us.springett.owasp.riskrating.factors

Class TechnicalImpactFactor

java.lang.Object

us.springett.owasp.riskrating.factors.TechnicalImpactFactor

public class TechnicalImpactFactor
extends Object

Technical impact can be broken down into factors aligned with the traditional security areas of concern: confidentiality, integrity, availability, and accountability. The goal is to estimate the magnitude of the impact on the system if the vulnerability were to be exploited.

Since:

1.0.0

Author:

Steve Springett

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	TechnicalImpactFactor.LossOfAccountability Are the threat agents' actions traceable to an individual?
static class	TechnicalImpactFactor.LossOfAvailability How much service could be lost and how vital is it?
static class	TechnicalImpactFactor.LossOfConfidentiality How much data could be disclosed and how sensitive is it?
static class	TechnicalImpactFactor.LossOfIntegrity How much data could be corrupted and how damaged is it?

Method Summary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait