Commit bd3e606e authored by Giulio Di Clemente's avatar Giulio Di Clemente
Browse files

Edit EN-304-624.md Risk evaluation part 3

parent 22dccef5

EN-304-624.md

+236 −0
Original line number Diff line number Diff line
@@ -2603,6 +2603,242 @@ The risk are then calculated and their applicability defined using the matrixes 






<div align="center">



**Table B.15: Risk evaluation part 3**

</br>

<table style="border-collapse:collapse; width:100%;">

  <tr>

    <td colspan="3">Threat</td>

    <td colspan="6">Risk-factor</td>

    <td colspan="1">Value UC1</td>

    <td colspan="1">Value UC2</td>

    <td colspan="1">Value UC3</td>

    <td colspan="1">Value UC4</td>

    <td colspan="6">Value UC4</td>

  </tr>



  <tr>

    <th>ID</th>

    <th>Description</th>

    <th>Asset</th>

    <th>Impact Type</th>

    <th>Value UC1</th>

    <th>Value UC2</th>

    <th>Value UC3</th>

    <th>Value UC4</th>

    <th>Likelihood Type</th>

    <th>Value UC1</th>

    <th>Value UC2</th>

    <th>Value UC3</th>

    <th>Value UC4</th>

    <th>Risk Value UC1</th>

    <th>Risk Value UC2</th>

    <th>Risk Value UC3</th>

    <th>Risk Value UC4</th>

    <th>UC / App.</th>

  </tr>



  <tr>

    <td>T_GEN01</td>

    <td>Modifying CA private keys in unprotected CA key data </td>

    <td>GEN01</td>

    <td>Integrity, Availability</td>

    <td>AVA-1, INT-0</td>

    <td>AVA-1, INT-0</td>

    <td>AVA-0, INT-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>High</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>







  <tr>

    <td>T_GEN02</td>

    <td>Disclosing CA private keys in unprotected CA key data </td>

    <td>GEN01</td>

    <td>Integrity, Availability</td>

    <td>AVA-1, INT-0</td>

    <td>AVA-1, INT-0</td>

    <td>AVA-0, INT-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>High</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>





  <tr>

    <td>T_GEN03</td>

    <td>Deleting CA private keys in unprotected CA key data </td>

    <td>GEN01</td>

    <td>Integrity, Availability</td>

    <td>AVA-1, INT-0</td>

    <td>AVA-1, INT-0</td>

    <td>AVA-0, INT-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>High</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>







  <tr>

    <td>T_GEN04</td>

    <td>Modifying subject private keys in unprotected subject key data </td>

    <td>GEN02</td>

    <td>Integrity, Availability</td>

    <td>AVA-2, INT-2</td>

    <td>AVA-1, INT-1</td>

    <td>AVA-0, INT-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>Low</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td> UC2, UC3</td>

  </tr>











  <tr>

    <td>T_GEN05</td>

    <td>Disclosing subject private keys in unprotected subject key data </td>

    <td>GEN02</td>

    <td>Integrity, Availability</td>

    <td>AVA-2, INT-2</td>

    <td>AVA-1, INT-1</td>

    <td>AVA-0, INT-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>Low</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td> UC2, UC3</td>

  </tr>







  <tr>

    <td>T_GEN06</td>

    <td>Deleting subject private keys in unprotected subject key data </td>

    <td>GEN02</td>

    <td>Integrity, Availability</td>

    <td>AVA-2, INT-2</td>

    <td>AVA-1, INT-1</td>

    <td>AVA-0, INT-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>Low</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td> UC2, UC3</td>

  </tr>





  <tr>

    <td>T_GEN07</td>

    <td>Accessing CA or subject private keys via an unprotected key management function</td>

    <td>GEN11 \ PKI Services</td>

    <td>Integrity, Availability</td>

    <td>AVA-2, INT-0, TRA-2</td>

    <td>AVA-1, INT-0, TRA-1</td>

    <td>AVA-0, INT-0, TRA-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>High</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>





  <tr>

    <td>T_GEN08</td>

    <td>Accessing signing operations via an unprotected certificate generation function</td>

    <td>GEN12 \ PKI Services</td>

    <td>Integrity, Availability</td>

    <td>AVA-2, INT-0, TRA-2</td>

    <td>AVA-1, INT-0, TRA-1</td>

    <td>AVA-0, INT-0, TRA-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>High</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>



  









</table>

</div>