trust Architectures.

I will extend the process from SLSA Level 1 to SLSA Level 4, which will include Reproducible Builds and an immutable linked list of hashes in concatenated Merkle trees.

Archimate Diagrams

+ ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

Example from Paper		Applied to the NetBSD download
+ +		+ +
+ +		+ +
+ +		+ +
+ +		+ +
		+ +
		+ +

+ + + -- cgit v1.2.3