Vulnerability tree: Difference between revisions

From Cramsession
Jump to navigationJump to search
✍️ Verified Author: MflavellClick to view professional profile & credentials
(Created page with "This tree is used to link vulnerabilities to remediation actions. =Tree Design= [CVE] [CVE] [CVE] [CVE] \ / \ / [Module] [Module] \ / [Product] | [Action]")
 
No edit summary
Line 4: Line 4:
=Tree Design=
=Tree Design=


    [CVE]  [CVE] [CVE] [CVE]
  1  [CVE]  [CVE] [CVE] [CVE]
       \      /    \    /
       \      /    \    /
    [Module]    [Module]
  2  [Module]    [Module]
           \      /  
           \      /  
          [Product]
  3        [Product]
               |
               |
          [Action]
  4        [Action]
 
=Implications=
 
Exploits at layer 1, result from
vulnerabilities in layer 2
that are implemented in the product or solution at layer 3
The action at layer 4 updates the product, fixing the module and resolving the exploit

Revision as of 21:38, 8 November 2024

This tree is used to link vulnerabilities to remediation actions.


Tree Design

 1  [CVE]  [CVE] [CVE] [CVE]
     \      /     \    /
 2   [Module]     [Module]
          \      / 
 3        [Product]
             |
 4        [Action]

Implications

Exploits at layer 1, result from 
vulnerabilities in layer 2
that are implemented in the product or solution at layer 3
The action at layer 4 updates the product, fixing the module and resolving the exploit