Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::Security Vulnerability Scoring Algorithm ABE
Class SecVulnerabilityScoreAlgorithm

A step-by-step procedure for calculating the a security vulnerability score.

Notes: For example, BaseScore = round-to-1-decimal(((0.6 * Impact) + (0.4 * Exploitability) – 1.5) * f(Impact)).

Attributes
String description description

A narrative that explains the security vulnerability score algorithm.

String ID ID

A unique identifier for the SecVulnerabilityScoringAlgorithm.

String name name

A word, term, or phrase by which the SecVulnerabilityScoringAlgorithmMember is known and distinguished from other SecVulnerabilityScoringAlgorithmMembers.

SecurityVulnerabilityScore securityVulnerabilityScore securityVulnerabilityScore
SecVulnerabilityScoreAlgorithmMember secVulnerabilityScoreAlgorithmMember secVulnerabilityScoreAlgorithmMember
SecVulnerabilityScoringMetricDefnAssignment secVulnerabilityScoringMetricDefnAssignment secVulnerabilityScoringMetricDefnAssignment
«baseType» TimePeriod validFor validFor

The period of time for which a SecVulnerabilityScoringAlgorithmMember is applicable.

String version version

A number or text used to specify that a SecVulnerabilityScoreAlgorithm differs in certain respects from an earlier SecVulnerabilityScoreAlgorithm.


Properties:

Alias
Classifier Behavior
Is Abstractfalse
Is Activefalse
Is Leaffalse
Keywords
NameSecVulnerabilityScoreAlgorithm
Name Expression
NamespaceSecurity Vulnerability Scoring Algorithm ABE
Owned Template Signature
OwnerSecurity Vulnerability Scoring Algorithm ABE
Owning Template Parameter
PackageSecurity Vulnerability Scoring Algorithm ABE
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::Security Vulnerability Scoring Algorithm ABE::SecVulnerabilityScoreAlgorithm
Representation
Stereotype
Template Parameter
VisibilityPublic

Attribute Details

 description
Public String description

A narrative that explains the security vulnerability score algorithm.

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassSecVulnerabilityScoreAlgorithm
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value
MultiplicityNone (1)
Namedescription
Name Expression
NamespaceSecVulnerabilityScoreAlgorithm
Opposite
OwnerSecVulnerabilityScoreAlgorithm
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::Security Vulnerability Scoring Algorithm ABE::SecVulnerabilityScoreAlgorithm::description
Stereotype
Template Parameter
TypeString
Upper1
Upper Value
VisibilityPublic


 ID
Public String ID

A unique identifier for the SecVulnerabilityScoringAlgorithm.

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassSecVulnerabilityScoreAlgorithm
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value
MultiplicityNone (1)
NameID
Name Expression
NamespaceSecVulnerabilityScoreAlgorithm
Opposite
OwnerSecVulnerabilityScoreAlgorithm
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::Security Vulnerability Scoring Algorithm ABE::SecVulnerabilityScoreAlgorithm::ID
Stereotyperequired
Template Parameter
TypeString
Upper1
Upper Value
VisibilityPublic


 name
Public String name

A word, term, or phrase by which the SecVulnerabilityScoringAlgorithmMember is known and distinguished from other SecVulnerabilityScoringAlgorithmMembers.

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassSecVulnerabilityScoreAlgorithm
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value
MultiplicityNone (1)
Namename
Name Expression
NamespaceSecVulnerabilityScoreAlgorithm
Opposite
OwnerSecVulnerabilityScoreAlgorithm
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::Security Vulnerability Scoring Algorithm ABE::SecVulnerabilityScoreAlgorithm::name
Stereotyperequired
Template Parameter
TypeString
Upper1
Upper Value
VisibilityPublic


 securityVulnerabilityScore
Public SecurityVulnerabilityScore securityVulnerabilityScore
Constraints:
Properties:

AggregationNone
Alias
AssociationSecVulnerabilityScoreAlgorithmUsedToCalculate
Association End
ClassSecVulnerabilityScoreAlgorithm
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity*
NamesecurityVulnerabilityScore
Name Expression
NamespaceSecVulnerabilityScoreAlgorithm
OppositesecVulnerabilityScoreAlgorithm
OwnerSecVulnerabilityScoreAlgorithm
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::Security Vulnerability Scoring Algorithm ABE::SecVulnerabilityScoreAlgorithm::securityVulnerabilityScore
Stereotype
Template Parameter
TypeSecurityVulnerabilityScore
Upper*
Upper Value(*)
VisibilityPublic


 secVulnerabilityScoreAlgorithmMember
Public SecVulnerabilityScoreAlgorithmMember secVulnerabilityScoreAlgorithmMember
Constraints:
Properties:

AggregationNone
Alias
AssociationSecVulnerabilityScoreAlgorithmDefinedBy
Association End
ClassSecVulnerabilityScoreAlgorithm
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity*
NamesecVulnerabilityScoreAlgorithmMember
Name Expression
NamespaceSecVulnerabilityScoreAlgorithm
OppositesecVulnerabilityScoreAlgorithm
OwnerSecVulnerabilityScoreAlgorithm
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::Security Vulnerability Scoring Algorithm ABE::SecVulnerabilityScoreAlgorithm::secVulnerabilityScoreAlgorithmMember
Stereotype
Template Parameter
TypeSecVulnerabilityScoreAlgorithmMember
Upper*
Upper Value(*)
VisibilityPublic


 secVulnerabilityScoringMetricDefnAssignment
Public SecVulnerabilityScoringMetricDefnAssignment secVulnerabilityScoringMetricDefnAssignment
Constraints:
Properties:

AggregationNone
Alias
AssociationSecVulnerabilityScoringMetricDefnAssignmentScoredUsing
Association End
ClassSecVulnerabilityScoreAlgorithm
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value(1)
Multiplicity1
NamesecVulnerabilityScoringMetricDefnAssignment
Name Expression
NamespaceSecVulnerabilityScoreAlgorithm
OppositesecVulnerabilityScoreEquation
OwnerSecVulnerabilityScoreAlgorithm
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::Security Vulnerability Scoring Algorithm ABE::SecVulnerabilityScoreAlgorithm::secVulnerabilityScoringMetricDefnAssignment
Stereotype
Template Parameter
TypeSecVulnerabilityScoringMetricDefnAssignment
Upper1
Upper Value(1)
VisibilityPublic


 validFor
Public «baseType» TimePeriod validFor

The period of time for which a SecVulnerabilityScoringAlgorithmMember is applicable.

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassSecVulnerabilityScoreAlgorithm
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value
MultiplicityNone (1)
NamevalidFor
Name Expression
NamespaceSecVulnerabilityScoreAlgorithm
Opposite
OwnerSecVulnerabilityScoreAlgorithm
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::Security Vulnerability Scoring Algorithm ABE::SecVulnerabilityScoreAlgorithm::validFor
Stereotype
Template Parameter
Type«baseType» TimePeriod
Upper1
Upper Value
VisibilityPublic


 version
Public String version

A number or text used to specify that a SecVulnerabilityScoreAlgorithm differs in certain respects from an earlier SecVulnerabilityScoreAlgorithm.

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassSecVulnerabilityScoreAlgorithm
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value
MultiplicityNone (1)
Nameversion
Name Expression
NamespaceSecVulnerabilityScoreAlgorithm
Opposite
OwnerSecVulnerabilityScoreAlgorithm
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Vulnerability ABE::Security Vulnerability Scoring Definition ABE::Security Vulnerability Scoring Algorithm ABE::SecVulnerabilityScoreAlgorithm::version
Stereotype
Template Parameter
TypeString
Upper1
Upper Value
VisibilityPublic