Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Consider adding Threat mechanisms #29

Open
3 tasks
Chris-Turner-NIST opened this issue Sep 3, 2019 · 1 comment
Open
3 tasks

Consider adding Threat mechanisms #29

Chris-Turner-NIST opened this issue Sep 3, 2019 · 1 comment
Labels
Discussion Needed Topic requires further discussion or research to provide more specific actions enhancement New feature or request Object/Relationship Adjustment The issue is related to adding or modifying Objects and/or their Relationships in the data model

Comments

@Chris-Turner-NIST
Copy link
Collaborator

Chris-Turner-NIST commented Sep 3, 2019 •
edited

User Story:

Currently there are no assignable values to assist with establishing current threat levels of a given vulnerability. What can we capture within the Vulntology to better represent these data points?

Possible Data of interest:

  • Temporal concepts
    • Patches available
    • Exploits available
  • Exposure mechanisms
    • Count within environment/world
    • Usage of platform within environment/world
  • Recovery effort if exploited

Goals:

Establish consistent location for threat information within the model
Consider previous and currently discussed Temporal/Threat concepts from CVSS SIG and other organizations and include as objects or properties to existing objects.

Dependencies:

N/A

Acceptance Criteria

  • All readme documentation affected by the changes in this issue have been updated.
  • A Pull Request (PR) is submitted that addresses the goals of this User Story. This issue is referenced in the PR. If the PR only partially addresses a given User Story, the specific goals addressed are identified in the PR.
  • All current graphs, visuals and figures updated to reflect new objects/properties
@Chris-Turner-NIST Chris-Turner-NIST added good first issue Chore Clerical Changes, Documentation Updates etc. labels Sep 3, 2019
@Chris-Turner-NIST Chris-Turner-NIST mentioned this issue Sep 3, 2019
Closed
@Chris-Turner-NIST Chris-Turner-NIST added Discussion Needed Topic requires further discussion or research to provide more specific actions and removed Chore Clerical Changes, Documentation Updates etc. labels Sep 3, 2019
@david-waltermire
Copy link
Collaborator

We should take a look at MITRE ATT&CK.

@Chris-Turner-NIST Chris-Turner-NIST added Object/Relationship Adjustment The issue is related to adding or modifying Objects and/or their Relationships in the data model enhancement New feature or request and removed good first issue labels Oct 23, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Discussion Needed Topic requires further discussion or research to provide more specific actions enhancement New feature or request Object/Relationship Adjustment The issue is related to adding or modifying Objects and/or their Relationships in the data model
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@david-waltermire @Chris-Turner-NIST