Commit c0386abd authored by Giulio Di Clemente's avatar Giulio Di Clemente
Browse files

Edit EN-304-624.md End of Figure C.2.2-1 (Table B.13)

parent b1a22991

EN-304-624.md

+105 −0
Original line number Diff line number Diff line
@@ -2060,6 +2060,111 @@ The risk are then calculated and their applicability defined using the matrixes 
    <td>UC1, UC2, UC3</td>

  </tr>



  <tr>

    <td>T_SYS04</td>

    <td>Exploiting insecure user authentication cfedentials or access rights in default user account data </td>

    <td>SYS02</td>

    <td>Availability</td>

    <td>AVA-2</td>

    <td>AVA-1</td>

    <td>AVA-1</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-0 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>Medium</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>



  <tr>

    <td>T_SYS05</td>

    <td>Modifying user authentication credentials or access rights in unprotected user account data </td>

    <td>SYS02</td>

    <td>Integrity</td>

    <td>INT-1</td>

    <td>INT-0</td>

    <td>INT-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-0 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>High</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>



  <tr>

    <td>T_SYS06</td>

    <td>Disclosing authentication credentials in unprotected user account data </td>

    <td>SYS02</td>

    <td>Confidentiality</td>

    <td>CON-1</td>

    <td>CON-0</td>

    <td>CON-0</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-0 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>High</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>



  <tr>

    <td>T_SYS07</td>

    <td>Modifying or deleting events in unprotected user account data </td>

    <td>SYS03</td>

    <td>Integrity, Availability, Confidentiality</td>

    <td>AVA-2, INT-2, TRA-2</td>

    <td>AVA-2, INT-2, TRA-2</td>

    <td>AVA-2, INT-2, TRA-2</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>Low </td>

    <td>Medium</td>

    <td>Medium</td>

    <td>NA</td>

    <td>UC2, UC3</td>

  </tr>





  <tr>

    <td>T_SYS08</td>

    <td>Accessing settings or sensitive parameters via an unprotected system configuration management function </td>

    <td>SYS11 \ PKI Services</td>

    <td>Integrity, Availability, Confidentiality</td>

    <td>AVA-2, INT-0, TRA-2</td>

    <td>AVA-1, INT-0, TRA-1</td>

    <td>AVA-1, INT-0, TRA-1</td>

    <td>NA</td>

    <td></td>

    <td>DEP-2 <br> NET-1 <br> USR-1 <br> OPS-1 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-1 <br> OPS-2 <br> IF-1</td>

    <td>DEP-0 <br> NET-2 <br> USR-2 <br> OPS-2 <br> IF-2</td>

    <td>NA</td>

    <td>Medium</td>

    <td>High</td>

    <td>High</td>

    <td>NA</td>

    <td>UC1, UC2, UC3</td>

  </tr>



</table>

</div>