Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Threat ABE::Security Threat Technique ABE
Class SecurityThreatTechnique

A misuse of a legitimate service to exploit and an IT resource.

Attributes
SecurityThreat _securityThreat _securityThreat
SecurityThreatActor _securityThreatActor _securityThreatActor
SecurityThreatExploit _securityThreatExploit _securityThreatExploit
SecurityThreatIndicator _securityThreatIndicator _securityThreatIndicator
SecurityThreatTechniqueSpecification _securityThreatTechniqueSpecification _securityThreatTechniqueSpecification
SecurityVulnerability _securityVulnerability _securityVulnerability
String cweUsed cweUsed

The weakness used by the technique defined as a Common Weakness Enumeration (CWE). Http://cwe.mitre.org

String type type

Enumerated List of the technique types, such as:

Social Engineering
Physical Insertion
Physical Destruction
Physical Denial of Service
Logical Denial of Service
Logical Code Insertion
Logical Destruction

String unauthorizedResults unauthorizedResults

Description of the unauthorized results obtained through the use of this technique

Attributes inherited from SID Models::Common Domain::Root Business Entities ABE::Entity SID Models::Common Domain::Root Business Entities ABE::Entity
_entityIdentification _entityIdentification, _entityRole _entityRole, managedEntity managedEntity, characteristicValue characteristicValue

Attributes inherited from SID Models::Common Domain::Root Business Entities ABE::RootEntity SID Models::Common Domain::Root Business Entities ABE::RootEntity
_rootEntityType _rootEntityType, _revenueAssuranceParmValue _revenueAssuranceParmValue, _characteristicValue _characteristicValue, name name, description description, ID ID, metric metric, _monitoredMetricInstancesCriteria _monitoredMetricInstancesCriteria, directedEdge directedEdge, vertex vertex, entityCatalogItem entityCatalogItem, rootEntityGroupMember rootEntityGroupMember, rootEntityGroup rootEntityGroup, rootEntityRelationship rootEntityRelationship, rootEntityRelationship2 rootEntityRelationship2, associationRole associationRole, entitySpecificationAttachment entitySpecificationAttachment, interactionUseCase interactionUseCase, interactionResult interactionResult

Properties:

Alias
Classifier Behavior
Is Abstractfalse
Is Activefalse
Is Leaffalse
Keywords
NameSecurityThreatTechnique
Name Expression
NamespaceSecurity Threat Technique ABE
Owned Template Signature
OwnerSecurity Threat Technique ABE
Owning Template Parameter
PackageSecurity Threat Technique ABE
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Threat ABE::Security Threat Technique ABE::SecurityThreatTechnique
Representation
Stereotype
Template Parameter
VisibilityPublic

Attribute Details

 _securityThreat
Public SecurityThreat _securityThreat
Constraints:
Properties:

AggregationNone
Alias
AssociationSecurityThreatEmploys
Association End
ClassSecurityThreatTechnique
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity*
Name_securityThreat
Name Expression
NamespaceSecurityThreatTechnique
Opposite_securityThreatTechnique
OwnerSecurityThreatTechnique
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Threat ABE::Security Threat Technique ABE::SecurityThreatTechnique::_securityThreat
Stereotype
Template Parameter
TypeSecurityThreat
Upper*
Upper Value(*)
VisibilityPublic


 _securityThreatActor
Public SecurityThreatActor _securityThreatActor
Constraints:
Properties:

AggregationNone
Alias
AssociationSecurityThreatActorUses
Association End
ClassSecurityThreatTechnique
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value(1)
Multiplicity1
Name_securityThreatActor
Name Expression
NamespaceSecurityThreatTechnique
Opposite_securityThreatTechnique
OwnerSecurityThreatTechnique
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Threat ABE::Security Threat Technique ABE::SecurityThreatTechnique::_securityThreatActor
Stereotype
Template Parameter
TypeSecurityThreatActor
Upper1
Upper Value(1)
VisibilityPublic


 _securityThreatExploit
Public SecurityThreatExploit _securityThreatExploit
Constraints:
Properties:

AggregationNone
Alias
AssociationSecurityThreatTechniqueUsedBy
Association End
ClassSecurityThreatTechnique
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity*
Name_securityThreatExploit
Name Expression
NamespaceSecurityThreatTechnique
Opposite_securityThreatTechnique
OwnerSecurityThreatTechnique
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Threat ABE::Security Threat Technique ABE::SecurityThreatTechnique::_securityThreatExploit
Stereotype
Template Parameter
TypeSecurityThreatExploit
Upper*
Upper Value(*)
VisibilityPublic


 _securityThreatIndicator
Public SecurityThreatIndicator _securityThreatIndicator
Constraints:
Properties:

AggregationNone
Alias
AssociationSecurityThreatIndicatorDescribes
Association End
ClassSecurityThreatTechnique
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity*
Name_securityThreatIndicator
Name Expression
NamespaceSecurityThreatTechnique
Opposite_securityThreatTechnique
OwnerSecurityThreatTechnique
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Threat ABE::Security Threat Technique ABE::SecurityThreatTechnique::_securityThreatIndicator
Stereotype
Template Parameter
TypeSecurityThreatIndicator
Upper*
Upper Value(*)
VisibilityPublic


 _securityThreatTechniqueSpecification
Public SecurityThreatTechniqueSpecification _securityThreatTechniqueSpecification
Constraints:
Properties:

AggregationNone
Alias
AssociationSecurityThreatTechniqueSpecificationDescribes
Association End
ClassSecurityThreatTechnique
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value(1)
Multiplicity1
Name_securityThreatTechniqueSpecification
Name Expression
NamespaceSecurityThreatTechnique
Opposite_securityThreatTechnique
OwnerSecurityThreatTechnique
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Threat ABE::Security Threat Technique ABE::SecurityThreatTechnique::_securityThreatTechniqueSpecification
Stereotype
Template Parameter
TypeSecurityThreatTechniqueSpecification
Upper1
Upper Value(1)
VisibilityPublic


 _securityVulnerability
Public SecurityVulnerability _securityVulnerability
Constraints:
Properties:

AggregationNone
Alias
AssociationSecurityThreatTechniqueTakesAdvantageOf
Association End
ClassSecurityThreatTechnique
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity*
Name_securityVulnerability
Name Expression
NamespaceSecurityThreatTechnique
Opposite_securityThreatTechnique
OwnerSecurityThreatTechnique
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Threat ABE::Security Threat Technique ABE::SecurityThreatTechnique::_securityVulnerability
Stereotype
Template Parameter
TypeSecurityVulnerability
Upper*
Upper Value(*)
VisibilityPublic


 cweUsed
Public String cweUsed

The weakness used by the technique defined as a Common Weakness Enumeration (CWE). Http://cwe.mitre.org

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassSecurityThreatTechnique
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity*
NamecweUsed
Name Expression
NamespaceSecurityThreatTechnique
Opposite
OwnerSecurityThreatTechnique
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Threat ABE::Security Threat Technique ABE::SecurityThreatTechnique::cweUsed
Stereotype
Template Parameter
TypeString
Upper*
Upper Value(*)
VisibilityPublic


 type
Public String type

Enumerated List of the technique types, such as:

Social Engineering
Physical Insertion
Physical Destruction
Physical Denial of Service
Logical Denial of Service
Logical Code Insertion
Logical Destruction

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassSecurityThreatTechnique
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower1
Lower Value
MultiplicityNone (1)
Nametype
Name Expression
NamespaceSecurityThreatTechnique
Opposite
OwnerSecurityThreatTechnique
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Threat ABE::Security Threat Technique ABE::SecurityThreatTechnique::type
Stereotype
Template Parameter
TypeString
Upper1
Upper Value
VisibilityPublic


 unauthorizedResults
Public String unauthorizedResults

Description of the unauthorized results obtained through the use of this technique

Constraints:
Properties:

AggregationNone
Alias
Association
Association End
ClassSecurityThreatTechnique
Datatype
Default
Default Value
Is Compositefalse
Is Derivedfalse
Is Derived Unionfalse
Is Leaffalse
Is Orderedfalse
Is Read Onlyfalse
Is Staticfalse
Is Uniquetrue
Keywords
Lower0
Lower Value(0)
Multiplicity0..1
NameunauthorizedResults
Name Expression
NamespaceSecurityThreatTechnique
Opposite
OwnerSecurityThreatTechnique
Owning Association
Owning Template Parameter
Qualified NameSID Models::Enterprise Domain::Enterprise Risk ABE::Enterprise Security ABE::Security Threat ABE::Security Threat Technique ABE::SecurityThreatTechnique::unauthorizedResults
Stereotype
Template Parameter
TypeString
Upper1
Upper Value(1)
VisibilityPublic