Commit 850af663 authored by Valerie Aurora's avatar Valerie Aurora
Browse files

FIXME Clause 4.6: Add new list of use cases and risk factors

Remaining use cases need to be converted to full description format.
parent 1bbb1f7d
Loading
Loading
Loading
Loading
+71 −0
Original line number Diff line number Diff line
@@ -595,6 +595,77 @@ While it is possible to list every possible combination of risk factor levels, t

New use cases may be added along with any new risk factors or requirements necessary to fully treat the risks.

Any use case for an end product can be converted to an integrator use case by copying it and setting the RF-INI value to 0.

TODO add description of naming convention

## 4.6.2 Use case descriptions

#### 4.6.2.1 UC-VI-RES: Virtual interface for research within a host system

* Goal: Simulate networking for research or development
* Description:
  * Examples: Network interfaces in loopback, containers, tunnel to local application
  * Product type: Virtual network interface
  * Physical access: N/A
  * Network connectivity: Only to other VMs on same system
  * Function: Transmit data between VMs for research or development purposes
  * Host system impact: Low
  * Complexity: Low
  * User administration skill: High (low risk)
  * Initial setup: Low risk

#### 4.6.2.N UC-PH-LIT: Physical network interface for home IoT

* Goal: Connect a home appliance to a home network for local control and monitoring
* Description:
  * Examples: Smart lightbulbs, coffee machines
  * Product type: Physical network interface
  * Physical access: Home, medium risk
  * Function: Connect low sensitivity device to local private network for management
  * Complexity: High
  * Host system impact: Low
  * User administration skill: Low (high risk)
  * Initial setup environment: Home, medium risk

#### 4.6.2.N UC-PH-LIT-INT: Physical network interface for home IoT - integrator

Same as UC-PH-LIT, but intial setup is integrator manufacturing, low risk.

TODO describe remaining use cases in above format

| Use case when purchased standalone | PHY | NET | FUN | SYS | COM | ADM | INI |
|------------------------------------|-----|-----|-----|-----|-----|-----|-----|
| isolated researcher vm             | 0   | 0   | 0   | 0   | 0   | 0   | 0   |
| vending machine internal network   | 1   | 0   | 0   | 0   | 0   | 0   | 0   |
| coffee machine managed locally     | 1   | 1   | 0   | 0   | 0   | 2   | 1   |
| coffee machine - integrator        | 1   | 1   | 0   | 0   | 0   | 2   | 0   |
| smart lightbulb                    | 1   | 1   | 0   | 0   | 2   | 2   | 1   |
| smart lightbulb - integrator       | 1   | 1   | 0   | 0   | 2   | 2   | 0   |
| vending machine public network     | 2   | 2   | 1   | 1   | 2   | 1   | 0   |
| home router filtered               | 0   | 1   | 1   | 1   | 2   | 2   | 1   |
| home router public                 | 0   | 2   | 1   | 1   | 2   | 1   | 2   |
| edge router                        | 0   | 2   | 1   | 1   | 2   | 0   | 2   |
| intranet router                    | 0   | 1   | 1   | 1   | 2   | 0   | 1   |
| filtered vm infrastructure         | 0   | 1   | 2   | 2   | 1   | 0   | 1   |
| personal desktop home              | 1   | 1   | 1   | 1   | 2   | 2   | 2   |
| personal desktop work              | 1   | 1   | 2   | 1   | 2   | 2   | 1   |
| smart meter public network         | 2   | 2   | 1   | 1   | 2   | 1   | 0   |
| library computer                   | 2   | 2   | 1   | 1   | 2   | 2   | 2   |
| personal laptop via USB            | 2   | 2   | 2   | 1   | 2   | 2   | 2   |
| shared web server vm               | 0   | 2   | 1   | 1   | 2   | 0   | 1   |
| public vm critical                 | 0   | 2   | 2   | 2   | 2   | 0   | 2   |
| work phone                         | 2   | 2   | 2   | 2   | 2   | 1   | 0   |
| ATM filtered network               | 2   | 1   | 2   | 2   | 2   | 0   | 0   |
| solar panel inverter controller    | 2   | 2   | 2   | 2   | 2   | 0   | 0   |
| work laptop                        | 2   | 2   | 2   | 2   | 2   | 1   | 1   |
| smart watch                        | 2   | 1   | 1   | 1   | 2   | 0   | 0   |
| VPN interface                      | 0   | 2   | 2   | 2   | 2   | 2   | 2   |
| personal phone                     | 2   | 2   | 2   | 2   | 2   | 2   | 0   |
| personal laptop                    | 2   | 2   | 2   | 2   | 2   | 2   | 0   |

TODO replace below use cases with above use cases

### 4.6.1 Wired network interface use cases

#### 4.6.1.1 UC-WD-1 Wired stationary home IoT device