Identifies the type of SecurityVulnerability for the purposes of vulnerability scoring.



Notes: The three types defined include software flaws, security configuration issues, and software feature misuses.

Attributes
String	description	Defines the intention behind the security vulnerability category type. Notes: For example, a software flaw vulnerability (category type) is defined as an unintented error in the design or coding of software. A security configuration issue vulnerability (category type) is defined as a security configuration setting that negatively affects the security of the software. And a software feature misuse vulnerability (category type) is defined as a vulnerability exposed by a feature that provides an avenue to compromise the security of a system.
String	name	Name assigned to the security vulnerability category type. Notes: Software Flaw, Security Configuration Issue, and Software Feature Misuse.
SecurityVulnerabilityCategoryAssignment	securityVulnerabilityCategory
SecVulnerabilityScoringSystem	securityVulnerabilityScoringSpec

 description

Public String description

Defines the intention behind the security vulnerability category type.

Notes: For example, a software flaw vulnerability (category type) is defined as an unintented error in the design or coding of software. A security configuration issue vulnerability (category type) is defined as a security configuration setting that negatively affects the security of the software. And a software feature misuse vulnerability (category type) is defined as a vulnerability exposed by a feature that provides an avenue to compromise the security of a system.

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	SecurityVulnerabilityCategoryType
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	1
Lower Value
Multiplicity	None (1)
Name	description
Name Expression
Namespace	SecurityVulnerabilityCategoryType
Opposite
Owner	SecurityVulnerabilityCategoryType
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::SecurityVulnerabilityCategoryType::description
Stereotype	required
Template Parameter
Type	String
Upper	1
Upper Value
Visibility	Public

 name

Public String name

Name assigned to the security vulnerability category type.

Notes: Software Flaw, Security Configuration Issue, and Software Feature Misuse.

Constraints:

Properties:

Aggregation	None
Alias
Association
Association End
Class	SecurityVulnerabilityCategoryType
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	1
Lower Value
Multiplicity	None (1)
Name	name
Name Expression
Namespace	SecurityVulnerabilityCategoryType
Opposite
Owner	SecurityVulnerabilityCategoryType
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::SecurityVulnerabilityCategoryType::name
Stereotype	required
Template Parameter
Type	String
Upper	1
Upper Value
Visibility	Public

 securityVulnerabilityCategory

Public SecurityVulnerabilityCategoryAssignment securityVulnerabilityCategory

Constraints:

Properties:

Aggregation	None
Alias
Association	SecurityVulnerabilityCategoryTypeDescribes
Association End
Class	SecurityVulnerabilityCategoryType
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	*
Name	securityVulnerabilityCategory
Name Expression
Namespace	SecurityVulnerabilityCategoryType
Opposite	securityVulnerabilityCategoryType
Owner	SecurityVulnerabilityCategoryType
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::SecurityVulnerabilityCategoryType::securityVulnerabilityCategory
Stereotype
Template Parameter
Type	SecurityVulnerabilityCategoryAssignment
Upper	*
Upper Value	(*)
Visibility	Public

 securityVulnerabilityScoringSpec

Public SecVulnerabilityScoringSystem securityVulnerabilityScoringSpec

Constraints:

Properties:

Aggregation	None
Alias
Association	SecurityVulnerabilityCategoryTypeDetermines
Association End
Class	SecurityVulnerabilityCategoryType
Datatype
Default
Default Value
Is Composite	false
Is Derived	false
Is Derived Union	false
Is Leaf	false
Is Ordered	false
Is Read Only	false
Is Static	false
Is Unique	true
Keywords
Lower	0
Lower Value	(0)
Multiplicity	*
Name	securityVulnerabilityScoringSpec
Name Expression
Namespace	SecurityVulnerabilityCategoryType
Opposite	securityVulnerabilityCategoryType
Owner	SecurityVulnerabilityCategoryType
Owning Association
Owning Template Parameter
Qualified Name	SID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::SecurityVulnerabilityCategoryType::securityVulnerabilityScoringSpec
Stereotype
Template Parameter
Type	SecVulnerabilityScoringSystem
Upper	*
Upper Value	(*)
Visibility	Public