us.springett.owasp.riskrating

Class OwaspRiskRating

java.lang.Object

us.springett.owasp.riskrating.OwaspRiskRating

public class OwaspRiskRating
extends Object

Since:

1.0.0

Author:

Steve Springett

Field Summary

Fields

Modifier and Type	Field and Description
static Pattern	OWASP_RR_VECTOR_PATTERN
static String	VECTOR_PATTERN

Constructor Summary

Constructors

Constructor and Description
OwaspRiskRating()

Method Summary

Modifier and Type	Method and Description
Score	calculateScore() Calculates a OWASP Risk Rating score.
static OwaspRiskRating	fromVector(String vector)
VulnerabilityFactor.Awareness	getAwareness()
VulnerabilityFactor.EaseOfDiscovery	getEaseOfDiscovery()
VulnerabilityFactor.EaseOfExploit	getEaseOfExploit()
BusinessImpactFactor.FinancialDamage	getFinancialDamage()
VulnerabilityFactor.IntrusionDetection	getIntrusionDetection()
TechnicalImpactFactor.LossOfAccountability	getLossOfAccountability()
TechnicalImpactFactor.LossOfAvailability	getLossOfAvailability()
TechnicalImpactFactor.LossOfConfidentiality	getLossOfConfidentiality()
TechnicalImpactFactor.LossOfIntegrity	getLossOfIntegrity()
ThreatAgentFactor.Motive	getMotive()
BusinessImpactFactor.NonCompliance	getNonCompliance()
ThreatAgentFactor.Opportunity	getOpportunity()
BusinessImpactFactor.PrivacyViolation	getPrivacyViolation()
BusinessImpactFactor.ReputationDamage	getReputationDamage()
ThreatAgentFactor.Size	getSize()
ThreatAgentFactor.SkillLevel	getSkillLevel()
OwaspRiskRating	with(BusinessImpactFactor.FinancialDamage financialDamage)
OwaspRiskRating	with(BusinessImpactFactor.NonCompliance nonCompliance)
OwaspRiskRating	with(BusinessImpactFactor.PrivacyViolation privacyViolation)
OwaspRiskRating	with(BusinessImpactFactor.ReputationDamage reputationDamage)
OwaspRiskRating	with(TechnicalImpactFactor.LossOfAccountability lossOfAccountability)
OwaspRiskRating	with(TechnicalImpactFactor.LossOfAvailability lossOfAvailability)
OwaspRiskRating	with(TechnicalImpactFactor.LossOfConfidentiality lossOfConfidentiality)
OwaspRiskRating	with(TechnicalImpactFactor.LossOfIntegrity lossOfIntegrity)
OwaspRiskRating	with(ThreatAgentFactor.Motive motive)
OwaspRiskRating	with(ThreatAgentFactor.Opportunity opportunity)
OwaspRiskRating	with(ThreatAgentFactor.Size size)
OwaspRiskRating	with(ThreatAgentFactor.SkillLevel skillLevel)
OwaspRiskRating	with(VulnerabilityFactor.Awareness awareness)
OwaspRiskRating	with(VulnerabilityFactor.EaseOfDiscovery easeOfDiscovery)
OwaspRiskRating	with(VulnerabilityFactor.EaseOfExploit easeOfExploit)
OwaspRiskRating	with(VulnerabilityFactor.IntrusionDetection intrusionDetection)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

VECTOR_PATTERN

public static final String VECTOR_PATTERN

See Also:

Constant Field Values

OWASP_RR_VECTOR_PATTERN

public static final Pattern OWASP_RR_VECTOR_PATTERN

Constructor Detail

OwaspRiskRating

public OwaspRiskRating()

Method Detail

calculateScore

public Score calculateScore()
                     throws MissingFactorException

Calculates a OWASP Risk Rating score.

Returns:

a Score object

Throws:

MissingFactorException

Since:

1.0.0

fromVector

public static OwaspRiskRating fromVector(String vector)

with

public OwaspRiskRating with(ThreatAgentFactor.SkillLevel skillLevel)

with

public OwaspRiskRating with(ThreatAgentFactor.Motive motive)

with

public OwaspRiskRating with(ThreatAgentFactor.Opportunity opportunity)

with

public OwaspRiskRating with(ThreatAgentFactor.Size size)

with

public OwaspRiskRating with(VulnerabilityFactor.EaseOfDiscovery easeOfDiscovery)

with

public OwaspRiskRating with(VulnerabilityFactor.EaseOfExploit easeOfExploit)

with

public OwaspRiskRating with(VulnerabilityFactor.Awareness awareness)

with

public OwaspRiskRating with(VulnerabilityFactor.IntrusionDetection intrusionDetection)

with

public OwaspRiskRating with(TechnicalImpactFactor.LossOfConfidentiality lossOfConfidentiality)

with

public OwaspRiskRating with(TechnicalImpactFactor.LossOfIntegrity lossOfIntegrity)

with

public OwaspRiskRating with(TechnicalImpactFactor.LossOfAvailability lossOfAvailability)

with

public OwaspRiskRating with(TechnicalImpactFactor.LossOfAccountability lossOfAccountability)

with

public OwaspRiskRating with(BusinessImpactFactor.FinancialDamage financialDamage)

with

public OwaspRiskRating with(BusinessImpactFactor.ReputationDamage reputationDamage)

with

public OwaspRiskRating with(BusinessImpactFactor.NonCompliance nonCompliance)

with

public OwaspRiskRating with(BusinessImpactFactor.PrivacyViolation privacyViolation)

getSkillLevel

public ThreatAgentFactor.SkillLevel getSkillLevel()

getMotive

public ThreatAgentFactor.Motive getMotive()

getOpportunity

public ThreatAgentFactor.Opportunity getOpportunity()

getSize

public ThreatAgentFactor.Size getSize()

getEaseOfDiscovery

public VulnerabilityFactor.EaseOfDiscovery getEaseOfDiscovery()

getEaseOfExploit

public VulnerabilityFactor.EaseOfExploit getEaseOfExploit()

getAwareness

public VulnerabilityFactor.Awareness getAwareness()

getIntrusionDetection

public VulnerabilityFactor.IntrusionDetection getIntrusionDetection()

getLossOfConfidentiality

public TechnicalImpactFactor.LossOfConfidentiality getLossOfConfidentiality()

getLossOfIntegrity

public TechnicalImpactFactor.LossOfIntegrity getLossOfIntegrity()

getLossOfAvailability

public TechnicalImpactFactor.LossOfAvailability getLossOfAvailability()

getLossOfAccountability

public TechnicalImpactFactor.LossOfAccountability getLossOfAccountability()

getFinancialDamage

public BusinessImpactFactor.FinancialDamage getFinancialDamage()

getReputationDamage

public BusinessImpactFactor.ReputationDamage getReputationDamage()

getNonCompliance

public BusinessImpactFactor.NonCompliance getNonCompliance()

getPrivacyViolation

public BusinessImpactFactor.PrivacyViolation getPrivacyViolation()