Vulnerability tree: Difference between revisions

From Cramsession
Jump to navigationJump to search
✍️ Verified Author: MflavellClick to view professional profile & credentials
 
Line 22: Line 22:
::* Modules that is implemented in the product or solution at layer 3...
::* Modules that is implemented in the product or solution at layer 3...
   
   
::* That the action at layer 4 can resolve by updating or removing the product.
:::* That the action at layer 4 can resolve by updating or removing the product.

Latest revision as of 21:43, 18 May 2026

Cybersecurity > Vulnerability tree

This tree is used to link vulnerabilities to remediation actions.


Tree Design

 1  [CVE]  [CVE] [CVE] [CVE]
     \      /     \    /
 2   [Module]     [Module]
          \      / 
 3        [Product]
             |
 4        [Action]

Implications

  • Exploits at layer 1, result from..
  • vulnerabilities in layer 2 due to...
  • Modules that is implemented in the product or solution at layer 3...
  • That the action at layer 4 can resolve by updating or removing the product.