diff --git a/_sources/crisk.txt b/_sources/crisk.txt index 0fdb656..acfdb73 100644 --- a/_sources/crisk.txt +++ b/_sources/crisk.txt @@ -1,11 +1,59 @@ -The crisk Module -================ +The ``crisk`` Package +===================== -.. module:: crisk +.. automodule:: crisk -.. module:: crisk.mainview +.. currentmodule:: crisk.model +.. automodule:: crisk.model -The crisk.reports Module -======================== +.. autoclass:: Basic + :members: + +.. autoclass:: Asset + :members: + +.. autoclass:: Vulnerability + :members: + +.. autoclass:: Threat + :members: + +.. autoclass:: Owner + :members: + +.. currentmodule:: crisk.mainview +.. automodule:: crisk.mainview + +.. autoclass:: Step + :members: + +.. autoclass:: MainView + :members: + +.. automodule:: crisk.basicsview +.. currentmodule:: crisk.basicsview + +.. autoclass:: BasicsView + :members: + +.. automodule:: crisk.inventoryview +.. currentmodule:: crisk.inventoryview + +.. autoclass:: InventoryView + :members: + +.. autoclass:: InventoryAddEdit + :members: + +.. autoclass:: vuln + :members: + +.. autoclass:: TempModel + :members: + +.. automodule:: crisk.vulnerabilitiesview +.. currentmodule:: crisk.vulnerabilitiesview + +.. autoclass:: VulnerabilitiesView + :members: -.. automodule:: crisk.reports diff --git a/_sources/index.txt b/_sources/index.txt index e8a253d..1cd258a 100644 --- a/_sources/index.txt +++ b/_sources/index.txt @@ -26,10 +26,10 @@ Contents .. toctree:: :maxdepth: 2 - crisk screenshots using - + todo + crisk Indices and tables ================== diff --git a/_sources/todo.txt b/_sources/todo.txt new file mode 100644 index 0000000..8314218 --- /dev/null +++ b/_sources/todo.txt @@ -0,0 +1,15 @@ +Stuff to do +=========== + +You can suggest more features or report bugs on our `issue tracking system `_ + +Next features +------------- + +* Vulnerability per asset report +* Import `OpenVAS `_ reports + +Future features +--------------- + +* Adding controls funcionality diff --git a/_sources/using.txt b/_sources/using.txt index 25c0425..b1aa015 100644 --- a/_sources/using.txt +++ b/_sources/using.txt @@ -4,9 +4,17 @@ Using Crisk Analyzing servers and computers ------------------------------- +This is the most direct way to use Crisk. Assign each server/computer an owner on the asset screen, and make sure to include its value. You can consider the hardware value only or add the value of the information stored on that asset. + +You can also add other assets like network appliances, routers, etc. and consider the value as how important those items are for the network as a whole. + + Analyzing information --------------------- -Analyzing software ------------------- +This works the same way as above, but consider information only while adding to the assets. This way of working is more independent of hardware and computers and can facilitate analysis of processes. + +The Risk Matrix +--------------- +The Vulnerabilities report includes a Risk Matrix. The risk matrix is a scatter graphic that shows where the risks are concentrated on the analysis. The bigger the circle, the most vulnerabilities are concentrated on that point. The green area shows where vulnerabilities are hard to occur (low probability) and/or have less impact (low severity). On the other hand, the red area shows where the vulnerabilities are more likely to happen (high probability) and/or have more impact (high severity). diff --git a/_static/criskicon.ico b/_static/criskicon.ico new file mode 100644 index 0000000..421389b Binary files /dev/null and b/_static/criskicon.ico differ diff --git a/_static/default.css b/_static/default.css index ed177c5..eaad6d1 100644 --- a/_static/default.css +++ b/_static/default.css @@ -5,7 +5,7 @@ body { font-family: sans-serif; font-size: 100%; - background-color: #11303d; + background-color: #dbecac; color: #000; margin: 0; padding: 0; diff --git a/_static/logo.png b/_static/logo.png new file mode 100644 index 0000000..7a91792 Binary files /dev/null and b/_static/logo.png differ diff --git a/_static/sidebarlogo.png b/_static/sidebarlogo.png new file mode 100644 index 0000000..e078ddf Binary files /dev/null and b/_static/sidebarlogo.png differ diff --git a/_static/sphinxdoc.css b/_static/sphinxdoc.css index 2c63178..168a152 100644 --- a/_static/sphinxdoc.css +++ b/_static/sphinxdoc.css @@ -10,7 +10,7 @@ body { line-height: 150%; text-align: center; /*background-color: #AFC1C4; */ - background-color: #BFD1D4; + background-color: #dbecac; color: black; padding: 0; border: 1px solid #aaa; diff --git a/crisk.html b/crisk.html index 41d15f1..a40e9b8 100644 --- a/crisk.html +++ b/crisk.html @@ -2,8 +2,8 @@ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> - The crisk Module — Crisk v0.3 documentation - + The crisk Package — Crisk v0.3 documentation + + @@ -24,6 +25,11 @@ + +
+Crisk logo +Fork me on GitHub +
-
-
-
-
- - -
-

The crisk Module

-
-
-

The crisk.reports Module

-

This is the report package of the Crisk application.

-
- - -
-
-
+
+
+
+
+ + +
+

The crisk Package

+

This is the basic package for the Crisk Application.

+
+

crisk.model

+

This module provides the data model for Crisk, using Elixir with the sqlite +engine.

+
+
+
+class crisk.model.Basic(**kwargs)
+
+ +
+
+class crisk.model.Asset(**kwargs)
+
+ +
+
+class crisk.model.Vulnerability(**kwargs)
+
+ +
+
+class crisk.model.Threat(**kwargs)
+
+ +
+
+class crisk.model.Owner(**kwargs)
+
+ +
+

crisk.mainview

+

This module manages the main window of the Crisk app, using Kiwi GladeView as base view +for the other SlaveViews.

+
+
+
+class crisk.mainview.Step(name, idx)
+

Simple placeholder class for the maintree.

+ +++ + + + + + +
Parameters:
    +
  • name (String) – name of the new step
  • +
  • idx (Integer) – index on the main tree
  • +
+
Return type:

Step instance

+
+
+ +
+
+class crisk.mainview.MainView
+

The Kiwi BaseView, using GladeDelegate. Provides the main tree, menu bars and +status bar. Also provides the placeholder frame on the right where the kiwi +SlaveViews will be shown.

+
+
+check_and_detach()
+
Checks if there is a slave attached to the mainview and detaches it if true.
+ +
+
+open_or_new()
+
Shows a dialog with options for opening a file or creating a new one. Used +on the startup to provide a db_file
+ +
+ +
+

crisk.basicsview

+

This module provides a SlaveView with basic data for the Crisk Application.

+
+
+
+class crisk.basicsview.BasicsView
+
Provides a Proxy slave view.
+ +
+

crisk.inventoryview

+

Asset inventory view.

+
+
+
+class crisk.inventoryview.InventoryView(parent)
+

Creates the SlaveView and list of Assets.

+ +++ + + + +
Parameters:
    +
  • parent – the mainwindow instance to be used as parent for dialogs
  • +
+
+
+ +
+
+class crisk.inventoryview.InventoryAddEdit(list_updater, edit=None)
+

Shows a dialog to add or edit an Asset.

+ +++ + + + +
Parameters:
    +
  • list_updater (Callable) – The function responsible for updating the inventory list
  • +
  • edit (TempModel) – The TempModel instance to be edited
  • +
+
+
+ +
+
+class crisk.inventoryview.vuln(name, state=False, id=None)
+

Placeholder class for assembling a kiwi ObjectList with vulnerabilities in the +add/edit vulnerability window.

+ +++ + + + + + +
Parameters:
    +
  • name (String) – Name of the vulnerability
  • +
  • state (Boolean) – If the vulnerability checkbox is ticked or not
  • +
  • id (Integer or None) – An id to make easier to delete/change data on the DB
  • +
+
Return type:

a vuln instance

+
+
+ +
+
+class crisk.inventoryview.TempModel(name=None, description=None, value=0, vulns=None, owner=None)
+

This class is a temporary model copy of the Asset defined in crisk.model.Asset, +used to block direct alterations to the DB while adding or editing assets (thus +giving the option to cancel).

+ +++ + + + +
Parameters:
    +
  • name (String) – The name of the asset
  • +
  • description (String) – The short description of the asset
  • +
  • value (Integer) – The monetary value of the asset
  • +
  • vulns (List) – crisk.model.Vulnerability associated with the asset
  • +
  • owner (Owner) – The owner of the asset, from crisk.model.Owner
  • +
+
+
+
+get_invent_owner()
+

Returns the name of the Asset owner as a String or None if there is no +owner associated. Used for the invent_owner property().

+ +++ + + + +
Return type:String
+
+ +
+
+invent_owner
+

Returns the name of the Asset owner as a String or None if there is no +owner associated. Used for the invent_owner property().

+ +++ + + + +
Return type:String
+
+ +
+
+set_invent_owner(value)
+

Sets the owner of the asset. Used as a property().

+ +++ + + + +
Parameters:
    +
  • value (String) – the name to be set
  • +
+
+
+ +
+ +
+

crisk.vulnerabiliesview

+

This module provides the Vulnerabilities slave view and list.

+
+
+
+class crisk.vulnerabilitiesview.VulnerabilitiesView(parent)
+

Creates a new GladeSlaveView to be attached to the mainview.

+ +++ + + + +
Parameters:
    +
  • parent (View) – The parent mainview to be used as parent for dialogs.
  • +
+
+
+ +
+ + +
+
+
diff --git a/genindex.html b/genindex.html index 8e38091..554a814 100644 --- a/genindex.html +++ b/genindex.html @@ -3,7 +3,7 @@ Index — Crisk v0.3 documentation - + + + +
+Crisk logo +Fork me on GitHub +
+
+
+ + +

Quick search

+ +
+
-
@@ -89,7 +170,7 @@

Navigation

diff --git a/index.html b/index.html index b19bd75..88194bf 100644 --- a/index.html +++ b/index.html @@ -3,7 +3,7 @@ About Crisk — Crisk v0.3 documentation - + + - + + +
+Crisk logo +Fork me on GitHub +
+
+
+

Table Of Contents

+ + +

Next topic

+

Screenshots and examples

+

This Page

+ +

Quick search

+ +
+
diff --git a/modindex.html b/modindex.html index 0eeddf4..e5266f8 100644 --- a/modindex.html +++ b/modindex.html @@ -3,7 +3,7 @@ Global Module Index — Crisk v0.3 documentation - + + @@ -24,6 +25,11 @@ + +
+Crisk logo +Fork me on GitHub +
+
+
+

Quick search

+ +
+
@@ -57,11 +73,23 @@

Global Module Index

    + crisk.basicsview + + +     + crisk.inventoryview + + +     crisk.mainview     - crisk.reports + crisk.model + + +     + crisk.vulnerabilitiesview @@ -69,16 +97,6 @@

Global Module Index

-
-
-

Quick search

- -
-
diff --git a/screenshots.html b/screenshots.html index 7a26df4..4a1d8ee 100644 --- a/screenshots.html +++ b/screenshots.html @@ -3,7 +3,7 @@ Screenshots and examples — Crisk v0.3 documentation - + + - + + +
+Crisk logo +Fork me on GitHub +
+
+
+

Table Of Contents

+ + +

Previous topic

+

The crisk Module

+

Next topic

+

Using Crisk

+

This Page

+ +

Quick search

+ +
+
@@ -73,35 +108,6 @@

Vulnerability list - -

diff --git a/search.html b/search.html index bce2eea..dd7fb0d 100644 --- a/search.html +++ b/search.html @@ -3,7 +3,7 @@ Search — Crisk v0.3 documentation - + + @@ -24,6 +25,11 @@ + +
+Crisk logo +Fork me on GitHub +
+
+
+
+
@@ -60,10 +70,6 @@

Search

-
-
-
-
diff --git a/searchindex.json b/searchindex.json index 8d05516..5612f3f 100644 --- a/searchindex.json +++ b/searchindex.json @@ -1 +1 @@ -[["index","screenshots","using","crisk"],["About Crisk","Screenshots and examples","Using Crisk","The crisk Module"],{"find":[],"onli":[0],"launchpad":[],"easi":[0],"menu":[],"slaveview":[],"should":[0],"to":[0],"window":[],"analyz":[0,2],"vulner":[0,1],"main":[],"analys":[],"modul":[0,3],"futur":[0],"applic":[3],"sourc":[0],"risk":[0,1],"get":[0],"spell":[],"new":[0],"report":[0,1,3],"ticket":[0],"now":[0],"name":[],"and":[0,1,2],"bar":[],"like":[0],"organ":[0],"on_open__activ":[],"list":[0,1],"server":[0,2],"exampl":[0,1],"t":[],"contain":[0],"found":[],"where":[],"manag":[0],"crisk":[0,2,3],"pleas":[],"www":[],"right":[0],"frame":[],"blank":[],"direct":[0],"vuln":[],"sampl":[0,1],"expect":[],"toctre":[0],"download":[0],"52":[0],"index":[0],"statu":[],"for":[0],"content":[0],"adapt":[0],"on_exit__activ":[],"import":[],"net":[],"gener":[0],"be":[],"screen":[0,1],"free":[0],"step":[],"base":[],"repositori":[0],"maintre":[],"tue":[0],"on":[0],"39":[0],"idx":[],"of":[3],"page":[0],"s":[],"pdf":[],"view":[],"com":[0],"or":[0],"block":[],"softwar":[0,2],"feel":[0],"app":[0],"profession":[0],"8217":[],"placehold":[],"open_or_new":[],"on_maintree__selection_chang":[],"path":[],"total":[1],"check_and_detach":[],"your":[0],"git":[0],"feb":[0],"on_total_vuln_report__activ":[],"lighthous":[0],"coredump":[0],"system":[0],"least":[0],"by":[0],"master":[0],"asset":[0,1],"basic":[0,1],"zipfil":[0],"on_new__activ":[],"analysi":[0],"unexpect":[],"mainview":[],"welcom":[],"tool":[0],"search":[0],"but":[0],"autodoc":[],"line":[],"with":[0],"analyst":[0],"png":[],"info":[0,1],"unind":[],"none":[],"graphic":[0],"15":[0],"17":[0],"provid":[0],"tree":[],"us":[0,2],"gladeview":[],"will":[],"can":[0],"error":[],"about":[0],"root":[0],"control":[0],"kiwi":[],"featur":[0],"comput":[0,2],"quickstart":[0],"creat":[0],"is":[0,3],"arg":[],"it":[0],"indic":[0],"packag":[3],"as":[0],"liter":[],"at":[0],"file":[0],"tabl":[0],"tarbal":[0],"check":[],"__init__":[],"on_about__activ":[],"on_inventory_report__activ":[],"form":[0],"secur":[0],"suggest":[0],"end":[],"also":[],"other":[],"gladedeleg":[],"avaiabl":[0],"bug":[0],"you":[0],"document":[0],"simpl":[0],"imag":[],"complet":[0],"http":[],"screenshot":[0,1],"track":[0],"baseview":[],"clone":[0],"object":[0],"on_total_asset_report__activ":[],"mai":[0],"develop":[0],"class":[],"shown":[],"inventori":[0,1],"a":[0],"sy":[],"github":[0],"sphinx":[0],"bullet":[],"markup":[],"no":[],"explicit":[],"inform":[0,2],"without":[],"thi":[0,3],"the":[0,3],"2009":[0]}] \ No newline at end of file +[["index","crisk","todo","screenshots","using"],["About Crisk","The crisk Package","Stuff to do","Screenshots and examples","Using Crisk"],{"queri":[],"on_button_add__click":[],"correl":[],"tt":[1],"0":[1],"sourc":[0],"risk":[0,3,4],"fals":[1],"autoattribut":[],"veri":[],"ticket":[0],"db_file":[1],"on_open__activ":[],"list":[0,3,1],"iter":[],"item":[4],"setitem":[],"pleas":[],"the":[0,1,4],"be":[1],"direct":[0,1,4],"download":[0],"n":[],"click":[],"append":[],"index":[0,1],"what":[],"delet":[1],"new":[0,1],"method":[],"gener":[0],"lighthouseapp":[],"path":[],"sinc":[],"valu":[4,1],"search":[0],"proxy_upd":[],"base":[1],"basicsview":[0,1],"permit":[],"action":[],"chang":[1],"via":[],"extra":[],"app":[0,1],"deprec":[],"unix":[],"boolean":[1],"on_maintree__selection_chang":[],"total":[3],"check_and_detach":[1],"select":[],"kei":[],"feb":[0],"lighthous":[0],"to":[0,1,2,4],"monetari":[1],"handler":[],"asset":[0,1,2,3,4],"scope":[],"type":[1],"more":[4,2],"mainview":[0,1],"relat":[],"autodoc":[],"arg":[],"openva":[2],"must":[],"none":[1],"graphic":[0,4],"work":[4],"can":[0,2,4],"root":[0],"scatter":[4],"control":[0,2],"sqlite":[1],"quickstart":[0],"give":[1],"process":[4],"indic":[0],"high":[4],"liter":[1],"tarbal":[0],"occur":[4],"string":[1],"end":[],"secur":[0],"1":[],"how":[4],"sever":[4],"simpl":[0,1],"updat":[1],"list_updat":[1],"clone":[0],"befor":[],"mai":[0],"on_inventory_report__activ":[],"data":[1],"a":[0,1,4],"sy":[],"short":[1],"explicit":[],"issu":[2],"inform":[0,4],"maintain":[],"green":[4],"callabl":[1],"order":[],"checkbox":[1],"over":[],"on_invent_cancel_button__click":[],"paramet":[1],"slaveview":[1],"platform":[],"window":[1],"main":[1],"alter":[1],"avaiabl":[0],"return":[1],"spell":[],"facilit":[4],"not":[1],"now":[0],"bigger":[4],"vulnerabili":[],"name":[1],"edit":[1],"vulnerabiliesview":[0,1],"getitem":[],"each":[4],"hard":[4],"realli":[],"vuln":[1],"http":[],"happen":[4],"on_about__activ":[],"event":[],"variabl":[],"shown":[1],"matrix":[0,4],"content":[0],"adapt":[0],"on_exit__activ":[],"hardwar":[4],"red":[4],"proxi":[1],"free":[0],"orm":[],"org":[],"threat":[1],"router":[4],"assign":[4],"softwar":[0],"feel":[0],"independ":[4],"dialog_delet":[],"placehold":[1],"least":[0],"blank":[],"owner":[4,1],"open":[1],"unknown":[],"system":[0,2],"construct":[],"attach":[1],"underlin":[],"master":[0],"too":[],"circl":[4],"zipfil":[0],"store":[4],"includ":[4],"kiwi":[1],"option":[1],"that":[4],"tool":[0],"copi":[1],"huh":[],"on_invent_list__row_activ":[],"github":[0],"unind":[],"15":[0],"17":[0],"provid":[0,1],"tree":[1],"project":[],"markup":[],"and":[0,1,3,4],"function":[1],"comput":[0,4],"plataform":[],"argument":[],"packag":[0,1],"have":[4],"tabl":[0],"gladeslaveview":[1],"set_invent_own":[1],"engin":[1],"unexpect":[],"self":[],"also":[4,1],"exampl":[0,3],"gladedeleg":[1],"which":[],"objectlist":[1],"sure":[4],"track":[0,2],"object":[0],"analyst":[0],"most":[4],"automodul":[],"class":[1],"vulnerabilitiesview":[1],"inventoryaddedit":[1],"show":[4,1],"find":[],"impact":[4],"onli":[0,4],"inlin":[],"locat":[],"menu":[1],"should":[0],"dict":[],"analyz":[0,4],"do":[0,2],"get":[0],"tempmodel":[1],"db":[1],"on_button_del__click":[],"report":[0,2,3,4],"2":[],"mainwindow":[1],"requir":[],"mapper":[],"bar":[1],"organ":[0],"stuff":[0,2],"contain":[0],"where":[4,1],"view":[1],"set":[1],"frame":[1],"startup":[1],"result":[],"respons":[1],"save_button":[],"statu":[1],"extend":[],"databas":[],"state":[1],"import":[4,2],"attribut":[],"signatur":[],"parent":[1],"screen":[0,3,4],"maintre":[1],"tue":[0],"c":[],"etc":[4],"s":[],"instanc":[1],"com":[0],"pre":[1],"inventoryview":[0,1],"point":[4],"applianc":[4],"populate_list":[],"suppli":[],"cancel":[1],"on_total_vuln_report__activ":[],"coredump":[0],"basic":[0,3,1],"on_new__activ":[],"total_vuln_report":[],"39":[0],"an":[4,1],"those":[4],"baseview":[1],"cancel_button":[],"properti":[1],"easier":[1],"will":[1],"defin":[1],"while":[4,1],"abov":[4],"error":[],"modul":[0,1],"is":[0,1,4],"henc":[],"it":[0,1,4],"kwarg":[1],"in":[1],"id":[1],"__init__":[],"if":[1],"develop":[0],"inventori":[0,3,1],"suggest":[0,2],"make":[4,1],"same":[4],"document":[0],"complet":[0],"slave":[1],"screenshot":[0,3],"upon":[],"hand":[4],"temporari":[1],"whole":[4],"thu":[1],"invent_own":[1],"without":[],"thi":[0,1,4],"model":[0,1],"less":[4],"true":[1],"concentr":[4],"detach":[1],"easi":[0],"add":[4,1],"vulner":[0,1,2,3,4],"gladeview":[1],"applic":[1],"tick":[1],"associ":[1],"mod":[],"like":[0,4],"docutil":[1],"signal":[],"integ":[1],"server":[0,4],"t":[],"funcion":[2],"manag":[0,1],"crisk":[0,1,4],"www":[],"right":[0,1],"sampl":[0,3],"toctre":[0],"52":[0],"for":[0,1,4],"per":[2],"exit":[],"either":[],"core":[],"step":[1],"repositori":[0],"elixir":[1],"from":[1],"by":[0],"on":[0,1,2,4],"about":[0],"idx":[1],"column":[],"of":[4,1],"page":[0],"inventory_report":[],"dialog":[1],"or":[0,1,2,4],"block":[1],"get_invent_own":[1],"emphasi":[],"profession":[0],"open_or_new":[1],"next":[0,2],"your":[0],"git":[0],"span":[1],"wai":[4],"area":[4],"there":[1],"start":[],"interfac":[],"low":[4],"initial_d":[],"analysi":[0,4],"25415":[],"on_invent_save_button__click":[],"form":[0],"but":[0,4],"sqlalchemi":[],"line":[],"ha":[],"with":[0,1],"bug":[0,2],"info":[0,3],"default":[],"autoclass":[],"on_button_edit__click":[],"us":[0,1,4],"featur":[0,2],"ad":[4,2,1],"creat":[0,1],"repres":[],"as":[0,1,4],"ar":[4],"at":[0],"file":[0,1],"our":[2],"check":[1],"probabl":[4],"assembl":[1],"no":[1],"titl":[],"invalid":[],"field":[],"other":[4,1],"futur":[0,2],"test":[],"you":[0,2,4],"on_total_asset_report__activ":[],"consid":[4],"network":[4],"sphinx":[0],"descript":[1],"u":[],"maxdepth":[],"2009":[0]}] \ No newline at end of file diff --git a/todo.html b/todo.html new file mode 100644 index 0000000..a7018c4 --- /dev/null +++ b/todo.html @@ -0,0 +1,132 @@ + + + + Stuff to do — Crisk v0.3 documentation + + + + + + + + + + + + + + + + +
+Crisk logo +Fork me on GitHub +
+ +
+
+

Table Of Contents

+ + +

Previous topic

+

Using Crisk

+

Next topic

+

The crisk Package

+

This Page

+ +

Quick search

+ +
+
+
+
+
+
+ + +
+

Stuff to do

+

You can suggest more features or report bugs on our issue tracking system

+
+

Next features

+
    +
  • Vulnerability per asset report
  • +
  • Import OpenVAS reports
  • +
+
+
+

Future features

+
    +
  • Adding controls funcionality
  • +
+
+
+ + +
+
+
+
+
+ + + + \ No newline at end of file diff --git a/using.html b/using.html index b25e12f..de82f09 100644 --- a/using.html +++ b/using.html @@ -3,7 +3,7 @@ Using Crisk — Crisk v0.3 documentation - + + - - + + + +
+Crisk logo +Fork me on GitHub +
-
-
-
-
- - -
-

Using Crisk

-
-

Analyzing servers and computers

-
-
-

Analyzing information

-
-
-

Analyzing software

-
-
- - -
-
-

Table Of Contents

@@ -72,15 +55,15 @@

Table Of Contents

  • Using Crisk
  • Previous topic

    -

    Welcome to Crisk’s page/documentation!

    +

    Screenshots and examples

    Next topic

    -

    Screenshots and examples

    +

    The crisk Package

    This Page

    +
    +
    +
    +
    + + +
    +

    Using Crisk

    +
    +

    Analyzing servers and computers

    +

    This is the most direct way to use Crisk. Assign each server/computer an owner on the asset screen, and make sure to include its value. You can consider the hardware value only or add the value of the information stored on that asset.

    +

    You can also add other assets like network appliances, routers, etc. and consider the value as how important those items are for the network as a whole.

    +
    +
    +

    Analyzing information

    +

    This works the same way as above, but consider information only while adding to the assets. This way of working is more independent of hardware and computers and can facilitate analysis of processes.

    +
    +
    +

    The Risk Matrix

    +

    The Vulnerabilities report includes a Risk Matrix. The risk matrix is a scatter graphic that shows where the risks are concentrated on the analysis. The bigger the circle, the most vulnerabilities are concentrated on that point. The green area shows where vulnerabilities are hard to occur (low probability) and/or have less impact (low severity). On the other hand, the red area shows where the vulnerabilities are more likely to happen (high probability) and/or have more impact (high severity).

    +
    +
    + + +
    +
    +