Vulnerability tree: Difference between revisions

From Cramsession
Jump to navigationJump to search
✍️ Verified Author: MflavellClick to view professional profile & credentials
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
[[Cybersecurity]] > Vulnerability tree
This tree is used to link vulnerabilities to remediation actions.
This tree is used to link vulnerabilities to remediation actions.


Line 12: Line 14:
   4        [Action]
   4        [Action]


=Implications=
= Implications =


* Exploits at layer 1, result from  
* Exploits at layer 1, result from..


* vulnerabilities in layer 2
:* vulnerabilities in layer 2 due to...


* that is implemented in the product or solution at layer 3
::* Modules that is implemented in the product or solution at layer 3...
   
   
* the action at layer 4 updates or removes the product, fixing the module and resolving the exploit
:::* That the action at layer 4 can resolve by updating or removing the product.

Latest revision as of 21:43, 18 May 2026

Cybersecurity > Vulnerability tree

This tree is used to link vulnerabilities to remediation actions.


Tree Design

 1  [CVE]  [CVE] [CVE] [CVE]
     \      /     \    /
 2   [Module]     [Module]
          \      / 
 3        [Product]
             |
 4        [Action]

Implications

  • Exploits at layer 1, result from..
  • vulnerabilities in layer 2 due to...
  • Modules that is implemented in the product or solution at layer 3...
  • That the action at layer 4 can resolve by updating or removing the product.