Commits · v0.0.16 · STAN4CRA / EN 304 620 Virtual Private Networks Part 1 · GitLab

Dec 18, 2025
- Editorial: Remove Part 1 from README · 4be9b52f
  Aki Braun authored Dec 19, 2025
  
  View commits for tag v0.0.16 v0.0.16
  
  4be9b52f
- Editorial: rename document · 6b8a83f8
  Aki Braun authored Dec 19, 2025
  
  6b8a83f8
- Editorial: fix list numbering · cb9b300e
  Aki Braun authored Dec 19, 2025
  
  cb9b300e
- Informative: re-add a bit of information regarding VPNs that provide access to private networks · 6183c0c7
  Aki Braun authored Dec 19, 2025
  
  6183c0c7
- Normative: failed attempt at eliminating TODOs · 338f88e0
  Aki Braun authored Dec 18, 2025
  
  338f88e0
- Informative: adds two users and slightly loosens definition on use case 4 · eab5b3a3
  Aki Braun authored Dec 18, 2025
  
  eab5b3a3
- Editorial: whitespace, numbering, spelling and other typos · 157f84f1
  Aki Braun authored Dec 18, 2025
  
  157f84f1
- Update tables and lists of mitigations for consistency · 27ed020c
  Valerie Aurora authored Dec 18, 2025
  
  27ed020c
- New mitigation sets and updates of threat risk formulas · 64041170
  Valerie Aurora authored Dec 18, 2025
  
  64041170
- Update threat formulas and risk factors for large enterprise use case · cd451d48
  Valerie Aurora authored Dec 18, 2025
  
  cd451d48
- Split threats by connectivity, add PII specific threat · 18278fd1
  Valerie Aurora authored Dec 18, 2025
  
  18278fd1
- Add PII risk factor · 1bc32e20
  Valerie Aurora authored Dec 18, 2025
  
  1bc32e20
- Add CON risk factor, large enterprise use case, update tables etc. · 9c9821ad
  Valerie Aurora authored Dec 18, 2025
  
  9c9821ad
- Slight clarification to AUT-1 risk factor · 3fd58feb
  Valerie Aurora authored Dec 18, 2025
  
  3fd58feb
- Slight rewrite of AUTH-1 mitigation for clarity · ee9e12f4
  Valerie Aurora authored Dec 18, 2025
  
  ee9e12f4
- Late edit pass · 8accf2ba
  Aki Braun authored Dec 18, 2025
  8accf2ba
Dec 17, 2025
- Slight wording change to used product threat · 638c6607
  Valerie Aurora authored Dec 17, 2025
  
  638c6607
- Add used product threat · 7925abbd
  Valerie Aurora authored Dec 17, 2025
  
  7925abbd
- Add NUTI-1 and NUTI-2 to mitigation sets for SP-3 and SP-4 · 5d3c4471
  Valerie Aurora authored Dec 17, 2025
  
  5d3c4471
- Add detailed secure update requirements and explanation · f8aa68bc
  Valerie Aurora authored Dec 17, 2025
  
  f8aa68bc
- Clean up/expand mitigation sets · a1fbff6d
  Valerie Aurora authored Dec 17, 2025
  
  a1fbff6d
Dec 16, 2025
- Add risk evaluation guidance · 63507892
  Valerie Aurora authored Dec 16, 2025
  
  63507892
- Format/add missing requirements to threats · 936ca809
  Valerie Aurora authored Dec 16, 2025
  
  936ca809
- Clean up TODOs · bea93e4b
  Valerie Aurora authored Dec 16, 2025
  
  bea93e4b
- First pass at mitigation sets · 6095818b
  Valerie Aurora authored Dec 16, 2025
  
  6095818b
- Fix numbering of headings · 30e06264
  Valerie Aurora authored Dec 16, 2025
  
  30e06264
- Convert remaining two threats into outlines with TODO · 28fe2889
  Valerie Aurora authored Dec 16, 2025
  
  28fe2889
- Add outline of prevention of misconfiguration · 3d4c32d1
  Valerie Aurora authored Dec 16, 2025
  
  3d4c32d1
- Add threat for access to assets by configuration error · 4b3c5c34
  Valerie Aurora authored Dec 16, 2025
  
  4b3c5c34
- Add confidentiality of data stored requirement · c26e4a15
  Valerie Aurora authored Dec 16, 2025
  
  c26e4a15
- Update mitigation requirements for UNAA threat · 15e048c2
  Valerie Aurora authored Dec 16, 2025
  
  15e048c2
- Fix format of EISO reference · c0723bb2
  Valerie Aurora authored Dec 16, 2025
  
  c0723bb2
- Consolidate todos for threats and add mitigation set outline · 8353bd11
  Valerie Aurora authored Dec 16, 2025
  
  8353bd11
- Move mitigation sets and security profiles into Annex C · c2f40382
  Valerie Aurora authored Dec 16, 2025
  
  c2f40382
- Remove mitigation mapping in requirements (now in threats) · 9bcbb3f8
  Valerie Aurora authored Dec 16, 2025
  
  9bcbb3f8
Dec 15, 2025
- Add description sentences to each threat · 4c55957a
  Valerie Aurora authored Dec 15, 2025
  
  4c55957a
- High to Medium -> High to Low · 715a43b3
  Valerie Aurora authored Dec 15, 2025
  
  715a43b3
- Update unauthorized authentication and deletion of logs threats · 89a1cc2e
  Valerie Aurora authored Dec 15, 2025
  
  89a1cc2e
- Specify which LOGG-* mitigations are requiremed · a78db5b2
  Valerie Aurora authored Dec 15, 2025
  
  a78db5b2
- Rename threats with four letters TH-XXXX instead of 3 TH-XXX · c3e2dac1
  Valerie Aurora authored Dec 15, 2025
  
  c3e2dac1