SecurityThreatExploit

: Public <<TMF_BusinessEntity>> Business Entity

Created:	1/10/2022 12:01:56 PM
Modified:	4/15/2022 10:30:17 AM

Project:
Author:	Giu Platania
Version:	22.0
Phase:	prop
Status:	Implemented
Complexity:	Easy
Difficulty:
Priority:
Multiplicity:
Advanced:
UUID:	{8467A60B-4407-42d0-8AC4-48918CB46A77}
Appears In:	Figure SE.08 - Security Threat Basic Entities, Figure SE.13 - Security Threat Actor, Figure SE.00 - Security Overview

Used to take advantage of weaknesses the victim has to gain access or information that is either inherently valuable, or that can be used to gain further access.

Attributes
Associations To
Associations From
Tagged Values
Advanced

Attribute

Public String
exploitType

Details:

Alias:
Initial:
Stereotype:
Ordered:
Range:	Range:0 to *
Transient:	False
Derived:	False
IsID:	False

Notes:

An enumerated list of threa exploit types, such as: Software Flaw Weak Security Control Cross-scripting Exploit User-interaction Dependent Tool

Public String
name

Details:

Alias:
Initial:
Stereotype:
Ordered:
Range:
Transient:	False
Derived:	False
IsID:	False

Notes:

A human readable name given to the exploit

Public URI
reference

Details:

Alias:
Initial:
Stereotype:
Ordered:
Range:	Range:0 to *
Transient:	False
Derived:	False
IsID:	False

Notes:

A reference to additional information about a threat exploit.

Public String
unauthorizedResults

Details:

Alias:
Initial:
Stereotype:
Ordered:
Range:
Transient:	False
Derived:	False
IsID:	False

Notes:

Description the unauthorized results obtained through the use of this exploit

Element	Source Role	Target Role
«TMF_BusinessEntity» EntityIdentification Business Entity	Name: securityVulnerability2	Name: entityIdentification
Details:
«TMF_BusinessEntity» SecurityVulnerability Business Entity	Name: _securityThreatExploit	Name: _securityVulnerability
Details:
«TMF_ABE» Security Threat ABE ABE «TMF_ABEIsComposedByEntity»	Name:	Name:
Details:
«TMF_BusinessEntity» SecurityThreatActor Business Entity	Name: _securityThreatExploit	Name: _securityThreatActor
Details:

Element	Source Role	Target Role
«TMF_BusinessEntity» SecurityThreat Business Entity	Name: _securityThreat	Name: _securityThreatExploit
Details:
«TMF_BusinessEntity» SecurityThreatTechnique Business Entity	Name: _securityThreatTechnique	Name: _securityThreatExploit
Details:
«TMF_BusinessEntity» SecurityThreatTool Business Entity	Name: _securityThreatTool	Name: _securityThreatExploit
Details:
«TMF_BusinessEntity» SecurityThreatIndicator Business Entity	Name: _securityThreatIndicator	Name: _securityThreatExploit
Details:

Tag	Value
IsCoreEntity	False
Details: Values: true,false Default: False
rsa_guid	_My_oMG6eEd-YIudmhftTlg
Details:

Property	Value
isActive:	0
isFinalSpecialization:	0