@prefix : . @prefix cc: . @prefix dc: . @prefix d3f: . @prefix owl: . @prefix rdf: . @prefix xml: . @prefix xsd: . @prefix csro: . @prefix rdfs: . @prefix skos: . @prefix vann: . @prefix terms: . @prefix schema: . @base . rdf:type owl:Ontology ; owl:imports ; cc:license "https://creativecommons.org/licenses/by/4.0/" ; dc:contributor "Contributors and reviewers from the container security community"@en ; dc:creator "Yannick Landeck"@en ; dc:description "The Container Security Risk Ontology (CSRO) provides a formal vocabulary for modeling security risks in containerized deployments, particularly in operational technology (OT) contexts. This ontology includes both the conceptual schema and concrete instances with enhancements for attack techniques and dynamic risk assessment. Integrated with MITRE D3FEND ontology for ATT&CK technique references."@en ; dc:issued "2025-09-24"^^xsd:date ; dc:modified "2025-10-18T00:00:00Z" ; dc:publisher "Yannick Landeck"@en ; dc:title "Container Security Risk Ontology"@en ; terms:created "24th September 2025"@en ; vann:preferredNamespacePrefix "csro" ; schema:url "https://w3id.org/csro/ontology"^^xsd:anyURI ; schema:version "1.1" ; owl:versionInfo "1.1" ; skos:definition "A comprehensive ontology for modeling and assessing security risks in container deployments using context scenarios and attack techniques for dynamic risk calculation."@en . ################################################################# # Annotation properties ################################################################# ### http://creativecommons.org/ns#license cc:license rdf:type owl:AnnotationProperty . ### http://purl.org/dc/elements/1.1/contributor dc:contributor rdf:type owl:AnnotationProperty . ### http://purl.org/dc/elements/1.1/creator dc:creator rdf:type owl:AnnotationProperty . ### http://purl.org/dc/elements/1.1/description dc:description rdf:type owl:AnnotationProperty . ### http://purl.org/dc/elements/1.1/issued dc:issued rdf:type owl:AnnotationProperty . ### http://purl.org/dc/elements/1.1/modified dc:modified rdf:type owl:AnnotationProperty . ### http://purl.org/dc/elements/1.1/publisher dc:publisher rdf:type owl:AnnotationProperty . ### http://purl.org/dc/elements/1.1/title dc:title rdf:type owl:AnnotationProperty . ### http://purl.org/dc/terms/created terms:created rdf:type owl:AnnotationProperty . ### http://purl.org/vocab/vann/preferredNamespacePrefix vann:preferredNamespacePrefix rdf:type owl:AnnotationProperty . ### http://schema.org/url schema:url rdf:type owl:AnnotationProperty . ### http://schema.org/version schema:version rdf:type owl:AnnotationProperty . ### http://www.w3.org/2004/02/skos/core#definition skos:definition rdf:type owl:AnnotationProperty . ### https://w3id.org/csro/ontology#effectDescription csro:effectDescription rdf:type owl:AnnotationProperty . ################################################################# # Datatypes ################################################################# ### http://www.w3.org/2001/XMLSchema#date xsd:date rdf:type rdfs:Datatype . ### http://www.w3.org/2001/XMLSchema#gYear xsd:gYear rdf:type rdfs:Datatype . ################################################################# # Object Properties ################################################################# ### https://w3id.org/csro/ontology#addresses csro:addresses rdf:type owl:ObjectProperty ; rdfs:domain csro:RiskTreatment ; rdfs:range csro:SecurityAssumption ; rdfs:comment "Indicates that a risk treatment addresses or implements a specific security assumption."@en ; rdfs:label "addresses"@en . ### https://w3id.org/csro/ontology#affects csro:affects rdf:type owl:ObjectProperty ; rdfs:domain csro:AttackAction ; rdfs:range csro:Component ; rdfs:comment "Indicates what components are affected by an attack action."@en ; rdfs:label "affects"@en . ### https://w3id.org/csro/ontology#appliesTechnique csro:appliesTechnique rdf:type owl:ObjectProperty ; rdfs:domain csro:AttackAction ; rdfs:range csro:ContainerAttackTechnique ; rdfs:comment "Indicates that an attack action applies a specific container attack technique."@en ; rdfs:label "applies technique"@en . ### https://w3id.org/csro/ontology#appliesTo csro:appliesTo rdf:type owl:ObjectProperty ; rdfs:domain csro:ContainerAttackTechniqueCalculationRule ; rdfs:comment "Indicates which container attack technique a calculation rule applies to."@en ; rdfs:label "applies to"@en . ### https://w3id.org/csro/ontology#belongsToCategory csro:belongsToCategory rdf:type owl:ObjectProperty ; rdfs:domain csro:SecurityAssumption ; rdfs:range csro:AssumptionCategory ; rdfs:comment "Indicates the category to which a security assumption belongs."@en ; rdfs:label "belongs to category"@en . ### https://w3id.org/csro/ontology#belongsToStandard csro:belongsToStandard rdf:type owl:ObjectProperty ; rdfs:domain csro:ContainerSecurityStandardSection ; rdfs:range csro:ContainerSecurityStandard ; rdfs:comment "Indicates which security standard a section belongs to."@en ; rdfs:label "belongs to standard"@en . ### https://w3id.org/csro/ontology#causesImpact csro:causesImpact rdf:type owl:ObjectProperty ; rdfs:domain csro:AttackAction ; rdfs:range csro:Impact ; rdfs:comment "Indicates the security impact that results from an attack action being successful."@en ; rdfs:label "causes impact"@en . ### https://w3id.org/csro/ontology#forAssumption csro:forAssumption rdf:type owl:ObjectProperty ; rdfs:domain csro:AssumptionInScenario ; rdfs:range csro:SecurityAssumption ; rdfs:comment "Indicates which security assumption an assumption-in-scenario instance refers to."@en ; rdfs:label "for assumption"@en . ### https://w3id.org/csro/ontology#hasBaseDifficulty csro:hasBaseDifficulty rdf:type owl:ObjectProperty ; rdfs:range csro:DifficultyLevel ; rdfs:comment "Indicates the base difficulty level of executing an attack pattern."@en ; rdfs:label "has base difficulty"@en . ### https://w3id.org/csro/ontology#hasExploitabilityRating csro:hasExploitabilityRating rdf:type owl:ObjectProperty ; rdfs:comment "Associates an entity with its exploitability rating."@en ; rdfs:label "has exploitability rating"@en . ### https://w3id.org/csro/ontology#hasExposureRating csro:hasExposureRating rdf:type owl:ObjectProperty ; rdfs:comment "Associates an entity with its exposure rating."@en ; rdfs:label "has exposure rating"@en . ### https://w3id.org/csro/ontology#hasGuideline csro:hasGuideline rdf:type owl:ObjectProperty ; rdfs:domain csro:RiskTreatment ; rdfs:range csro:ContainerSecurityGuideline ; rdfs:comment "Associates a risk treatment with applicable security guidelines."@en ; rdfs:label "has guideline"@en . ### https://w3id.org/csro/ontology#hasImpactRating csro:hasImpactRating rdf:type owl:ObjectProperty ; rdfs:domain csro:Impact ; rdfs:range csro:ImpactRating ; rdfs:comment "Associates an impact with its severity rating."@en ; rdfs:label "has impact rating"@en . ### https://w3id.org/csro/ontology#hasLikelihood csro:hasLikelihood rdf:type owl:ObjectProperty ; rdfs:domain csro:AttackAction ; rdfs:range csro:Likelihood ; rdfs:comment "Associates an attack action with its calculated likelihood rating."@en ; rdfs:label "has likelihood"@en . ### https://w3id.org/csro/ontology#hasLikelihoodRating csro:hasLikelihoodRating rdf:type owl:ObjectProperty ; rdfs:domain csro:RiskCalculationRule ; rdfs:range csro:Likelihood ; rdfs:comment "Associates a risk calculation rule with a likelihood rating."@en ; rdfs:label "has likelihood rating"@en . ### https://w3id.org/csro/ontology#hasRiskLevel csro:hasRiskLevel rdf:type owl:ObjectProperty ; rdfs:domain csro:Risk ; rdfs:range csro:RiskLevel ; rdfs:comment "Associates a risk with its calculated risk level."@en ; rdfs:label "has risk level"@en . ### https://w3id.org/csro/ontology#hasSatisfactionState csro:hasSatisfactionState rdf:type owl:ObjectProperty ; rdfs:domain csro:AssumptionInScenario ; rdfs:range csro:SatisfactionState ; rdfs:comment "Indicates the satisfaction state of a security assumption within a context scenario."@en ; rdfs:label "has satisfaction state"@en . ### https://w3id.org/csro/ontology#hasWeight csro:hasWeight rdf:type owl:ObjectProperty ; rdfs:domain csro:ContainerAttackTechniqueCalculationRule ; rdfs:range csro:AssumptionWeight ; rdfs:comment "Associates a calculation rule with assumption weights."@en ; rdfs:label "has weight"@en . ### https://w3id.org/csro/ontology#inContext csro:inContext rdf:type owl:ObjectProperty ; rdfs:domain csro:AttackAction ; rdfs:range csro:ContextScenario ; rdfs:comment "Indicates the context scenario in which an attack action is evaluated."@en ; rdfs:label "in context"@en . ### https://w3id.org/csro/ontology#includesAssumption csro:includesAssumption rdf:type owl:ObjectProperty ; rdfs:domain csro:ContextScenario ; rdfs:range csro:SecurityAssumption ; rdfs:comment "Indicates that a context scenario includes a specific security assumption."@en ; rdfs:label "includes assumption"@en . ### https://w3id.org/csro/ontology#includesComponent csro:includesComponent rdf:type owl:ObjectProperty ; rdfs:domain csro:ContextScenario ; rdfs:range csro:Component ; rdfs:comment "Indicates which components are involved in or affected by a context scenario."@en ; rdfs:label "includes component"@en . ### https://w3id.org/csro/ontology#indicates csro:indicates rdf:type owl:ObjectProperty ; rdfs:domain csro:Impact ; rdfs:range csro:Risk ; rdfs:comment "Indicates that an impact represents or points to a specific risk."@en ; rdfs:label "indicates"@en . ### https://w3id.org/csro/ontology#isDerivedFrom csro:isDerivedFrom rdf:type owl:ObjectProperty ; rdfs:domain csro:ContainerDeploymentTrait ; rdfs:range csro:ContainerArtefact ; rdfs:comment "Indicates that a container deployment trait is derived from or verified by specific evidence."@en ; rdfs:label "is derived from"@en . ### https://w3id.org/csro/ontology#isImplementedBy csro:isImplementedBy rdf:type owl:ObjectProperty ; rdfs:domain csro:RiskTreatment ; rdfs:range csro:ContainerDeploymentTrait ; rdfs:comment "Indicates the container deployment traits that implement a risk treatment."@en ; rdfs:label "is implemented by"@en . ### https://w3id.org/csro/ontology#isTreatedBy csro:isTreatedBy rdf:type owl:ObjectProperty ; owl:inverseOf csro:treats ; rdfs:domain [ rdf:type owl:Class ; owl:unionOf ( csro:AttackAction csro:Risk ) ] ; rdfs:range csro:RiskTreatment ; rdfs:comment "Indicates that a risk or attack action is addressed by a specific treatment."@en ; rdfs:label "is treated by"@en . ### https://w3id.org/csro/ontology#isVerifiableBy csro:isVerifiableBy rdf:type owl:ObjectProperty ; rdfs:domain csro:SecurityAssumption ; rdfs:range csro:ContainerDeploymentTrait ; rdfs:comment "Indicates that a security assumption can be verified by the presence of specific container deployment traits."@en ; rdfs:label "is verifiable by"@en . ### https://w3id.org/csro/ontology#isVerifiableByAbsence csro:isVerifiableByAbsence rdf:type owl:ObjectProperty ; rdfs:domain csro:SecurityAssumption ; rdfs:range csro:ContainerDeploymentTrait ; rdfs:comment "Indicates that a security assumption can be verified by the absence of specific container deployment traits."@en ; rdfs:label "is verifiable by absence"@en . ### https://w3id.org/csro/ontology#originatesFrom csro:originatesFrom rdf:type owl:ObjectProperty ; rdfs:domain csro:SecurityAssumption ; rdfs:range [ rdf:type owl:Class ; owl:unionOf ( csro:ContainerSecurityStandard csro:ContainerSecurityStandardSection ) ] ; rdfs:comment "Indicates that a security assumption originates from or is defined by a specific security standard or section."@en ; rdfs:label "originates from"@en . ### https://w3id.org/csro/ontology#referencesAttackTechnique csro:referencesAttackTechnique rdf:type owl:ObjectProperty ; rdfs:domain csro:ContainerAttackTechnique ; rdfs:range d3f:ATTACKEnterpriseTechnique ; rdfs:comment "References the MITRE ATT&CK Enterprise technique that this container attack technique is based on."@en ; rdfs:label "references attack technique"@en . ### https://w3id.org/csro/ontology#refersToAssumption csro:refersToAssumption rdf:type owl:ObjectProperty ; rdfs:domain csro:AssumptionWeight ; rdfs:range csro:SecurityAssumption ; rdfs:comment "Indicates which security assumption an assumption weight refers to."@en ; rdfs:label "refers to assumption"@en . ### https://w3id.org/csro/ontology#requiresTrait csro:requiresTrait rdf:type owl:ObjectProperty ; rdfs:range csro:ContainerDeploymentTrait ; rdfs:comment "Indicates the container deployment traits required for an attack pattern to be applicable."@en ; rdfs:label "requires trait"@en . ### https://w3id.org/csro/ontology#resultsIn csro:resultsIn rdf:type owl:ObjectProperty ; rdfs:domain csro:ContainerAttackTechniqueCalculationRule ; rdfs:comment "Indicates the result produced by a calculation rule."@en ; rdfs:label "results in"@en . ### https://w3id.org/csro/ontology#treats csro:treats rdf:type owl:ObjectProperty ; rdfs:domain csro:RiskTreatment ; rdfs:range csro:Risk ; rdfs:comment "Indicates that a risk treatment addresses or mitigates a specific risk."@en ; rdfs:label "treats"@en . ################################################################# # Data properties ################################################################# ### https://w3id.org/csro/ontology#assumptionId csro:assumptionId rdf:type owl:DatatypeProperty ; rdfs:domain csro:SecurityAssumption ; rdfs:range xsd:string ; rdfs:comment "The unique identifier for a security assumption (e.g., RTS-2, IMG-2)."@en ; rdfs:label "assumption ID"@en . ### https://w3id.org/csro/ontology#description csro:description rdf:type owl:DatatypeProperty ; rdfs:range xsd:string ; rdfs:comment "Provides a detailed textual description of the concept."@en ; rdfs:label "description"@en . ### https://w3id.org/csro/ontology#publicationYear csro:publicationYear rdf:type owl:DatatypeProperty ; rdfs:domain csro:ContainerSecurityStandard ; rdfs:range xsd:gYear ; rdfs:comment "The year when the security standard was published."@en ; rdfs:label "publication year"@en . ### https://w3id.org/csro/ontology#publishedBy csro:publishedBy rdf:type owl:DatatypeProperty ; rdfs:domain csro:ContainerSecurityStandard ; rdfs:range xsd:string ; rdfs:comment "The organization that published or maintains the security standard."@en ; rdfs:label "published by"@en . ### https://w3id.org/csro/ontology#referenceUrl csro:referenceUrl rdf:type owl:DatatypeProperty ; rdfs:range xsd:string ; rdfs:comment "Provides a reference URL or web link for additional information about the concept."@en ; rdfs:label "reference URL"@en . ### https://w3id.org/csro/ontology#sectionId csro:sectionId rdf:type owl:DatatypeProperty ; rdfs:domain csro:ContainerSecurityStandardSection ; rdfs:range xsd:string ; rdfs:comment "The identifier of the section within the standard (e.g., 'ยง4.1.2', '4.3', 'D04', '#9')."@en ; rdfs:label "section ID"@en . ### https://w3id.org/csro/ontology#shortDescription csro:shortDescription rdf:type owl:DatatypeProperty ; rdfs:range xsd:string ; rdfs:comment "Provides a brief textual description of the concept."@en ; rdfs:label "short description"@en . ### https://w3id.org/csro/ontology#standardId csro:standardId rdf:type owl:DatatypeProperty ; rdfs:domain csro:ContainerSecurityStandard ; rdfs:range xsd:string ; rdfs:comment "The unique identifier or name of the security standard."@en ; rdfs:label "standard ID"@en . ### https://w3id.org/csro/ontology#version csro:version rdf:type owl:DatatypeProperty ; rdfs:domain csro:ContainerSecurityStandard ; rdfs:range xsd:string ; rdfs:comment "The version number or identifier of the security standard."@en ; rdfs:label "version"@en . ### https://w3id.org/csro/ontology#weightValue csro:weightValue rdf:type owl:DatatypeProperty ; rdfs:domain csro:AssumptionWeight ; rdfs:range xsd:decimal ; rdfs:comment "The numerical weight value indicating the effectiveness of an assumption (0-3 scale)."@en ; rdfs:label "weight value"@en . ################################################################# # Classes ################################################################# ### https://w3id.org/csro/ontology#AssumptionCategory csro:AssumptionCategory rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A category for grouping related security assumptions (e.g., Runtime Security, Network Security)."@en ; rdfs:label "Assumption Category"@en . ### https://w3id.org/csro/ontology#AssumptionInScenario csro:AssumptionInScenario rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A specific instance of a security assumption within a context scenario, including its satisfaction state."@en ; rdfs:label "Assumption in Scenario"@en . ### https://w3id.org/csro/ontology#AssumptionWeight csro:AssumptionWeight rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "The weight or effectiveness value of a security assumption in relation to a specific calculation rule."@en ; rdfs:label "Assumption Weight"@en . ### https://w3id.org/csro/ontology#AttackAction csro:AttackAction rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "The application of an attack pattern in a specific context scenario, with dynamically calculated risk assessments."@en ; rdfs:label "Attack Action"@en . ### https://w3id.org/csro/ontology#Component csro:Component rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A system component that can be affected by security impacts."@en ; rdfs:label "Component"@en . ### https://w3id.org/csro/ontology#ContainerArtefact csro:ContainerArtefact rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "Artefacts that can be analysed to verify container deployment traits and security assumptions."@en ; rdfs:label "Container Artefact"@en . ### https://w3id.org/csro/ontology#ContainerAttackTechnique csro:ContainerAttackTechnique rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A MITRE ATT&CK technique adapted and contextualized for container security risk assessment."@en ; rdfs:label "Container Attack Technique"@en . ### https://w3id.org/csro/ontology#ContainerAttackTechniqueCalculationRule csro:ContainerAttackTechniqueCalculationRule rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A rule for dynamically calculating risk assessment values based on container attack techniques and context scenarios."@en ; rdfs:label "Container Attack Technique Calculation Rule"@en . ### https://w3id.org/csro/ontology#ContainerDeploymentTrait csro:ContainerDeploymentTrait rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A configuration characteristic or setting used in container deployment."@en ; rdfs:label "Container Deployment Trait"@en . ### https://w3id.org/csro/ontology#ContainerSecurityAssumption csro:ContainerSecurityAssumption rdf:type owl:Class ; rdfs:subClassOf csro:SecurityAssumption ; rdfs:comment "A security assumption about the operational environment of a container application, derived from standards and best practices."@en ; rdfs:label "Container Security Assumption"@en . ### https://w3id.org/csro/ontology#ContainerSecurityGuideline csro:ContainerSecurityGuideline rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A security guideline or best practice recommendation for container deployments."@en ; rdfs:label "Container Security Guideline"@en . ### https://w3id.org/csro/ontology#ContainerSecurityRiskThing csro:ContainerSecurityRiskThing rdf:type owl:Class ; rdfs:comment "The root class for all risk assessment concepts in container security."@en ; rdfs:label "Container Security Risk Thing"@en . ### https://w3id.org/csro/ontology#ContainerSecurityStandard csro:ContainerSecurityStandard rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A formal security standard or framework that defines container security requirements."@en ; rdfs:label "Container Security Standard"@en . ### https://w3id.org/csro/ontology#ContainerSecurityStandardSection csro:ContainerSecurityStandardSection rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A specific section, chapter, or control within a container security standard."@en ; rdfs:label "Container Security Standard Section"@en . ### https://w3id.org/csro/ontology#ContextScenario csro:ContextScenario rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A scenario representing a collection of security assumptions with their satisfaction states. Scenarios are independent of specific attacks and represent different security postures."@en ; rdfs:label "Context Scenario"@en . ### https://w3id.org/csro/ontology#DifficultyLevel csro:DifficultyLevel rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "The base difficulty level for executing an attack pattern (e.g., Low, Medium, High)."@en ; rdfs:label "Difficulty Level"@en . ### https://w3id.org/csro/ontology#DockerComposeSetting csro:DockerComposeSetting rdf:type owl:Class ; rdfs:subClassOf csro:ContainerArtefact ; rdfs:comment "Configuration settings extracted from Docker Compose files as evidence for container deployment traits."@en ; rdfs:label "Docker Compose Setting"@en . ### https://w3id.org/csro/ontology#ExploitabilityCalculationRule csro:ExploitabilityCalculationRule rdf:type owl:Class ; rdfs:subClassOf csro:ContainerAttackTechniqueCalculationRule ; rdfs:comment "A rule for calculating exploitability ratings based on container attack techniques and security assumptions."@en ; rdfs:label "Exploitability Calculation Rule"@en . ### https://w3id.org/csro/ontology#ExploitabilityRating csro:ExploitabilityRating rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A rating indicating the ease of exploitation (e.g., Low, Medium, High)."@en ; rdfs:label "Exploitability Rating"@en . ### https://w3id.org/csro/ontology#ExposureCalculationRule csro:ExposureCalculationRule rdf:type owl:Class ; rdfs:subClassOf csro:ContainerAttackTechniqueCalculationRule ; rdfs:comment "A rule for calculating exposure ratings based on container attack techniques and security assumptions."@en ; rdfs:label "Exposure Calculation Rule"@en . ### https://w3id.org/csro/ontology#ExposureRating csro:ExposureRating rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A rating indicating the level of exposure to attack (e.g., Low, Medium, High)."@en ; rdfs:label "Exposure Rating"@en . ### https://w3id.org/csro/ontology#HadolintDockerfileRule csro:HadolintDockerfileRule rdf:type owl:Class ; rdfs:subClassOf csro:ContainerArtefact ; rdfs:comment "Dockerfile analysis rules and findings from Hadolint tool as evidence for container image security."@en ; rdfs:label "Hadolint Dockerfile Rule"@en . ### https://w3id.org/csro/ontology#Impact csro:Impact rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "The consequence or effect that results from a security threat being realized."@en ; rdfs:label "Impact"@en . ### https://w3id.org/csro/ontology#ImpactRating csro:ImpactRating rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A rating indicating the severity of security impact (e.g., Negligible, Moderate, Critical, Disastrous)."@en ; rdfs:label "Impact Rating"@en . ### https://w3id.org/csro/ontology#Likelihood csro:Likelihood rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A rating indicating the probability of an attack being successful (e.g., Very Unlikely, Unlikely, Possible, Likely, Very Likely)."@en ; rdfs:label "Likelihood"@en . ### https://w3id.org/csro/ontology#LikelihoodCalculationRule csro:LikelihoodCalculationRule rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A rule for calculating likelihood ratings from exploitability and exposure ratings."@en ; rdfs:label "Likelihood Calculation Rule"@en . ### https://w3id.org/csro/ontology#Risk csro:Risk rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A potential security risk resulting from the combination of likelihood and impact."@en ; rdfs:label "Risk"@en . ### https://w3id.org/csro/ontology#RiskCalculationRule csro:RiskCalculationRule rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A rule for calculating overall risk levels from likelihood and impact ratings."@en ; rdfs:label "Risk Calculation Rule"@en . ### https://w3id.org/csro/ontology#RiskLevel csro:RiskLevel rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "The overall risk level calculated from likelihood and impact (e.g., Negligible, Minor, Moderate, Significant, Major)."@en ; rdfs:label "Risk Level"@en . ### https://w3id.org/csro/ontology#RiskTreatment csro:RiskTreatment rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A strategy or action for mitigating security risks."@en ; rdfs:label "Risk Treatment"@en . ### https://w3id.org/csro/ontology#SatisfactionState csro:SatisfactionState rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "The satisfaction state of a security assumption: satisfied, dissatisfied, or unknown."@en ; rdfs:label "Satisfaction State"@en . ### https://w3id.org/csro/ontology#SecurityAssumption csro:SecurityAssumption rdf:type owl:Class ; rdfs:subClassOf csro:ContainerSecurityRiskThing ; rdfs:comment "A security assumption about the operational environment of a system for security risk assessment."@en ; rdfs:label "Security Assumption"@en . ################################################################# # Individuals ################################################################# ### http://d3fend.mitre.org/ontologies/d3fend.owl#T1496 d3f:T1496 rdf:type owl:NamedIndividual . ### http://d3fend.mitre.org/ontologies/d3fend.owl#T1498 d3f:T1498 rdf:type owl:NamedIndividual . ### http://d3fend.mitre.org/ontologies/d3fend.owl#T1499 d3f:T1499 rdf:type owl:NamedIndividual . ### http://d3fend.mitre.org/ontologies/d3fend.owl#T1599.001 d3f:T1599.001 rdf:type owl:NamedIndividual . ### http://d3fend.mitre.org/ontologies/d3fend.owl#T1611 d3f:T1611 rdf:type owl:NamedIndividual . ### https://w3id.org/csro/ontology#AUTH_1 csro:AUTH_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:AuthenticationAccess ; csro:originatesFrom csro:CIS_Docker_Benchmark_2_7 , csro:NIST_SP_800_190_Section_4_3_2 , csro:OWASP_Docker_Top_10_D04 ; csro:assumptionId "AUTH-1" ; csro:description "Authentication for exposed container APIs is enforced" . ### https://w3id.org/csro/ontology#AUTH_2 csro:AUTH_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:AuthenticationAccess ; csro:originatesFrom csro:CIS_Docker_Benchmark_2_12 , csro:NIST_SP_800_190_Section_4_3_1 ; csro:assumptionId "AUTH-2" ; csro:description "Role-based access control is used for orchestration and container management" . ### https://w3id.org/csro/ontology#AUTH_3 csro:AUTH_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:AuthenticationAccess ; csro:originatesFrom csro:CIS_Docker_Benchmark_3_23 , csro:CIS_Docker_Benchmark_3_24 , csro:CIS_Docker_Benchmark_3_3 , csro:CIS_Docker_Benchmark_3_4 , csro:CIS_Docker_Benchmark_5_32 , csro:NIST_SP_800_190_Section_4_3_1 , csro:OWASP_Docker_Security_Cheat_Sheet_1 ; csro:assumptionId "AUTH-3" ; csro:description "Access to container management interfaces (e.g., Docker socket) is restricted" . ### https://w3id.org/csro/ontology#AirGappedScenario csro:AirGappedScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:AirGappedScenario_AUTH_1 , csro:AirGappedScenario_AUTH_2 , csro:AirGappedScenario_AUTH_3 , csro:AirGappedScenario_CIC_1 , csro:AirGappedScenario_CIC_2 , csro:AirGappedScenario_CIC_3 , csro:AirGappedScenario_CIC_4 , csro:AirGappedScenario_CIC_5 , csro:AirGappedScenario_CIC_6 , csro:AirGappedScenario_CRM_1 , csro:AirGappedScenario_CRM_2 , csro:AirGappedScenario_CRM_3 , csro:AirGappedScenario_CRM_4 , csro:AirGappedScenario_HIS_1 , csro:AirGappedScenario_HIS_2 , csro:AirGappedScenario_HIS_3 , csro:AirGappedScenario_IMG_1 , csro:AirGappedScenario_IMG_2 , csro:AirGappedScenario_IMG_3 , csro:AirGappedScenario_IMG_4 , csro:AirGappedScenario_IMG_5 , csro:AirGappedScenario_IMG_6 , csro:AirGappedScenario_MON_1 , csro:AirGappedScenario_MON_2 , csro:AirGappedScenario_MON_3 , csro:AirGappedScenario_MON_4 , csro:AirGappedScenario_MON_5 , csro:AirGappedScenario_MON_6 , csro:AirGappedScenario_MON_7 , csro:AirGappedScenario_MON_8 , csro:AirGappedScenario_NET_1 , csro:AirGappedScenario_NET_2 , csro:AirGappedScenario_NET_3 , csro:AirGappedScenario_NET_4 , csro:AirGappedScenario_RTS_1 , csro:AirGappedScenario_RTS_2 , csro:AirGappedScenario_RTS_3 , csro:AirGappedScenario_RTS_4 , csro:AirGappedScenario_RTS_5 , csro:AirGappedScenario_RTS_6 , csro:AirGappedScenario_RTS_7 , csro:AirGappedScenario_SCM_1 , csro:AirGappedScenario_SCM_2 , csro:AirGappedScenario_SCM_3 , csro:AirGappedScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Air-gapped environment with no external connectivity but potentially outdated images and limited updates" ; rdfs:label "Air-Gapped Scenario" . ### https://w3id.org/csro/ontology#AirGappedScenario_AUTH_1 csro:AirGappedScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_AUTH_2 csro:AirGappedScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_AUTH_3 csro:AirGappedScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_CIC_1 csro:AirGappedScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_CIC_2 csro:AirGappedScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_CIC_3 csro:AirGappedScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_CIC_4 csro:AirGappedScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_CIC_5 csro:AirGappedScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_CIC_6 csro:AirGappedScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_CRM_1 csro:AirGappedScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_CRM_2 csro:AirGappedScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_CRM_3 csro:AirGappedScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_CRM_4 csro:AirGappedScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_HIS_1 csro:AirGappedScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_HIS_2 csro:AirGappedScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_HIS_3 csro:AirGappedScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_IMG_1 csro:AirGappedScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_IMG_2 csro:AirGappedScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_IMG_3 csro:AirGappedScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_IMG_4 csro:AirGappedScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_IMG_5 csro:AirGappedScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_IMG_6 csro:AirGappedScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_MON_1 csro:AirGappedScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_MON_2 csro:AirGappedScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_MON_3 csro:AirGappedScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_MON_4 csro:AirGappedScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_MON_5 csro:AirGappedScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_MON_6 csro:AirGappedScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_MON_7 csro:AirGappedScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_MON_8 csro:AirGappedScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_NET_1 csro:AirGappedScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_NET_2 csro:AirGappedScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_NET_3 csro:AirGappedScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_NET_4 csro:AirGappedScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#AirGappedScenario_RTS_1 csro:AirGappedScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_RTS_2 csro:AirGappedScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_RTS_3 csro:AirGappedScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_RTS_4 csro:AirGappedScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_RTS_5 csro:AirGappedScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_RTS_6 csro:AirGappedScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_RTS_7 csro:AirGappedScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_SCM_1 csro:AirGappedScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_SCM_2 csro:AirGappedScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_SCM_3 csro:AirGappedScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AirGappedScenario_SCM_4 csro:AirGappedScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#AlertUnauthorizedAccess csro:AlertUnauthorizedAccess rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:MON_8 ; csro:description "Configure alerts for unauthorized access attempts to registries and APIs" ; rdfs:label "Alert Unauthorized Access" . ### https://w3id.org/csro/ontology#Application csro:Application rdf:type owl:NamedIndividual , csro:Component ; csro:description "Container applications and processes running on the host system." ; rdfs:label "Application" . ### https://w3id.org/csro/ontology#AuthenticationAccess csro:AuthenticationAccess rdf:type owl:NamedIndividual , csro:AssumptionCategory ; csro:description "Security assumptions related to authentication and access control." ; rdfs:label "Authentication & Access" . ### https://w3id.org/csro/ontology#AuthenticationBypassRisk csro:AuthenticationBypassRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of integrity and confidentiality breach through service impersonation enabling authentication bypass" ; rdfs:label "Authentication Bypass Risk" . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario csro:BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:BalancedContainerSecurityScenario_AUTH_1 , csro:BalancedContainerSecurityScenario_AUTH_2 , csro:BalancedContainerSecurityScenario_AUTH_3 , csro:BalancedContainerSecurityScenario_CIC_1 , csro:BalancedContainerSecurityScenario_CIC_2 , csro:BalancedContainerSecurityScenario_CIC_3 , csro:BalancedContainerSecurityScenario_CIC_4 , csro:BalancedContainerSecurityScenario_CIC_5 , csro:BalancedContainerSecurityScenario_CIC_6 , csro:BalancedContainerSecurityScenario_CRM_1 , csro:BalancedContainerSecurityScenario_CRM_2 , csro:BalancedContainerSecurityScenario_CRM_3 , csro:BalancedContainerSecurityScenario_CRM_4 , csro:BalancedContainerSecurityScenario_HIS_1 , csro:BalancedContainerSecurityScenario_HIS_2 , csro:BalancedContainerSecurityScenario_HIS_3 , csro:BalancedContainerSecurityScenario_IMG_1 , csro:BalancedContainerSecurityScenario_IMG_2 , csro:BalancedContainerSecurityScenario_IMG_3 , csro:BalancedContainerSecurityScenario_IMG_4 , csro:BalancedContainerSecurityScenario_IMG_5 , csro:BalancedContainerSecurityScenario_IMG_6 , csro:BalancedContainerSecurityScenario_MON_1 , csro:BalancedContainerSecurityScenario_MON_2 , csro:BalancedContainerSecurityScenario_MON_3 , csro:BalancedContainerSecurityScenario_MON_4 , csro:BalancedContainerSecurityScenario_MON_5 , csro:BalancedContainerSecurityScenario_MON_6 , csro:BalancedContainerSecurityScenario_MON_7 , csro:BalancedContainerSecurityScenario_MON_8 , csro:BalancedContainerSecurityScenario_NET_1 , csro:BalancedContainerSecurityScenario_NET_2 , csro:BalancedContainerSecurityScenario_NET_3 , csro:BalancedContainerSecurityScenario_NET_4 , csro:BalancedContainerSecurityScenario_RTS_1 , csro:BalancedContainerSecurityScenario_RTS_2 , csro:BalancedContainerSecurityScenario_RTS_3 , csro:BalancedContainerSecurityScenario_RTS_4 , csro:BalancedContainerSecurityScenario_RTS_5 , csro:BalancedContainerSecurityScenario_RTS_6 , csro:BalancedContainerSecurityScenario_RTS_7 , csro:BalancedContainerSecurityScenario_SCM_1 , csro:BalancedContainerSecurityScenario_SCM_2 , csro:BalancedContainerSecurityScenario_SCM_3 , csro:BalancedContainerSecurityScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Balanced approach with moderate security controls across all categories, typical for mid-sized organizations" ; rdfs:label "Balanced Container Security Scenario" . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_AUTH_1 csro:BalancedContainerSecurityScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_AUTH_2 csro:BalancedContainerSecurityScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_AUTH_3 csro:BalancedContainerSecurityScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_CIC_1 csro:BalancedContainerSecurityScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_CIC_2 csro:BalancedContainerSecurityScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_CIC_3 csro:BalancedContainerSecurityScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_CIC_4 csro:BalancedContainerSecurityScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_CIC_5 csro:BalancedContainerSecurityScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_CIC_6 csro:BalancedContainerSecurityScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_CRM_1 csro:BalancedContainerSecurityScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_CRM_2 csro:BalancedContainerSecurityScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_CRM_3 csro:BalancedContainerSecurityScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_CRM_4 csro:BalancedContainerSecurityScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_HIS_1 csro:BalancedContainerSecurityScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_HIS_2 csro:BalancedContainerSecurityScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_HIS_3 csro:BalancedContainerSecurityScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_IMG_1 csro:BalancedContainerSecurityScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_IMG_2 csro:BalancedContainerSecurityScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_IMG_3 csro:BalancedContainerSecurityScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_IMG_4 csro:BalancedContainerSecurityScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_IMG_5 csro:BalancedContainerSecurityScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_IMG_6 csro:BalancedContainerSecurityScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_MON_1 csro:BalancedContainerSecurityScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_MON_2 csro:BalancedContainerSecurityScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_MON_3 csro:BalancedContainerSecurityScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_MON_4 csro:BalancedContainerSecurityScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_MON_5 csro:BalancedContainerSecurityScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_MON_6 csro:BalancedContainerSecurityScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_MON_7 csro:BalancedContainerSecurityScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_MON_8 csro:BalancedContainerSecurityScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_NET_1 csro:BalancedContainerSecurityScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_NET_2 csro:BalancedContainerSecurityScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_NET_3 csro:BalancedContainerSecurityScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_NET_4 csro:BalancedContainerSecurityScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_RTS_1 csro:BalancedContainerSecurityScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_RTS_2 csro:BalancedContainerSecurityScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_RTS_3 csro:BalancedContainerSecurityScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_RTS_4 csro:BalancedContainerSecurityScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_RTS_5 csro:BalancedContainerSecurityScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_RTS_6 csro:BalancedContainerSecurityScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_RTS_7 csro:BalancedContainerSecurityScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_SCM_1 csro:BalancedContainerSecurityScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_SCM_2 csro:BalancedContainerSecurityScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_SCM_3 csro:BalancedContainerSecurityScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BalancedContainerSecurityScenario_SCM_4 csro:BalancedContainerSecurityScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario csro:BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:BasicContainerSecurityScenario_AUTH_1 , csro:BasicContainerSecurityScenario_AUTH_2 , csro:BasicContainerSecurityScenario_AUTH_3 , csro:BasicContainerSecurityScenario_CIC_1 , csro:BasicContainerSecurityScenario_CIC_2 , csro:BasicContainerSecurityScenario_CIC_3 , csro:BasicContainerSecurityScenario_CIC_4 , csro:BasicContainerSecurityScenario_CIC_5 , csro:BasicContainerSecurityScenario_CIC_6 , csro:BasicContainerSecurityScenario_CRM_1 , csro:BasicContainerSecurityScenario_CRM_2 , csro:BasicContainerSecurityScenario_CRM_3 , csro:BasicContainerSecurityScenario_CRM_4 , csro:BasicContainerSecurityScenario_HIS_1 , csro:BasicContainerSecurityScenario_HIS_2 , csro:BasicContainerSecurityScenario_HIS_3 , csro:BasicContainerSecurityScenario_IMG_1 , csro:BasicContainerSecurityScenario_IMG_2 , csro:BasicContainerSecurityScenario_IMG_3 , csro:BasicContainerSecurityScenario_IMG_4 , csro:BasicContainerSecurityScenario_IMG_5 , csro:BasicContainerSecurityScenario_IMG_6 , csro:BasicContainerSecurityScenario_MON_1 , csro:BasicContainerSecurityScenario_MON_2 , csro:BasicContainerSecurityScenario_MON_3 , csro:BasicContainerSecurityScenario_MON_4 , csro:BasicContainerSecurityScenario_MON_5 , csro:BasicContainerSecurityScenario_MON_6 , csro:BasicContainerSecurityScenario_MON_7 , csro:BasicContainerSecurityScenario_MON_8 , csro:BasicContainerSecurityScenario_NET_1 , csro:BasicContainerSecurityScenario_NET_2 , csro:BasicContainerSecurityScenario_NET_3 , csro:BasicContainerSecurityScenario_NET_4 , csro:BasicContainerSecurityScenario_RTS_1 , csro:BasicContainerSecurityScenario_RTS_2 , csro:BasicContainerSecurityScenario_RTS_3 , csro:BasicContainerSecurityScenario_RTS_4 , csro:BasicContainerSecurityScenario_RTS_5 , csro:BasicContainerSecurityScenario_RTS_6 , csro:BasicContainerSecurityScenario_RTS_7 , csro:BasicContainerSecurityScenario_SCM_1 , csro:BasicContainerSecurityScenario_SCM_2 , csro:BasicContainerSecurityScenario_SCM_3 , csro:BasicContainerSecurityScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Scenario with only critical security controls implemented, representing minimal viable security" ; rdfs:label "Basic Container Security Scenario" . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_AUTH_1 csro:BasicContainerSecurityScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_AUTH_2 csro:BasicContainerSecurityScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_AUTH_3 csro:BasicContainerSecurityScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_CIC_1 csro:BasicContainerSecurityScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_CIC_2 csro:BasicContainerSecurityScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_CIC_3 csro:BasicContainerSecurityScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_CIC_4 csro:BasicContainerSecurityScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_CIC_5 csro:BasicContainerSecurityScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_CIC_6 csro:BasicContainerSecurityScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_CRM_1 csro:BasicContainerSecurityScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_CRM_2 csro:BasicContainerSecurityScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_CRM_3 csro:BasicContainerSecurityScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_CRM_4 csro:BasicContainerSecurityScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_HIS_1 csro:BasicContainerSecurityScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_HIS_2 csro:BasicContainerSecurityScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_HIS_3 csro:BasicContainerSecurityScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_IMG_1 csro:BasicContainerSecurityScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_IMG_2 csro:BasicContainerSecurityScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_IMG_3 csro:BasicContainerSecurityScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_IMG_4 csro:BasicContainerSecurityScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_IMG_5 csro:BasicContainerSecurityScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_IMG_6 csro:BasicContainerSecurityScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_MON_1 csro:BasicContainerSecurityScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_MON_2 csro:BasicContainerSecurityScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_MON_3 csro:BasicContainerSecurityScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_MON_4 csro:BasicContainerSecurityScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_MON_5 csro:BasicContainerSecurityScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_MON_6 csro:BasicContainerSecurityScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_MON_7 csro:BasicContainerSecurityScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_MON_8 csro:BasicContainerSecurityScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_NET_1 csro:BasicContainerSecurityScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_NET_2 csro:BasicContainerSecurityScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_NET_3 csro:BasicContainerSecurityScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_NET_4 csro:BasicContainerSecurityScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_RTS_1 csro:BasicContainerSecurityScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_RTS_2 csro:BasicContainerSecurityScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_RTS_3 csro:BasicContainerSecurityScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_RTS_4 csro:BasicContainerSecurityScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_RTS_5 csro:BasicContainerSecurityScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_RTS_6 csro:BasicContainerSecurityScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_RTS_7 csro:BasicContainerSecurityScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_SCM_1 csro:BasicContainerSecurityScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_SCM_2 csro:BasicContainerSecurityScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_SCM_3 csro:BasicContainerSecurityScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicContainerSecurityScenario_SCM_4 csro:BasicContainerSecurityScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicScenario csro:BasicScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:BasicScenario_IMG_1 , csro:BasicScenario_NET_1 , csro:BasicScenario_NET_2 , csro:BasicScenario_RTS_1 , csro:BasicScenario_RTS_2 , csro:BasicScenario_RTS_3 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Basic container deployment scenario with minimal security measures implemented." ; rdfs:label "Basic Scenario" . ### https://w3id.org/csro/ontology#BasicScenario_IMG_1 csro:BasicScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicScenario_NET_1 csro:BasicScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicScenario_NET_2 csro:BasicScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicScenario_RTS_1 csro:BasicScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#BasicScenario_RTS_2 csro:BasicScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#BasicScenario_RTS_3 csro:BasicScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario csro:CICDSecurityScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:CICDSecurityScenario_AUTH_1 , csro:CICDSecurityScenario_AUTH_2 , csro:CICDSecurityScenario_AUTH_3 , csro:CICDSecurityScenario_CIC_1 , csro:CICDSecurityScenario_CIC_2 , csro:CICDSecurityScenario_CIC_3 , csro:CICDSecurityScenario_CIC_4 , csro:CICDSecurityScenario_CIC_5 , csro:CICDSecurityScenario_CIC_6 , csro:CICDSecurityScenario_CRM_1 , csro:CICDSecurityScenario_CRM_2 , csro:CICDSecurityScenario_CRM_3 , csro:CICDSecurityScenario_CRM_4 , csro:CICDSecurityScenario_HIS_1 , csro:CICDSecurityScenario_HIS_2 , csro:CICDSecurityScenario_HIS_3 , csro:CICDSecurityScenario_IMG_1 , csro:CICDSecurityScenario_IMG_2 , csro:CICDSecurityScenario_IMG_3 , csro:CICDSecurityScenario_IMG_4 , csro:CICDSecurityScenario_IMG_5 , csro:CICDSecurityScenario_IMG_6 , csro:CICDSecurityScenario_MON_1 , csro:CICDSecurityScenario_MON_2 , csro:CICDSecurityScenario_MON_3 , csro:CICDSecurityScenario_MON_4 , csro:CICDSecurityScenario_MON_5 , csro:CICDSecurityScenario_MON_6 , csro:CICDSecurityScenario_MON_7 , csro:CICDSecurityScenario_MON_8 , csro:CICDSecurityScenario_NET_1 , csro:CICDSecurityScenario_NET_2 , csro:CICDSecurityScenario_NET_3 , csro:CICDSecurityScenario_NET_4 , csro:CICDSecurityScenario_RTS_1 , csro:CICDSecurityScenario_RTS_2 , csro:CICDSecurityScenario_RTS_3 , csro:CICDSecurityScenario_RTS_4 , csro:CICDSecurityScenario_RTS_5 , csro:CICDSecurityScenario_RTS_6 , csro:CICDSecurityScenario_RTS_7 , csro:CICDSecurityScenario_SCM_1 , csro:CICDSecurityScenario_SCM_2 , csro:CICDSecurityScenario_SCM_3 , csro:CICDSecurityScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Environment with security integrated throughout CI/CD pipeline including automated scanning and policy enforcement" ; rdfs:label "CI/CD Security Scenario" . ### https://w3id.org/csro/ontology#CICDSecurityScenario_AUTH_1 csro:CICDSecurityScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_AUTH_2 csro:CICDSecurityScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_AUTH_3 csro:CICDSecurityScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_CIC_1 csro:CICDSecurityScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_CIC_2 csro:CICDSecurityScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_CIC_3 csro:CICDSecurityScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_CIC_4 csro:CICDSecurityScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_CIC_5 csro:CICDSecurityScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_CIC_6 csro:CICDSecurityScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_CRM_1 csro:CICDSecurityScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_CRM_2 csro:CICDSecurityScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_CRM_3 csro:CICDSecurityScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_CRM_4 csro:CICDSecurityScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_HIS_1 csro:CICDSecurityScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_HIS_2 csro:CICDSecurityScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_HIS_3 csro:CICDSecurityScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_IMG_1 csro:CICDSecurityScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_IMG_2 csro:CICDSecurityScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_IMG_3 csro:CICDSecurityScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_IMG_4 csro:CICDSecurityScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_IMG_5 csro:CICDSecurityScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_IMG_6 csro:CICDSecurityScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_MON_1 csro:CICDSecurityScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_MON_2 csro:CICDSecurityScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_MON_3 csro:CICDSecurityScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_MON_4 csro:CICDSecurityScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_MON_5 csro:CICDSecurityScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_MON_6 csro:CICDSecurityScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_MON_7 csro:CICDSecurityScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_MON_8 csro:CICDSecurityScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_NET_1 csro:CICDSecurityScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_NET_2 csro:CICDSecurityScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_NET_3 csro:CICDSecurityScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_NET_4 csro:CICDSecurityScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_RTS_1 csro:CICDSecurityScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_RTS_2 csro:CICDSecurityScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_RTS_3 csro:CICDSecurityScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_RTS_4 csro:CICDSecurityScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_RTS_5 csro:CICDSecurityScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_RTS_6 csro:CICDSecurityScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_RTS_7 csro:CICDSecurityScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CICDSecurityScenario_SCM_1 csro:CICDSecurityScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_SCM_2 csro:CICDSecurityScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_SCM_3 csro:CICDSecurityScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSecurityScenario_SCM_4 csro:CICDSecurityScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CICDSupplyChain csro:CICDSupplyChain rdf:type owl:NamedIndividual , csro:AssumptionCategory ; csro:description "Security assumptions related to CI/CD and supply chain security." ; rdfs:label "CI/CD & Supply Chain" . ### https://w3id.org/csro/ontology#CIC_1 csro:CIC_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:CICDSupplyChain ; csro:originatesFrom csro:OWASP_Docker_Security_Cheat_Sheet_13 ; csro:assumptionId "CIC-1" ; csro:description "The CI/CD pipeline for the app is secured (regarding code repositories, build environments, secrets, vulnerabilities, signing, auditing ...)" . ### https://w3id.org/csro/ontology#CIC_2 csro:CIC_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:CICDSupplyChain ; csro:originatesFrom csro:OWASP_Docker_Security_Cheat_Sheet_13 ; csro:assumptionId "CIC-2" ; csro:description "SBOMs are used for the app to track code dependencies" . ### https://w3id.org/csro/ontology#CIC_3 csro:CIC_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:CICDSupplyChain ; csro:originatesFrom csro:OWASP_Docker_Security_Cheat_Sheet_9 ; csro:assumptionId "CIC-3" ; csro:description "Code reviews and automated testing of the app are enforced" . ### https://w3id.org/csro/ontology#CIC_4 csro:CIC_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:CICDSupplyChain ; csro:originatesFrom csro:CIS_Docker_Benchmark_4_11 , csro:NIST_SP_800_190_Section_4_1_5 , csro:OWASP_Docker_Security_Cheat_Sheet_13 , csro:OWASP_Docker_Top_10_D04 ; csro:assumptionId "CIC-4" ; csro:description "Third-party components used by the app are validated" . ### https://w3id.org/csro/ontology#CIC_5 csro:CIC_5 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:CICDSupplyChain ; csro:originatesFrom csro:CIS_Docker_Benchmark_4_7 ; csro:assumptionId "CIC-5" ; csro:description "The CI/CD pipeline for the app enables reproducible builds" . ### https://w3id.org/csro/ontology#CIC_6 csro:CIC_6 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:CICDSupplyChain ; csro:originatesFrom csro:NIST_SP_800_190_Section_4_4_5 , csro:OWASP_Docker_Top_10_D05 ; csro:assumptionId "CIC-6" ; csro:description "Apps for development and production are not deployed in the same environment" . ### https://w3id.org/csro/ontology#CISCompliantScenario csro:CISCompliantScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:CISCompliantScenario_AUTH_1 , csro:CISCompliantScenario_AUTH_2 , csro:CISCompliantScenario_AUTH_3 , csro:CISCompliantScenario_CIC_1 , csro:CISCompliantScenario_CIC_2 , csro:CISCompliantScenario_CIC_3 , csro:CISCompliantScenario_CIC_4 , csro:CISCompliantScenario_CIC_5 , csro:CISCompliantScenario_CIC_6 , csro:CISCompliantScenario_CRM_1 , csro:CISCompliantScenario_CRM_2 , csro:CISCompliantScenario_CRM_3 , csro:CISCompliantScenario_CRM_4 , csro:CISCompliantScenario_HIS_1 , csro:CISCompliantScenario_HIS_2 , csro:CISCompliantScenario_HIS_3 , csro:CISCompliantScenario_IMG_1 , csro:CISCompliantScenario_IMG_2 , csro:CISCompliantScenario_IMG_3 , csro:CISCompliantScenario_IMG_4 , csro:CISCompliantScenario_IMG_5 , csro:CISCompliantScenario_IMG_6 , csro:CISCompliantScenario_MON_1 , csro:CISCompliantScenario_MON_2 , csro:CISCompliantScenario_MON_3 , csro:CISCompliantScenario_MON_4 , csro:CISCompliantScenario_MON_5 , csro:CISCompliantScenario_MON_6 , csro:CISCompliantScenario_MON_7 , csro:CISCompliantScenario_MON_8 , csro:CISCompliantScenario_NET_1 , csro:CISCompliantScenario_NET_2 , csro:CISCompliantScenario_NET_3 , csro:CISCompliantScenario_NET_4 , csro:CISCompliantScenario_RTS_1 , csro:CISCompliantScenario_RTS_2 , csro:CISCompliantScenario_RTS_3 , csro:CISCompliantScenario_RTS_4 , csro:CISCompliantScenario_RTS_5 , csro:CISCompliantScenario_RTS_6 , csro:CISCompliantScenario_RTS_7 , csro:CISCompliantScenario_SCM_1 , csro:CISCompliantScenario_SCM_2 , csro:CISCompliantScenario_SCM_3 , csro:CISCompliantScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Scenario following CIS Docker Benchmark recommendations" ; rdfs:label "CIS Compliant Scenario" . ### https://w3id.org/csro/ontology#CISCompliantScenario_AUTH_1 csro:CISCompliantScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_AUTH_2 csro:CISCompliantScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_AUTH_3 csro:CISCompliantScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_CIC_1 csro:CISCompliantScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_CIC_2 csro:CISCompliantScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_CIC_3 csro:CISCompliantScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_CIC_4 csro:CISCompliantScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_CIC_5 csro:CISCompliantScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_CIC_6 csro:CISCompliantScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_CRM_1 csro:CISCompliantScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_CRM_2 csro:CISCompliantScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_CRM_3 csro:CISCompliantScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_CRM_4 csro:CISCompliantScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_HIS_1 csro:CISCompliantScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_HIS_2 csro:CISCompliantScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_HIS_3 csro:CISCompliantScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_IMG_1 csro:CISCompliantScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_IMG_2 csro:CISCompliantScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_IMG_3 csro:CISCompliantScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_IMG_4 csro:CISCompliantScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_IMG_5 csro:CISCompliantScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_IMG_6 csro:CISCompliantScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_MON_1 csro:CISCompliantScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_MON_2 csro:CISCompliantScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_MON_3 csro:CISCompliantScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_MON_4 csro:CISCompliantScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_MON_5 csro:CISCompliantScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_MON_6 csro:CISCompliantScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_MON_7 csro:CISCompliantScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_MON_8 csro:CISCompliantScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_NET_1 csro:CISCompliantScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_NET_2 csro:CISCompliantScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_NET_3 csro:CISCompliantScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_NET_4 csro:CISCompliantScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_RTS_1 csro:CISCompliantScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_RTS_2 csro:CISCompliantScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_RTS_3 csro:CISCompliantScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_RTS_4 csro:CISCompliantScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_RTS_5 csro:CISCompliantScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_RTS_6 csro:CISCompliantScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_RTS_7 csro:CISCompliantScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_SCM_1 csro:CISCompliantScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_SCM_2 csro:CISCompliantScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CISCompliantScenario_SCM_3 csro:CISCompliantScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#CISCompliantScenario_SCM_4 csro:CISCompliantScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark csro:CIS_Docker_Benchmark rdf:type owl:NamedIndividual , csro:ContainerSecurityStandard ; csro:description "CIS Docker Benchmark: Security configuration benchmark for Docker" ; csro:publishedBy "Center for Internet Security" ; csro:standardId "CIS Docker Benchmark" ; csro:version "v1.6.0" ; rdfs:label "CIS Docker Benchmark" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_1_1 csro:CIS_Docker_Benchmark_1_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure a separate partition for containers has been created" ; csro:sectionId "1.1" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_1_2_2 csro:CIS_Docker_Benchmark_1_2_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure the version of Docker is up to date" ; csro:sectionId "1.2.2" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_2_12 csro:CIS_Docker_Benchmark_2_12 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure centralized and remote logging is configured" ; csro:sectionId "2.12" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_2_13 csro:CIS_Docker_Benchmark_2_13 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure operations on legacy registry (v1) are Disabled" ; csro:sectionId "2.13" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_2_17 csro:CIS_Docker_Benchmark_2_17 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure experimental features are avoided in production" ; csro:sectionId "2.17" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_2_2 csro:CIS_Docker_Benchmark_2_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure network traffic is restricted between containers on the default bridge" ; csro:sectionId "2.2" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_2_3 csro:CIS_Docker_Benchmark_2_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure logging level is set to 'info'" ; csro:sectionId "2.3" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_2_5 csro:CIS_Docker_Benchmark_2_5 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure insecure registries are not used" ; csro:sectionId "2.5" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_2_7 csro:CIS_Docker_Benchmark_2_7 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure the default ulimit is configured appropriately" ; csro:sectionId "2.7" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_3_23 csro:CIS_Docker_Benchmark_3_23 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure that docker server certificate file permissions are set to 400" ; csro:sectionId "3.23" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_3_24 csro:CIS_Docker_Benchmark_3_24 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure that docker server certificate key file permissions are set to 400" ; csro:sectionId "3.24" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_3_3 csro:CIS_Docker_Benchmark_3_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure that docker.service file ownership is set to root:root" ; csro:sectionId "3.3" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_3_4 csro:CIS_Docker_Benchmark_3_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure that docker.service file permissions are set to 644 or more restrictive" ; csro:sectionId "3.4" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_4_1 csro:CIS_Docker_Benchmark_4_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure a user for the container has been created" ; csro:sectionId "4.1" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_4_10 csro:CIS_Docker_Benchmark_4_10 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure secrets are not stored in Dockerfiles" ; csro:sectionId "4.10" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_4_11 csro:CIS_Docker_Benchmark_4_11 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure verified packages are only Installed" ; csro:sectionId "4.11" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_4_2 csro:CIS_Docker_Benchmark_4_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure that HEALTHCHECK instruction has been added to the container image" ; csro:sectionId "4.2" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_4_3 csro:CIS_Docker_Benchmark_4_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure unnecessary packages are not installed in the container" ; csro:sectionId "4.3" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_4_4 csro:CIS_Docker_Benchmark_4_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure images are scanned and rebuilt to include security patches" ; csro:sectionId "4.4" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_4_5 csro:CIS_Docker_Benchmark_4_5 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure Content trust for Docker is Enabled" ; csro:sectionId "4.5" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_4_6 csro:CIS_Docker_Benchmark_4_6 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure HEALTHCHECK instruction has been added to the container image" ; csro:sectionId "4.6" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_4_7 csro:CIS_Docker_Benchmark_4_7 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure update instructions are not used alone in the Dockerfile" ; csro:sectionId "4.7" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_4_8 csro:CIS_Docker_Benchmark_4_8 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure setuid and setgid permissions are removed in the images" ; csro:sectionId "4.8" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_10 csro:CIS_Docker_Benchmark_5_10 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure memory usage for container is limited" ; csro:sectionId "5.10" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_11 csro:CIS_Docker_Benchmark_5_11 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure CPU priority is set appropriately on the container" ; csro:sectionId "5.11" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_12 csro:CIS_Docker_Benchmark_5_12 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure the container's root filesystem is mounted as read only" ; csro:sectionId "5.12" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_13 csro:CIS_Docker_Benchmark_5_13 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure the container's root filesystem is mounted as read only" ; csro:sectionId "5.13" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_14 csro:CIS_Docker_Benchmark_5_14 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure 'on-failure' container restart policy is set to '5'" ; csro:sectionId "5.14" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_16 csro:CIS_Docker_Benchmark_5_16 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure the host's process namespace is not shared" ; csro:sectionId "5.16" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_17 csro:CIS_Docker_Benchmark_5_17 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure the host's IPC namespace is not shared" ; csro:sectionId "5.17" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_18 csro:CIS_Docker_Benchmark_5_18 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure host devices are not directly exposed to containers" ; csro:sectionId "5.18" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_2 csro:CIS_Docker_Benchmark_5_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure SELinux security options are set, if applicable" ; csro:sectionId "5.2" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_21 csro:CIS_Docker_Benchmark_5_21 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure the default ulimit is overwritten at runtime, only if needed" ; csro:sectionId "5.21" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_22 csro:CIS_Docker_Benchmark_5_22 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure docker exec commands are not used with privileged option" ; csro:sectionId "5.22" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_24 csro:CIS_Docker_Benchmark_5_24 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure cgroup usage is confirmed" ; csro:sectionId "5.24" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_25 csro:CIS_Docker_Benchmark_5_25 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure the container is restricted from acquiring additional privileges" ; csro:sectionId "5.25" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_27 csro:CIS_Docker_Benchmark_5_27 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure docker commands always get the latest version of the image" ; csro:sectionId "5.27" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_28 csro:CIS_Docker_Benchmark_5_28 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure PIDs cgroup limit is used" ; csro:sectionId "5.28" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_3 csro:CIS_Docker_Benchmark_5_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure Linux Kernel Capabilities are restricted within containers" ; csro:sectionId "5.3" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_30 csro:CIS_Docker_Benchmark_5_30 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure the host's user namespaces is not shared" ; csro:sectionId "5.30" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_31 csro:CIS_Docker_Benchmark_5_31 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure the Docker socket is not mounted inside any containers" ; csro:sectionId "5.31" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_32 csro:CIS_Docker_Benchmark_5_32 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure docker exec commands are not used with user option" ; csro:sectionId "5.32" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_4 csro:CIS_Docker_Benchmark_5_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure privileged containers are not used" ; csro:sectionId "5.4" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_5_6 csro:CIS_Docker_Benchmark_5_6 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure sensitive host system directories are not mounted on containers" ; csro:sectionId "5.6" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_6_1 csro:CIS_Docker_Benchmark_6_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure image sprawl is avoided" ; csro:sectionId "6.1" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_7_3 csro:CIS_Docker_Benchmark_7_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure swarm services are binded to a specific host interface" ; csro:sectionId "7.3" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_7_4 csro:CIS_Docker_Benchmark_7_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure data exchanged between containers are encrypted on different nodes on the overlay network" ; csro:sectionId "7.4" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_7_6 csro:CIS_Docker_Benchmark_7_6 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure swarm manager is run in auto-lock mode" ; csro:sectionId "7.6" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_7_7 csro:CIS_Docker_Benchmark_7_7 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure swarm manager auto-lock key is rotated periodically" ; csro:sectionId "7.7" . ### https://w3id.org/csro/ontology#CIS_Docker_Benchmark_7_8 csro:CIS_Docker_Benchmark_7_8 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:CIS_Docker_Benchmark ; csro:description "Ensure node certificates are rotated as appropriate" ; csro:sectionId "7.8" . ### https://w3id.org/csro/ontology#CRM_1 csro:CRM_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:ComplianceRiskManagement ; csro:originatesFrom csro:NIST_SP_800_190_Section_6 ; csro:assumptionId "CRM-1" ; csro:description "Regular risk assessments of apps and host devices are performed" . ### https://w3id.org/csro/ontology#CRM_2 csro:CRM_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:ComplianceRiskManagement ; csro:originatesFrom csro:NIST_SP_800_190_Section_6 ; csro:assumptionId "CRM-2" ; csro:description "The operation's asset inventory is maintained" . ### https://w3id.org/csro/ontology#CRM_3 csro:CRM_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:ComplianceRiskManagement ; csro:originatesFrom csro:CIS_Docker_Benchmark_2_17 , csro:CIS_Docker_Benchmark_5_2 , csro:CIS_Docker_Benchmark_5_22 , csro:CIS_Docker_Benchmark_5_3 , csro:NIST_SP_800_190_Section_4_1_2 , csro:NIST_SP_800_190_Section_4_3_1 , csro:NIST_SP_800_190_Section_4_4_3 , csro:NIST_SP_800_190_Section_6 , csro:OWASP_Docker_Security_Cheat_Sheet_5 ; csro:assumptionId "CRM-3" ; csro:description "Container security policies along the app lifecycle are documented and enforced" . ### https://w3id.org/csro/ontology#CRM_4 csro:CRM_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:ComplianceRiskManagement ; csro:originatesFrom csro:NIST_SP_800_190_Section_4_1_2 , csro:NIST_SP_800_190_Section_4_3_1 , csro:NIST_SP_800_190_Section_4_4_3 ; csro:assumptionId "CRM-4" ; csro:description "Periodic audits and reviews of apps and host devices are conducted" . ### https://w3id.org/csro/ontology#CentralizeAndProtectLogs csro:CentralizeAndProtectLogs rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:MON_5 ; csro:description "Centralize logs and implement protection mechanisms to ensure integrity" ; rdfs:label "Centralize And Protect Logs" . ### https://w3id.org/csro/ontology#ComplianceRiskManagement csro:ComplianceRiskManagement rdf:type owl:NamedIndividual , csro:AssumptionCategory ; csro:description "Security assumptions related to compliance and risk management." ; rdfs:label "Compliance & Risk Management" . ### https://w3id.org/csro/ontology#CompromisedContainerProcess csro:CompromisedContainerProcess rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Critical ; csro:indicates csro:CompromisedContainerProcessRisk ; csro:description "Integrity and confidentiality of application process compromised through exploitation of public-facing vulnerabilities, enabling unauthorized control of the compromised application" ; rdfs:label "Compromised Container Process" . ### https://w3id.org/csro/ontology#CompromisedContainerProcessRisk csro:CompromisedContainerProcessRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:isTreatedBy csro:ConfigureHostFirewall , csro:RunAsNonRootUser , csro:ScanContainerImages , csro:SegmentNetworks ; csro:description "Risk of container process compromise through exploitation of vulnerabilities in public-facing applications" ; rdfs:label "Compromised Container Process Risk" . ### https://w3id.org/csro/ontology#ComputeResourceTheft csro:ComputeResourceTheft rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Moderate ; csro:indicates csro:ResourceMisuseRisk ; csro:description "Availability of compute resources degraded through unauthorized resource consumption, causing performance degradation for legitimate applications and services" ; rdfs:label "Compute Resource Theft" . ### https://w3id.org/csro/ontology#ConductPeriodicAudits csro:ConductPeriodicAudits rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:CRM_4 ; csro:description "Conduct periodic security audits and reviews of containers and host devices" ; rdfs:label "Conduct Periodic Audits" . ### https://w3id.org/csro/ontology#ConfigureHostFirewall csro:ConfigureHostFirewall rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:NET_2 ; csro:hasGuideline csro:GuidelineNetworking ; csro:isImplementedBy csro:host-level_firewall ; csro:description "Configure host-level firewall rules and network policies to control traffic" ; rdfs:label "Configure Host Firewall" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS csro:ContainerCgroupDoS rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Low ; csro:referencesAttackTechnique d3f:T1499 ; csro:requiresTrait csro:host_cgroup ; csro:description "Manipulating cgroup limits to cause denial of service by exhausting host system resources" ; rdfs:label "Container Cgroup DoS" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_AirGappedScenario csro:ContainerCgroupDoSAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerCgroupDoS attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_BalancedContainerSecurityScenario csro:ContainerCgroupDoSAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerCgroupDoS attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_BasicContainerSecurityScenario csro:ContainerCgroupDoSAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerCgroupDoS attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_BasicScenario csro:ContainerCgroupDoSAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:BasicScenario ; csro:description "ContainerCgroupDoS attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_CICDSecurityScenario csro:ContainerCgroupDoSAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerCgroupDoS attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_CISCompliantScenario csro:ContainerCgroupDoSAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerCgroupDoS attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_DevelopmentScenario csro:ContainerCgroupDoSAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerCgroupDoS attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_EdgeComputingScenario csro:ContainerCgroupDoSAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerCgroupDoS attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_HardenedScenario csro:ContainerCgroupDoSAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:HardenedScenario ; csro:description "ContainerCgroupDoS attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_HighRiskScenario csro:ContainerCgroupDoSAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerCgroupDoS attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_HybridCloudScenario csro:ContainerCgroupDoSAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerCgroupDoS attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_ImageSecurityFocusedScenario csro:ContainerCgroupDoSAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerCgroupDoS attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_MicroservicesScenario csro:ContainerCgroupDoSAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerCgroupDoS attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_MixedScenario csro:ContainerCgroupDoSAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:MixedScenario ; csro:description "ContainerCgroupDoS attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_NISTCompliantScenario csro:ContainerCgroupDoSAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerCgroupDoS attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_NetworkHardenedScenario csro:ContainerCgroupDoSAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerCgroupDoS attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_OWASPCheatSheetCompliantScenario csro:ContainerCgroupDoSAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerCgroupDoS attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_OWASPTop10CompliantScenario csro:ContainerCgroupDoSAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerCgroupDoS attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_OutdatedContainersScenario csro:ContainerCgroupDoSAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerCgroupDoS attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_ProductionScenario csro:ContainerCgroupDoSAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:ProductionScenario ; csro:description "ContainerCgroupDoS attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_RapidPrototypeScenario csro:ContainerCgroupDoSAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerCgroupDoS attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSAttack_RuntimeHardenedScenario csro:ContainerCgroupDoSAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupDoS ; csro:causesImpact csro:ResourceExhaustionDoS ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerCgroupDoS attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSExploitabilityRule csro:ContainerCgroupDoSExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerCgroupDoS ; csro:hasWeight csro:ContainerCgroupDoS_Exploitability_AUTH-1_Weight , csro:ContainerCgroupDoS_Exploitability_AUTH-2_Weight , csro:ContainerCgroupDoS_Exploitability_AUTH-3_Weight , csro:ContainerCgroupDoS_Exploitability_CIC-1_Weight , csro:ContainerCgroupDoS_Exploitability_CIC-2_Weight , csro:ContainerCgroupDoS_Exploitability_CIC-3_Weight , csro:ContainerCgroupDoS_Exploitability_CIC-4_Weight , csro:ContainerCgroupDoS_Exploitability_CIC-5_Weight , csro:ContainerCgroupDoS_Exploitability_CIC-6_Weight , csro:ContainerCgroupDoS_Exploitability_CRM-1_Weight , csro:ContainerCgroupDoS_Exploitability_CRM-2_Weight , csro:ContainerCgroupDoS_Exploitability_CRM-3_Weight , csro:ContainerCgroupDoS_Exploitability_CRM-4_Weight , csro:ContainerCgroupDoS_Exploitability_HIS-1_Weight , csro:ContainerCgroupDoS_Exploitability_HIS-2_Weight , csro:ContainerCgroupDoS_Exploitability_HIS-3_Weight , csro:ContainerCgroupDoS_Exploitability_IMG-1_Weight , csro:ContainerCgroupDoS_Exploitability_IMG-2_Weight , csro:ContainerCgroupDoS_Exploitability_IMG-3_Weight , csro:ContainerCgroupDoS_Exploitability_IMG-4_Weight , csro:ContainerCgroupDoS_Exploitability_IMG-5_Weight , csro:ContainerCgroupDoS_Exploitability_IMG-6_Weight , csro:ContainerCgroupDoS_Exploitability_MON-1_Weight , csro:ContainerCgroupDoS_Exploitability_MON-2_Weight , csro:ContainerCgroupDoS_Exploitability_MON-3_Weight , csro:ContainerCgroupDoS_Exploitability_MON-4_Weight , csro:ContainerCgroupDoS_Exploitability_MON-5_Weight , csro:ContainerCgroupDoS_Exploitability_MON-6_Weight , csro:ContainerCgroupDoS_Exploitability_MON-7_Weight , csro:ContainerCgroupDoS_Exploitability_MON-8_Weight , csro:ContainerCgroupDoS_Exploitability_NET-1_Weight , csro:ContainerCgroupDoS_Exploitability_NET-2_Weight , csro:ContainerCgroupDoS_Exploitability_NET-3_Weight , csro:ContainerCgroupDoS_Exploitability_NET-4_Weight , csro:ContainerCgroupDoS_Exploitability_RTS-1_Weight , csro:ContainerCgroupDoS_Exploitability_RTS-2_Weight , csro:ContainerCgroupDoS_Exploitability_RTS-3_Weight , csro:ContainerCgroupDoS_Exploitability_RTS-4_Weight , csro:ContainerCgroupDoS_Exploitability_RTS-5_Weight , csro:ContainerCgroupDoS_Exploitability_RTS-6_Weight , csro:ContainerCgroupDoS_Exploitability_RTS-7_Weight , csro:ContainerCgroupDoS_Exploitability_SCM-1_Weight , csro:ContainerCgroupDoS_Exploitability_SCM-2_Weight , csro:ContainerCgroupDoS_Exploitability_SCM-3_Weight , csro:ContainerCgroupDoS_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerCgroupDoS attack technique" . ### https://w3id.org/csro/ontology#ContainerCgroupDoSExposureRule csro:ContainerCgroupDoSExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerCgroupDoS ; csro:hasWeight csro:ContainerCgroupDoS_Exposure_AUTH-1_Weight , csro:ContainerCgroupDoS_Exposure_AUTH-2_Weight , csro:ContainerCgroupDoS_Exposure_AUTH-3_Weight , csro:ContainerCgroupDoS_Exposure_CIC-1_Weight , csro:ContainerCgroupDoS_Exposure_CIC-2_Weight , csro:ContainerCgroupDoS_Exposure_CIC-3_Weight , csro:ContainerCgroupDoS_Exposure_CIC-4_Weight , csro:ContainerCgroupDoS_Exposure_CIC-5_Weight , csro:ContainerCgroupDoS_Exposure_CIC-6_Weight , csro:ContainerCgroupDoS_Exposure_CRM-1_Weight , csro:ContainerCgroupDoS_Exposure_CRM-2_Weight , csro:ContainerCgroupDoS_Exposure_CRM-3_Weight , csro:ContainerCgroupDoS_Exposure_CRM-4_Weight , csro:ContainerCgroupDoS_Exposure_HIS-1_Weight , csro:ContainerCgroupDoS_Exposure_HIS-2_Weight , csro:ContainerCgroupDoS_Exposure_HIS-3_Weight , csro:ContainerCgroupDoS_Exposure_IMG-1_Weight , csro:ContainerCgroupDoS_Exposure_IMG-2_Weight , csro:ContainerCgroupDoS_Exposure_IMG-3_Weight , csro:ContainerCgroupDoS_Exposure_IMG-4_Weight , csro:ContainerCgroupDoS_Exposure_IMG-5_Weight , csro:ContainerCgroupDoS_Exposure_IMG-6_Weight , csro:ContainerCgroupDoS_Exposure_MON-1_Weight , csro:ContainerCgroupDoS_Exposure_MON-2_Weight , csro:ContainerCgroupDoS_Exposure_MON-3_Weight , csro:ContainerCgroupDoS_Exposure_MON-4_Weight , csro:ContainerCgroupDoS_Exposure_MON-5_Weight , csro:ContainerCgroupDoS_Exposure_MON-6_Weight , csro:ContainerCgroupDoS_Exposure_MON-7_Weight , csro:ContainerCgroupDoS_Exposure_MON-8_Weight , csro:ContainerCgroupDoS_Exposure_NET-1_Weight , csro:ContainerCgroupDoS_Exposure_NET-2_Weight , csro:ContainerCgroupDoS_Exposure_NET-3_Weight , csro:ContainerCgroupDoS_Exposure_NET-4_Weight , csro:ContainerCgroupDoS_Exposure_RTS-1_Weight , csro:ContainerCgroupDoS_Exposure_RTS-2_Weight , csro:ContainerCgroupDoS_Exposure_RTS-3_Weight , csro:ContainerCgroupDoS_Exposure_RTS-4_Weight , csro:ContainerCgroupDoS_Exposure_RTS-5_Weight , csro:ContainerCgroupDoS_Exposure_RTS-6_Weight , csro:ContainerCgroupDoS_Exposure_RTS-7_Weight , csro:ContainerCgroupDoS_Exposure_SCM-1_Weight , csro:ContainerCgroupDoS_Exposure_SCM-2_Weight , csro:ContainerCgroupDoS_Exposure_SCM-3_Weight , csro:ContainerCgroupDoS_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerCgroupDoS attack technique" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_AUTH-1_Weight csro:ContainerCgroupDoS_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_AUTH-2_Weight csro:ContainerCgroupDoS_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_AUTH-3_Weight csro:ContainerCgroupDoS_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_CIC-1_Weight csro:ContainerCgroupDoS_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_CIC-2_Weight csro:ContainerCgroupDoS_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_CIC-3_Weight csro:ContainerCgroupDoS_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_CIC-4_Weight csro:ContainerCgroupDoS_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_CIC-5_Weight csro:ContainerCgroupDoS_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_CIC-6_Weight csro:ContainerCgroupDoS_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_CRM-1_Weight csro:ContainerCgroupDoS_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how and what a container in the host's cgroup can do" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_CRM-2_Weight csro:ContainerCgroupDoS_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how and what a container in the host's cgroup can do" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_CRM-3_Weight csro:ContainerCgroupDoS_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how and what a container in the host's cgroup can do" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_CRM-4_Weight csro:ContainerCgroupDoS_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how and what a container in the host's cgroup can do" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_HIS-1_Weight csro:ContainerCgroupDoS_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make the resource consumption attack more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_HIS-2_Weight csro:ContainerCgroupDoS_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make the resource consumption attack more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_HIS-3_Weight csro:ContainerCgroupDoS_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make the resource consumption attack more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_IMG-1_Weight csro:ContainerCgroupDoS_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_IMG-2_Weight csro:ContainerCgroupDoS_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_IMG-3_Weight csro:ContainerCgroupDoS_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_IMG-4_Weight csro:ContainerCgroupDoS_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_IMG-5_Weight csro:ContainerCgroupDoS_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_IMG-6_Weight csro:ContainerCgroupDoS_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_MON-1_Weight csro:ContainerCgroupDoS_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_MON-2_Weight csro:ContainerCgroupDoS_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_MON-3_Weight csro:ContainerCgroupDoS_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_MON-4_Weight csro:ContainerCgroupDoS_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_MON-5_Weight csro:ContainerCgroupDoS_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_MON-6_Weight csro:ContainerCgroupDoS_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_MON-7_Weight csro:ContainerCgroupDoS_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_MON-8_Weight csro:ContainerCgroupDoS_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_NET-1_Weight csro:ContainerCgroupDoS_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_NET-2_Weight csro:ContainerCgroupDoS_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_NET-3_Weight csro:ContainerCgroupDoS_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_NET-4_Weight csro:ContainerCgroupDoS_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_RTS-1_Weight csro:ContainerCgroupDoS_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 2.0 ; csro:effectDescription "A non-root user limits the capabilities of the container to execute malicious activities, e.g. scripts" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_RTS-2_Weight csro:ContainerCgroupDoS_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 1.0 ; csro:effectDescription "A read-only filesystem makes creating and running malicious scripts for resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_RTS-3_Weight csro:ContainerCgroupDoS_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 1.0 ; csro:effectDescription "Dropping unneccessary Linux capabilities makes it harder for attackers to consume resources with malicious scripts" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_RTS-4_Weight csro:ContainerCgroupDoS_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make malicious resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_RTS-5_Weight csro:ContainerCgroupDoS_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make malicious resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_RTS-6_Weight csro:ContainerCgroupDoS_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make malicious resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_RTS-7_Weight csro:ContainerCgroupDoS_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make malicious resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_SCM-1_Weight csro:ContainerCgroupDoS_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not prevent or make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_SCM-2_Weight csro:ContainerCgroupDoS_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not prevent or make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_SCM-3_Weight csro:ContainerCgroupDoS_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not prevent or make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exploitability_SCM-4_Weight csro:ContainerCgroupDoS_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not prevent or make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_AUTH-1_Weight csro:ContainerCgroupDoS_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the privileged container in the host's cgroup" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_AUTH-2_Weight csro:ContainerCgroupDoS_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the privileged container in the host's cgroup" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_AUTH-3_Weight csro:ContainerCgroupDoS_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the privileged container in the host's cgroup" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_CIC-1_Weight csro:ContainerCgroupDoS_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_CIC-2_Weight csro:ContainerCgroupDoS_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_CIC-3_Weight csro:ContainerCgroupDoS_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_CIC-4_Weight csro:ContainerCgroupDoS_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_CIC-5_Weight csro:ContainerCgroupDoS_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_CIC-6_Weight csro:ContainerCgroupDoS_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_CRM-1_Weight csro:ContainerCgroupDoS_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support assessment of which components in the container's environment can exploit the resource allocation privilege" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_CRM-2_Weight csro:ContainerCgroupDoS_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support assessment of which components in the container's environment can exploit the resource allocation privilege" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_CRM-3_Weight csro:ContainerCgroupDoS_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support assessment of which components in the container's environment can exploit the resource allocation privilege" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_CRM-4_Weight csro:ContainerCgroupDoS_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support assessment of which components in the container's environment can exploit the resource allocation privilege" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_HIS-1_Weight csro:ContainerCgroupDoS_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 1.0 ; csro:effectDescription "An up-to-date container runtime supports management and allocation of host resources for containers" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_HIS-2_Weight csro:ContainerCgroupDoS_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 2.0 ; csro:effectDescription "An immutable host infrastructure reduces the attackers access to resources in the host's cgroup namespace" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_HIS-3_Weight csro:ContainerCgroupDoS_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring the resource allocation on the host system is essential to detect malicious activities by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_IMG-1_Weight csro:ContainerCgroupDoS_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_IMG-2_Weight csro:ContainerCgroupDoS_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_IMG-3_Weight csro:ContainerCgroupDoS_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_IMG-4_Weight csro:ContainerCgroupDoS_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_IMG-5_Weight csro:ContainerCgroupDoS_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_IMG-6_Weight csro:ContainerCgroupDoS_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_MON-1_Weight csro:ContainerCgroupDoS_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_MON-2_Weight csro:ContainerCgroupDoS_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_MON-3_Weight csro:ContainerCgroupDoS_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_MON-4_Weight csro:ContainerCgroupDoS_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_MON-5_Weight csro:ContainerCgroupDoS_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_MON-6_Weight csro:ContainerCgroupDoS_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_MON-7_Weight csro:ContainerCgroupDoS_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_MON-8_Weight csro:ContainerCgroupDoS_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_NET-1_Weight csro:ContainerCgroupDoS_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container in the host's cgroup and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_NET-2_Weight csro:ContainerCgroupDoS_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container in the host's cgroup and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_NET-3_Weight csro:ContainerCgroupDoS_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container in the host's cgroup and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_NET-4_Weight csro:ContainerCgroupDoS_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container in the host's cgroup and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_RTS-1_Weight csro:ContainerCgroupDoS_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_RTS-2_Weight csro:ContainerCgroupDoS_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_RTS-3_Weight csro:ContainerCgroupDoS_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_RTS-4_Weight csro:ContainerCgroupDoS_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_RTS-5_Weight csro:ContainerCgroupDoS_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_RTS-6_Weight csro:ContainerCgroupDoS_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_RTS-7_Weight csro:ContainerCgroupDoS_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_SCM-1_Weight csro:ContainerCgroupDoS_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface required for the resource consumption attack" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_SCM-2_Weight csro:ContainerCgroupDoS_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface required for the resource consumption attack" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_SCM-3_Weight csro:ContainerCgroupDoS_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface required for the resource consumption attack" . ### https://w3id.org/csro/ontology#ContainerCgroupDoS_Exposure_SCM-4_Weight csro:ContainerCgroupDoS_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface required for the resource consumption attack" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking csro:ContainerCgroupResourceHijacking rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Medium ; csro:referencesAttackTechnique d3f:T1496 ; csro:requiresTrait csro:host_cgroup ; csro:description "Manipulating cgroup resource allocations to hijack compute resources for cryptomining or other unauthorized resource consumption" ; rdfs:label "Container Cgroup Resource Hijacking" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_AirGappedScenario csro:ContainerCgroupResourceHijackingAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_BalancedContainerSecurityScenario csro:ContainerCgroupResourceHijackingAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_BasicContainerSecurityScenario csro:ContainerCgroupResourceHijackingAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_BasicScenario csro:ContainerCgroupResourceHijackingAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:BasicScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_CICDSecurityScenario csro:ContainerCgroupResourceHijackingAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_CISCompliantScenario csro:ContainerCgroupResourceHijackingAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_DevelopmentScenario csro:ContainerCgroupResourceHijackingAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_EdgeComputingScenario csro:ContainerCgroupResourceHijackingAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_HardenedScenario csro:ContainerCgroupResourceHijackingAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:HardenedScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_HighRiskScenario csro:ContainerCgroupResourceHijackingAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_HybridCloudScenario csro:ContainerCgroupResourceHijackingAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_ImageSecurityFocusedScenario csro:ContainerCgroupResourceHijackingAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_MicroservicesScenario csro:ContainerCgroupResourceHijackingAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_MixedScenario csro:ContainerCgroupResourceHijackingAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:MixedScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_NISTCompliantScenario csro:ContainerCgroupResourceHijackingAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_NetworkHardenedScenario csro:ContainerCgroupResourceHijackingAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_OWASPCheatSheetCompliantScenario csro:ContainerCgroupResourceHijackingAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_OWASPTop10CompliantScenario csro:ContainerCgroupResourceHijackingAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_OutdatedContainersScenario csro:ContainerCgroupResourceHijackingAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_ProductionScenario csro:ContainerCgroupResourceHijackingAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:ProductionScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_RapidPrototypeScenario csro:ContainerCgroupResourceHijackingAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingAttack_RuntimeHardenedScenario csro:ContainerCgroupResourceHijackingAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceContainerRuntime , csro:OtherApplications ; csro:appliesTechnique csro:ContainerCgroupResourceHijacking ; csro:causesImpact csro:ComputeResourceTheft ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerCgroupResourceHijacking attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingExploitabilityRule csro:ContainerCgroupResourceHijackingExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerCgroupResourceHijacking ; csro:hasWeight csro:ContainerCgroupResourceHijacking_Exploitability_AUTH-1_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_AUTH-2_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_AUTH-3_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_CIC-1_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_CIC-2_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_CIC-3_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_CIC-4_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_CIC-5_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_CIC-6_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_CRM-1_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_CRM-2_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_CRM-3_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_CRM-4_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_HIS-1_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_HIS-2_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_HIS-3_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_IMG-1_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_IMG-2_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_IMG-3_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_IMG-4_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_IMG-5_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_IMG-6_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_MON-1_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_MON-2_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_MON-3_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_MON-4_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_MON-5_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_MON-6_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_MON-7_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_MON-8_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_NET-1_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_NET-2_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_NET-3_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_NET-4_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_RTS-1_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_RTS-2_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_RTS-3_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_RTS-4_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_RTS-5_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_RTS-6_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_RTS-7_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_SCM-1_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_SCM-2_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_SCM-3_Weight , csro:ContainerCgroupResourceHijacking_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerCgroupResourceHijacking attack technique" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijackingExposureRule csro:ContainerCgroupResourceHijackingExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerCgroupResourceHijacking ; csro:hasWeight csro:ContainerCgroupResourceHijacking_Exposure_AUTH-1_Weight , csro:ContainerCgroupResourceHijacking_Exposure_AUTH-2_Weight , csro:ContainerCgroupResourceHijacking_Exposure_AUTH-3_Weight , csro:ContainerCgroupResourceHijacking_Exposure_CIC-1_Weight , csro:ContainerCgroupResourceHijacking_Exposure_CIC-2_Weight , csro:ContainerCgroupResourceHijacking_Exposure_CIC-3_Weight , csro:ContainerCgroupResourceHijacking_Exposure_CIC-4_Weight , csro:ContainerCgroupResourceHijacking_Exposure_CIC-5_Weight , csro:ContainerCgroupResourceHijacking_Exposure_CIC-6_Weight , csro:ContainerCgroupResourceHijacking_Exposure_CRM-1_Weight , csro:ContainerCgroupResourceHijacking_Exposure_CRM-2_Weight , csro:ContainerCgroupResourceHijacking_Exposure_CRM-3_Weight , csro:ContainerCgroupResourceHijacking_Exposure_CRM-4_Weight , csro:ContainerCgroupResourceHijacking_Exposure_HIS-1_Weight , csro:ContainerCgroupResourceHijacking_Exposure_HIS-2_Weight , csro:ContainerCgroupResourceHijacking_Exposure_HIS-3_Weight , csro:ContainerCgroupResourceHijacking_Exposure_IMG-1_Weight , csro:ContainerCgroupResourceHijacking_Exposure_IMG-2_Weight , csro:ContainerCgroupResourceHijacking_Exposure_IMG-3_Weight , csro:ContainerCgroupResourceHijacking_Exposure_IMG-4_Weight , csro:ContainerCgroupResourceHijacking_Exposure_IMG-5_Weight , csro:ContainerCgroupResourceHijacking_Exposure_IMG-6_Weight , csro:ContainerCgroupResourceHijacking_Exposure_MON-1_Weight , csro:ContainerCgroupResourceHijacking_Exposure_MON-2_Weight , csro:ContainerCgroupResourceHijacking_Exposure_MON-3_Weight , csro:ContainerCgroupResourceHijacking_Exposure_MON-4_Weight , csro:ContainerCgroupResourceHijacking_Exposure_MON-5_Weight , csro:ContainerCgroupResourceHijacking_Exposure_MON-6_Weight , csro:ContainerCgroupResourceHijacking_Exposure_MON-7_Weight , csro:ContainerCgroupResourceHijacking_Exposure_MON-8_Weight , csro:ContainerCgroupResourceHijacking_Exposure_NET-1_Weight , csro:ContainerCgroupResourceHijacking_Exposure_NET-2_Weight , csro:ContainerCgroupResourceHijacking_Exposure_NET-3_Weight , csro:ContainerCgroupResourceHijacking_Exposure_NET-4_Weight , csro:ContainerCgroupResourceHijacking_Exposure_RTS-1_Weight , csro:ContainerCgroupResourceHijacking_Exposure_RTS-2_Weight , csro:ContainerCgroupResourceHijacking_Exposure_RTS-3_Weight , csro:ContainerCgroupResourceHijacking_Exposure_RTS-4_Weight , csro:ContainerCgroupResourceHijacking_Exposure_RTS-5_Weight , csro:ContainerCgroupResourceHijacking_Exposure_RTS-6_Weight , csro:ContainerCgroupResourceHijacking_Exposure_RTS-7_Weight , csro:ContainerCgroupResourceHijacking_Exposure_SCM-1_Weight , csro:ContainerCgroupResourceHijacking_Exposure_SCM-2_Weight , csro:ContainerCgroupResourceHijacking_Exposure_SCM-3_Weight , csro:ContainerCgroupResourceHijacking_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerCgroupResourceHijacking attack technique" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_AUTH-1_Weight csro:ContainerCgroupResourceHijacking_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_AUTH-2_Weight csro:ContainerCgroupResourceHijacking_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_AUTH-3_Weight csro:ContainerCgroupResourceHijacking_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_CIC-1_Weight csro:ContainerCgroupResourceHijacking_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_CIC-2_Weight csro:ContainerCgroupResourceHijacking_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_CIC-3_Weight csro:ContainerCgroupResourceHijacking_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_CIC-4_Weight csro:ContainerCgroupResourceHijacking_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_CIC-5_Weight csro:ContainerCgroupResourceHijacking_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_CIC-6_Weight csro:ContainerCgroupResourceHijacking_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase the trustworthiness of a container and security of the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_CRM-1_Weight csro:ContainerCgroupResourceHijacking_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how and what a container in the host's cgroup can do" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_CRM-2_Weight csro:ContainerCgroupResourceHijacking_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how and what a container in the host's cgroup can do" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_CRM-3_Weight csro:ContainerCgroupResourceHijacking_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how and what a container in the host's cgroup can do" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_CRM-4_Weight csro:ContainerCgroupResourceHijacking_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how and what a container in the host's cgroup can do" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_HIS-1_Weight csro:ContainerCgroupResourceHijacking_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make the resource consumption attack more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_HIS-2_Weight csro:ContainerCgroupResourceHijacking_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make the resource consumption attack more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_HIS-3_Weight csro:ContainerCgroupResourceHijacking_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make the resource consumption attack more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_IMG-1_Weight csro:ContainerCgroupResourceHijacking_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_IMG-2_Weight csro:ContainerCgroupResourceHijacking_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_IMG-3_Weight csro:ContainerCgroupResourceHijacking_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_IMG-4_Weight csro:ContainerCgroupResourceHijacking_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_IMG-5_Weight csro:ContainerCgroupResourceHijacking_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_IMG-6_Weight csro:ContainerCgroupResourceHijacking_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make resource consumption more difficult for an attacker" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_MON-1_Weight csro:ContainerCgroupResourceHijacking_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_MON-2_Weight csro:ContainerCgroupResourceHijacking_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_MON-3_Weight csro:ContainerCgroupResourceHijacking_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_MON-4_Weight csro:ContainerCgroupResourceHijacking_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_MON-5_Weight csro:ContainerCgroupResourceHijacking_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_MON-6_Weight csro:ContainerCgroupResourceHijacking_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_MON-7_Weight csro:ContainerCgroupResourceHijacking_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_MON-8_Weight csro:ContainerCgroupResourceHijacking_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_NET-1_Weight csro:ContainerCgroupResourceHijacking_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_NET-2_Weight csro:ContainerCgroupResourceHijacking_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_NET-3_Weight csro:ContainerCgroupResourceHijacking_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_NET-4_Weight csro:ContainerCgroupResourceHijacking_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_RTS-1_Weight csro:ContainerCgroupResourceHijacking_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 2.0 ; csro:effectDescription "A non-root user limits the capabilities of the container to execute malicious activities, e.g. scripts" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_RTS-2_Weight csro:ContainerCgroupResourceHijacking_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 1.0 ; csro:effectDescription "A read-only filesystem makes creating and running malicious scripts for resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_RTS-3_Weight csro:ContainerCgroupResourceHijacking_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 1.0 ; csro:effectDescription "Dropping unneccessary Linux capabilities makes it harder for attackers to consume resources with malicious scripts" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_RTS-4_Weight csro:ContainerCgroupResourceHijacking_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make malicious resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_RTS-5_Weight csro:ContainerCgroupResourceHijacking_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make malicious resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_RTS-6_Weight csro:ContainerCgroupResourceHijacking_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make malicious resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_RTS-7_Weight csro:ContainerCgroupResourceHijacking_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make malicious resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_SCM-1_Weight csro:ContainerCgroupResourceHijacking_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not prevent or make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_SCM-2_Weight csro:ContainerCgroupResourceHijacking_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not prevent or make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_SCM-3_Weight csro:ContainerCgroupResourceHijacking_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not prevent or make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exploitability_SCM-4_Weight csro:ContainerCgroupResourceHijacking_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not prevent or make resource consumption more difficult" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_AUTH-1_Weight csro:ContainerCgroupResourceHijacking_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the privileged container in the host's cgroup" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_AUTH-2_Weight csro:ContainerCgroupResourceHijacking_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the privileged container in the host's cgroup" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_AUTH-3_Weight csro:ContainerCgroupResourceHijacking_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the privileged container in the host's cgroup" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_CIC-1_Weight csro:ContainerCgroupResourceHijacking_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_CIC-2_Weight csro:ContainerCgroupResourceHijacking_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_CIC-3_Weight csro:ContainerCgroupResourceHijacking_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_CIC-4_Weight csro:ContainerCgroupResourceHijacking_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_CIC-5_Weight csro:ContainerCgroupResourceHijacking_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_CIC-6_Weight csro:ContainerCgroupResourceHijacking_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls support detection of malicious containers and prevent the introduction of vulnerabilities by validating the software footprint" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_CRM-1_Weight csro:ContainerCgroupResourceHijacking_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support assessment of which components in the container's environment can exploit the resource allocation privilege" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_CRM-2_Weight csro:ContainerCgroupResourceHijacking_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support assessment of which components in the container's environment can exploit the resource allocation privilege" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_CRM-3_Weight csro:ContainerCgroupResourceHijacking_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support assessment of which components in the container's environment can exploit the resource allocation privilege" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_CRM-4_Weight csro:ContainerCgroupResourceHijacking_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices support assessment of which components in the container's environment can exploit the resource allocation privilege" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_HIS-1_Weight csro:ContainerCgroupResourceHijacking_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 1.0 ; csro:effectDescription "An up-to-date container runtime supports management and allocation of host resources for containers" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_HIS-2_Weight csro:ContainerCgroupResourceHijacking_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 2.0 ; csro:effectDescription "An immutable host infrastructure reduces the attackers access to resources in the host's cgroup namespace" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_HIS-3_Weight csro:ContainerCgroupResourceHijacking_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring the resource allocation on the host system is essential to detect malicious activities by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_IMG-1_Weight csro:ContainerCgroupResourceHijacking_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_IMG-2_Weight csro:ContainerCgroupResourceHijacking_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_IMG-3_Weight csro:ContainerCgroupResourceHijacking_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_IMG-4_Weight csro:ContainerCgroupResourceHijacking_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_IMG-5_Weight csro:ContainerCgroupResourceHijacking_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_IMG-6_Weight csro:ContainerCgroupResourceHijacking_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint, trustworthiness of the container, and make it more difficult to hijack computing resources, e.g. for cryptomining" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_MON-1_Weight csro:ContainerCgroupResourceHijacking_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_MON-2_Weight csro:ContainerCgroupResourceHijacking_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_MON-3_Weight csro:ContainerCgroupResourceHijacking_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_MON-4_Weight csro:ContainerCgroupResourceHijacking_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_MON-5_Weight csro:ContainerCgroupResourceHijacking_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_MON-6_Weight csro:ContainerCgroupResourceHijacking_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_MON-7_Weight csro:ContainerCgroupResourceHijacking_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_MON-8_Weight csro:ContainerCgroupResourceHijacking_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of unauthorized resource consumption by a container" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_NET-1_Weight csro:ContainerCgroupResourceHijacking_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container in the host's cgroup and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_NET-2_Weight csro:ContainerCgroupResourceHijacking_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container in the host's cgroup and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_NET-3_Weight csro:ContainerCgroupResourceHijacking_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container in the host's cgroup and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_NET-4_Weight csro:ContainerCgroupResourceHijacking_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container in the host's cgroup and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_RTS-1_Weight csro:ContainerCgroupResourceHijacking_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_RTS-2_Weight csro:ContainerCgroupResourceHijacking_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_RTS-3_Weight csro:ContainerCgroupResourceHijacking_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_RTS-4_Weight csro:ContainerCgroupResourceHijacking_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_RTS-5_Weight csro:ContainerCgroupResourceHijacking_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_RTS-6_Weight csro:ContainerCgroupResourceHijacking_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_RTS-7_Weight csro:ContainerCgroupResourceHijacking_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for resource consumption or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_SCM-1_Weight csro:ContainerCgroupResourceHijacking_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface required for the resource consumption attack" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_SCM-2_Weight csro:ContainerCgroupResourceHijacking_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface required for the resource consumption attack" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_SCM-3_Weight csro:ContainerCgroupResourceHijacking_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface required for the resource consumption attack" . ### https://w3id.org/csro/ontology#ContainerCgroupResourceHijacking_Exposure_SCM-4_Weight csro:ContainerCgroupResourceHijacking_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface required for the resource consumption attack" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem csro:ContainerDataFromLocalSystem rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Low ; csro:referencesAttackTechnique d3f:T1005 ; csro:requiresTrait csro:privileged_host_volume ; csro:description "Accessing sensitive host system files and directories through privileged host volume mounts to exfiltrate confidential information" ; rdfs:label "Container Data from Local System" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_AirGappedScenario csro:ContainerDataFromLocalSystemAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerDataFromLocalSystem attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_BalancedContainerSecurityScenario csro:ContainerDataFromLocalSystemAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerDataFromLocalSystem attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_BasicContainerSecurityScenario csro:ContainerDataFromLocalSystemAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerDataFromLocalSystem attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_BasicScenario csro:ContainerDataFromLocalSystemAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:BasicScenario ; csro:description "Container data from local system attack (T1005) applied in basic scenario" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_CICDSecurityScenario csro:ContainerDataFromLocalSystemAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerDataFromLocalSystem attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_CISCompliantScenario csro:ContainerDataFromLocalSystemAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerDataFromLocalSystem attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_DevelopmentScenario csro:ContainerDataFromLocalSystemAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerDataFromLocalSystem attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_EdgeComputingScenario csro:ContainerDataFromLocalSystemAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerDataFromLocalSystem attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_HardenedScenario csro:ContainerDataFromLocalSystemAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:HardenedScenario ; csro:description "Container data from local system attack (T1005) applied in hardened scenario" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_HighRiskScenario csro:ContainerDataFromLocalSystemAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerDataFromLocalSystem attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_HybridCloudScenario csro:ContainerDataFromLocalSystemAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerDataFromLocalSystem attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_ImageSecurityFocusedScenario csro:ContainerDataFromLocalSystemAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerDataFromLocalSystem attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_MicroservicesScenario csro:ContainerDataFromLocalSystemAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerDataFromLocalSystem attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_MixedScenario csro:ContainerDataFromLocalSystemAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:MixedScenario ; csro:description "Container data from local system attack (T1005) applied in mixed scenario" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_NISTCompliantScenario csro:ContainerDataFromLocalSystemAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerDataFromLocalSystem attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_NetworkHardenedScenario csro:ContainerDataFromLocalSystemAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerDataFromLocalSystem attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_OWASPCheatSheetCompliantScenario csro:ContainerDataFromLocalSystemAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerDataFromLocalSystem attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_OWASPTop10CompliantScenario csro:ContainerDataFromLocalSystemAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerDataFromLocalSystem attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_OutdatedContainersScenario csro:ContainerDataFromLocalSystemAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerDataFromLocalSystem attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_ProductionScenario csro:ContainerDataFromLocalSystemAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:ProductionScenario ; csro:description "ContainerDataFromLocalSystem attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_RapidPrototypeScenario csro:ContainerDataFromLocalSystemAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerDataFromLocalSystem attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemAttack_RuntimeHardenedScenario csro:ContainerDataFromLocalSystemAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerDataFromLocalSystem ; csro:causesImpact csro:HostSystemFilesExposed ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerDataFromLocalSystem attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemExploitabilityRule csro:ContainerDataFromLocalSystemExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerDataFromLocalSystem ; csro:hasWeight csro:ContainerDataFromLocalSystem_Exploitability_AUTH-1_Weight , csro:ContainerDataFromLocalSystem_Exploitability_AUTH-2_Weight , csro:ContainerDataFromLocalSystem_Exploitability_AUTH-3_Weight , csro:ContainerDataFromLocalSystem_Exploitability_CIC-1_Weight , csro:ContainerDataFromLocalSystem_Exploitability_CIC-2_Weight , csro:ContainerDataFromLocalSystem_Exploitability_CIC-3_Weight , csro:ContainerDataFromLocalSystem_Exploitability_CIC-4_Weight , csro:ContainerDataFromLocalSystem_Exploitability_CIC-5_Weight , csro:ContainerDataFromLocalSystem_Exploitability_CIC-6_Weight , csro:ContainerDataFromLocalSystem_Exploitability_CRM-1_Weight , csro:ContainerDataFromLocalSystem_Exploitability_CRM-2_Weight , csro:ContainerDataFromLocalSystem_Exploitability_CRM-3_Weight , csro:ContainerDataFromLocalSystem_Exploitability_CRM-4_Weight , csro:ContainerDataFromLocalSystem_Exploitability_HIS-1_Weight , csro:ContainerDataFromLocalSystem_Exploitability_HIS-2_Weight , csro:ContainerDataFromLocalSystem_Exploitability_HIS-3_Weight , csro:ContainerDataFromLocalSystem_Exploitability_IMG-1_Weight , csro:ContainerDataFromLocalSystem_Exploitability_IMG-2_Weight , csro:ContainerDataFromLocalSystem_Exploitability_IMG-3_Weight , csro:ContainerDataFromLocalSystem_Exploitability_IMG-4_Weight , csro:ContainerDataFromLocalSystem_Exploitability_IMG-5_Weight , csro:ContainerDataFromLocalSystem_Exploitability_IMG-6_Weight , csro:ContainerDataFromLocalSystem_Exploitability_MON-1_Weight , csro:ContainerDataFromLocalSystem_Exploitability_MON-2_Weight , csro:ContainerDataFromLocalSystem_Exploitability_MON-3_Weight , csro:ContainerDataFromLocalSystem_Exploitability_MON-4_Weight , csro:ContainerDataFromLocalSystem_Exploitability_MON-5_Weight , csro:ContainerDataFromLocalSystem_Exploitability_MON-6_Weight , csro:ContainerDataFromLocalSystem_Exploitability_MON-7_Weight , csro:ContainerDataFromLocalSystem_Exploitability_MON-8_Weight , csro:ContainerDataFromLocalSystem_Exploitability_NET-1_Weight , csro:ContainerDataFromLocalSystem_Exploitability_NET-2_Weight , csro:ContainerDataFromLocalSystem_Exploitability_NET-3_Weight , csro:ContainerDataFromLocalSystem_Exploitability_NET-4_Weight , csro:ContainerDataFromLocalSystem_Exploitability_RTS-1_Weight , csro:ContainerDataFromLocalSystem_Exploitability_RTS-2_Weight , csro:ContainerDataFromLocalSystem_Exploitability_RTS-3_Weight , csro:ContainerDataFromLocalSystem_Exploitability_RTS-4_Weight , csro:ContainerDataFromLocalSystem_Exploitability_RTS-5_Weight , csro:ContainerDataFromLocalSystem_Exploitability_RTS-6_Weight , csro:ContainerDataFromLocalSystem_Exploitability_RTS-7_Weight , csro:ContainerDataFromLocalSystem_Exploitability_SCM-1_Weight , csro:ContainerDataFromLocalSystem_Exploitability_SCM-2_Weight , csro:ContainerDataFromLocalSystem_Exploitability_SCM-3_Weight , csro:ContainerDataFromLocalSystem_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerDataFromLocalSystem attack technique" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystemExposureRule csro:ContainerDataFromLocalSystemExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerDataFromLocalSystem ; csro:hasWeight csro:ContainerDataFromLocalSystem_Exposure_AUTH-1_Weight , csro:ContainerDataFromLocalSystem_Exposure_AUTH-2_Weight , csro:ContainerDataFromLocalSystem_Exposure_AUTH-3_Weight , csro:ContainerDataFromLocalSystem_Exposure_CIC-1_Weight , csro:ContainerDataFromLocalSystem_Exposure_CIC-2_Weight , csro:ContainerDataFromLocalSystem_Exposure_CIC-3_Weight , csro:ContainerDataFromLocalSystem_Exposure_CIC-4_Weight , csro:ContainerDataFromLocalSystem_Exposure_CIC-5_Weight , csro:ContainerDataFromLocalSystem_Exposure_CIC-6_Weight , csro:ContainerDataFromLocalSystem_Exposure_CRM-1_Weight , csro:ContainerDataFromLocalSystem_Exposure_CRM-2_Weight , csro:ContainerDataFromLocalSystem_Exposure_CRM-3_Weight , csro:ContainerDataFromLocalSystem_Exposure_CRM-4_Weight , csro:ContainerDataFromLocalSystem_Exposure_HIS-1_Weight , csro:ContainerDataFromLocalSystem_Exposure_HIS-2_Weight , csro:ContainerDataFromLocalSystem_Exposure_HIS-3_Weight , csro:ContainerDataFromLocalSystem_Exposure_IMG-1_Weight , csro:ContainerDataFromLocalSystem_Exposure_IMG-2_Weight , csro:ContainerDataFromLocalSystem_Exposure_IMG-3_Weight , csro:ContainerDataFromLocalSystem_Exposure_IMG-4_Weight , csro:ContainerDataFromLocalSystem_Exposure_IMG-5_Weight , csro:ContainerDataFromLocalSystem_Exposure_IMG-6_Weight , csro:ContainerDataFromLocalSystem_Exposure_MON-1_Weight , csro:ContainerDataFromLocalSystem_Exposure_MON-2_Weight , csro:ContainerDataFromLocalSystem_Exposure_MON-3_Weight , csro:ContainerDataFromLocalSystem_Exposure_MON-4_Weight , csro:ContainerDataFromLocalSystem_Exposure_MON-5_Weight , csro:ContainerDataFromLocalSystem_Exposure_MON-6_Weight , csro:ContainerDataFromLocalSystem_Exposure_MON-7_Weight , csro:ContainerDataFromLocalSystem_Exposure_MON-8_Weight , csro:ContainerDataFromLocalSystem_Exposure_NET-1_Weight , csro:ContainerDataFromLocalSystem_Exposure_NET-2_Weight , csro:ContainerDataFromLocalSystem_Exposure_NET-3_Weight , csro:ContainerDataFromLocalSystem_Exposure_NET-4_Weight , csro:ContainerDataFromLocalSystem_Exposure_RTS-1_Weight , csro:ContainerDataFromLocalSystem_Exposure_RTS-2_Weight , csro:ContainerDataFromLocalSystem_Exposure_RTS-3_Weight , csro:ContainerDataFromLocalSystem_Exposure_RTS-4_Weight , csro:ContainerDataFromLocalSystem_Exposure_RTS-5_Weight , csro:ContainerDataFromLocalSystem_Exposure_RTS-6_Weight , csro:ContainerDataFromLocalSystem_Exposure_RTS-7_Weight , csro:ContainerDataFromLocalSystem_Exposure_SCM-1_Weight , csro:ContainerDataFromLocalSystem_Exposure_SCM-2_Weight , csro:ContainerDataFromLocalSystem_Exposure_SCM-3_Weight , csro:ContainerDataFromLocalSystem_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerDataFromLocalSystem attack technique" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_AUTH-1_Weight csro:ContainerDataFromLocalSystem_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not prevent a privileged container from reading files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_AUTH-2_Weight csro:ContainerDataFromLocalSystem_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not prevent a privileged container from reading files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_AUTH-3_Weight csro:ContainerDataFromLocalSystem_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 2.0 ; csro:effectDescription "Restricting access to the Docker socket prevents exposure of confidential container information" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_CIC-1_Weight csro:ContainerDataFromLocalSystem_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "Securing the build pipeline can remove the need for confidential files (e.g., secrets) in the production environment" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_CIC-2_Weight csro:ContainerDataFromLocalSystem_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain practices do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_CIC-3_Weight csro:ContainerDataFromLocalSystem_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain practices do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_CIC-4_Weight csro:ContainerDataFromLocalSystem_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain practices do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_CIC-5_Weight csro:ContainerDataFromLocalSystem_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain practices do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_CIC-6_Weight csro:ContainerDataFromLocalSystem_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "Separating development and production (e.g., different environment configuration files) counter attacks that target to expose these secrets" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_CRM-1_Weight csro:ContainerDataFromLocalSystem_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management does not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_CRM-2_Weight csro:ContainerDataFromLocalSystem_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management does not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_CRM-3_Weight csro:ContainerDataFromLocalSystem_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management does not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_CRM-4_Weight csro:ContainerDataFromLocalSystem_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management does not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_HIS-1_Weight csro:ContainerDataFromLocalSystem_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not directly increase the effort to read confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_HIS-2_Weight csro:ContainerDataFromLocalSystem_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not directly increase the effort to read confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_HIS-3_Weight csro:ContainerDataFromLocalSystem_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not directly increase the effort to read confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_IMG-1_Weight csro:ContainerDataFromLocalSystem_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices reduce the software footprint, but do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_IMG-2_Weight csro:ContainerDataFromLocalSystem_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices reduce the software footprint, but do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_IMG-3_Weight csro:ContainerDataFromLocalSystem_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices reduce the software footprint, but do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_IMG-4_Weight csro:ContainerDataFromLocalSystem_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices reduce the software footprint, but do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_IMG-5_Weight csro:ContainerDataFromLocalSystem_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices reduce the software footprint, but do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_IMG-6_Weight csro:ContainerDataFromLocalSystem_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices reduce the software footprint, but do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_MON-1_Weight csro:ContainerDataFromLocalSystem_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection tools do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_MON-2_Weight csro:ContainerDataFromLocalSystem_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection tools do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_MON-3_Weight csro:ContainerDataFromLocalSystem_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection tools do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_MON-4_Weight csro:ContainerDataFromLocalSystem_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection tools do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_MON-5_Weight csro:ContainerDataFromLocalSystem_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection tools do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_MON-6_Weight csro:ContainerDataFromLocalSystem_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection tools do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_MON-7_Weight csro:ContainerDataFromLocalSystem_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection tools do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_MON-8_Weight csro:ContainerDataFromLocalSystem_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection tools do not make reading confidential files more difficult" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_NET-1_Weight csro:ContainerDataFromLocalSystem_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent an attacker from reading confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_NET-2_Weight csro:ContainerDataFromLocalSystem_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent an attacker from reading confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_NET-3_Weight csro:ContainerDataFromLocalSystem_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent an attacker from reading confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_NET-4_Weight csro:ContainerDataFromLocalSystem_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent an attacker from reading confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_RTS-1_Weight csro:ContainerDataFromLocalSystem_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls greatly limit what the container sees and is able to access" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_RTS-2_Weight csro:ContainerDataFromLocalSystem_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Implementing a read-only file system still allows attackers to read confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_RTS-3_Weight csro:ContainerDataFromLocalSystem_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 2.0 ; csro:effectDescription "If capabilities are dropped, access to host resources is limited, but reading files is still possible" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_RTS-4_Weight csro:ContainerDataFromLocalSystem_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls greatly limit what the container sees and is able to access" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_RTS-5_Weight csro:ContainerDataFromLocalSystem_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls greatly limit what the container sees and is able to access" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_RTS-6_Weight csro:ContainerDataFromLocalSystem_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls greatly limit what the container sees and is able to access" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_RTS-7_Weight csro:ContainerDataFromLocalSystem_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls greatly limit what the container sees and is able to access" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_SCM-1_Weight csro:ContainerDataFromLocalSystem_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 3.0 ; csro:effectDescription "Secrets management controls restrict access to confidential data, especially when access to privileged directories is granted" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_SCM-2_Weight csro:ContainerDataFromLocalSystem_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 3.0 ; csro:effectDescription "Secrets management controls restrict access to confidential data, especially when access to privileged directories is granted" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_SCM-3_Weight csro:ContainerDataFromLocalSystem_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 3.0 ; csro:effectDescription "Secrets management controls restrict access to confidential data, especially when access to privileged directories is granted" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exploitability_SCM-4_Weight csro:ContainerDataFromLocalSystem_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 3.0 ; csro:effectDescription "Secrets management controls restrict access to confidential data, especially when access to privileged directories is granted" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_AUTH-1_Weight csro:ContainerDataFromLocalSystem_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to privileged containers" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_AUTH-2_Weight csro:ContainerDataFromLocalSystem_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to privileged containers" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_AUTH-3_Weight csro:ContainerDataFromLocalSystem_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to privileged containers" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_CIC-1_Weight csro:ContainerDataFromLocalSystem_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "Securing the build pipeline can remove the need for confidential files (e.g., secrets) in the production environment" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_CIC-2_Weight csro:ContainerDataFromLocalSystem_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain practices do not restrict the access to confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_CIC-3_Weight csro:ContainerDataFromLocalSystem_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain practices do not restrict the access to confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_CIC-4_Weight csro:ContainerDataFromLocalSystem_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain practices do not restrict the access to confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_CIC-5_Weight csro:ContainerDataFromLocalSystem_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain practices do not restrict the access to confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_CIC-6_Weight csro:ContainerDataFromLocalSystem_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "Separating development and production reduces the amount of files that can be exposed to an attacker" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_CRM-1_Weight csro:ContainerDataFromLocalSystem_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help assessing which files are exposed to privileged containers" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_CRM-2_Weight csro:ContainerDataFromLocalSystem_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help assessing which files are exposed to privileged containers" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_CRM-3_Weight csro:ContainerDataFromLocalSystem_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help assessing which files are exposed to privileged containers" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_CRM-4_Weight csro:ContainerDataFromLocalSystem_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help assessing which files are exposed to privileged containers" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_HIS-1_Weight csro:ContainerDataFromLocalSystem_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not restrict the access to confidential data" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_HIS-2_Weight csro:ContainerDataFromLocalSystem_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not restrict the access to confidential data" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_HIS-3_Weight csro:ContainerDataFromLocalSystem_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring confidential files on the host system can expose unauthorized read access" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_IMG-1_Weight csro:ContainerDataFromLocalSystem_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Once the container is compromised, container image security practices do not increase the risk of getting caught" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_IMG-2_Weight csro:ContainerDataFromLocalSystem_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Once the container is compromised, container image security practices do not increase the risk of getting caught" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_IMG-3_Weight csro:ContainerDataFromLocalSystem_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Once the container is compromised, container image security practices do not increase the risk of getting caught" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_IMG-4_Weight csro:ContainerDataFromLocalSystem_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Once the container is compromised, container image security practices do not increase the risk of getting caught" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_IMG-5_Weight csro:ContainerDataFromLocalSystem_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Once the container is compromised, container image security practices do not increase the risk of getting caught" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_IMG-6_Weight csro:ContainerDataFromLocalSystem_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Once the container is compromised, container image security practices do not increase the risk of getting caught" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_MON-1_Weight csro:ContainerDataFromLocalSystem_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls can identify exposure of confidential data, but require efforts to spot these subtle attacks" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_MON-2_Weight csro:ContainerDataFromLocalSystem_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls can identify exposure of confidential data, but require efforts to spot these subtle attacks" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_MON-3_Weight csro:ContainerDataFromLocalSystem_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls can identify exposure of confidential data, but require efforts to spot these subtle attacks" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_MON-4_Weight csro:ContainerDataFromLocalSystem_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls can identify exposure of confidential data, but require efforts to spot these subtle attacks" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_MON-5_Weight csro:ContainerDataFromLocalSystem_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls can identify exposure of confidential data, but require efforts to spot these subtle attacks" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_MON-6_Weight csro:ContainerDataFromLocalSystem_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls can identify exposure of confidential data, but require efforts to spot these subtle attacks" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_MON-7_Weight csro:ContainerDataFromLocalSystem_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls can identify exposure of confidential data, but require efforts to spot these subtle attacks" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_MON-8_Weight csro:ContainerDataFromLocalSystem_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls can identify exposure of confidential data, but require efforts to spot these subtle attacks" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_NET-1_Weight csro:ContainerDataFromLocalSystem_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls restrict access to the privileged container" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_NET-2_Weight csro:ContainerDataFromLocalSystem_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls restrict access to the privileged container" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_NET-3_Weight csro:ContainerDataFromLocalSystem_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls restrict access to the privileged container" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_NET-4_Weight csro:ContainerDataFromLocalSystem_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls restrict access to the privileged container" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_RTS-1_Weight csro:ContainerDataFromLocalSystem_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls restrict general access to host resources" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_RTS-2_Weight csro:ContainerDataFromLocalSystem_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Implementing a read-only file system still grants attackers access to confidential files" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_RTS-3_Weight csro:ContainerDataFromLocalSystem_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 2.0 ; csro:effectDescription "If capabilities are dropped, access to host resources is restricted, but reading files is still possible" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_RTS-4_Weight csro:ContainerDataFromLocalSystem_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls restrict general access to host resources" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_RTS-5_Weight csro:ContainerDataFromLocalSystem_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls restrict general access to host resources" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_RTS-6_Weight csro:ContainerDataFromLocalSystem_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls restrict general access to host resources" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_RTS-7_Weight csro:ContainerDataFromLocalSystem_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls restrict general access to host resources" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_SCM-1_Weight csro:ContainerDataFromLocalSystem_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Secrets management controls protect sensitive credentials from exposure" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_SCM-2_Weight csro:ContainerDataFromLocalSystem_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Secrets management controls protect sensitive credentials from exposure" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_SCM-3_Weight csro:ContainerDataFromLocalSystem_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Secrets management controls protect sensitive credentials from exposure" . ### https://w3id.org/csro/ontology#ContainerDataFromLocalSystem_Exposure_SCM-4_Weight csro:ContainerDataFromLocalSystem_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Secrets management controls protect sensitive credentials from exposure" . ### https://w3id.org/csro/ontology#ContainerEscapeImpact csro:ContainerEscapeImpact rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Disastrous ; csro:indicates csro:HostCompromiseRisk ; csro:description "Complete loss of confidentiality, integrity, and availability of host system through container escape, enabling full unauthorized control over all system resources and data" ; rdfs:label "Container Escape Impact" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp csro:ContainerExploitPublicFacingApp rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Medium ; csro:referencesAttackTechnique d3f:T1190 ; csro:requiresTrait csro:external_network ; csro:description "Exploiting application vulnerabilities in containers with external network exposure to compromise the container process" ; rdfs:label "Container Exploit Public-Facing App" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_AirGappedScenario csro:ContainerExploitPublicFacingAppAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_BalancedContainerSecurityScenario csro:ContainerExploitPublicFacingAppAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_BasicContainerSecurityScenario csro:ContainerExploitPublicFacingAppAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_BasicScenario csro:ContainerExploitPublicFacingAppAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:BasicScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_CICDSecurityScenario csro:ContainerExploitPublicFacingAppAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_CISCompliantScenario csro:ContainerExploitPublicFacingAppAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_DevelopmentScenario csro:ContainerExploitPublicFacingAppAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_EdgeComputingScenario csro:ContainerExploitPublicFacingAppAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_HardenedScenario csro:ContainerExploitPublicFacingAppAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:HardenedScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_HighRiskScenario csro:ContainerExploitPublicFacingAppAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_HybridCloudScenario csro:ContainerExploitPublicFacingAppAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_ImageSecurityFocusedScenario csro:ContainerExploitPublicFacingAppAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_MicroservicesScenario csro:ContainerExploitPublicFacingAppAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_MixedScenario csro:ContainerExploitPublicFacingAppAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:MixedScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_NISTCompliantScenario csro:ContainerExploitPublicFacingAppAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_NetworkHardenedScenario csro:ContainerExploitPublicFacingAppAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_OWASPCheatSheetCompliantScenario csro:ContainerExploitPublicFacingAppAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_OWASPTop10CompliantScenario csro:ContainerExploitPublicFacingAppAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_OutdatedContainersScenario csro:ContainerExploitPublicFacingAppAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_ProductionScenario csro:ContainerExploitPublicFacingAppAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:ProductionScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_RapidPrototypeScenario csro:ContainerExploitPublicFacingAppAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppAttack_RuntimeHardenedScenario csro:ContainerExploitPublicFacingAppAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application ; csro:appliesTechnique csro:ContainerExploitPublicFacingApp ; csro:causesImpact csro:CompromisedContainerProcess ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerExploitPublicFacingApp attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppExploitabilityRule csro:ContainerExploitPublicFacingAppExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerExploitPublicFacingApp ; csro:hasWeight csro:ContainerExploitPublicFacingApp_Exploitability_AUTH-1_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_AUTH-2_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_AUTH-3_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_CIC-1_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_CIC-2_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_CIC-3_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_CIC-4_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_CIC-5_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_CIC-6_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_CRM-1_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_CRM-2_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_CRM-3_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_CRM-4_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_HIS-1_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_HIS-2_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_HIS-3_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_IMG-1_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_IMG-2_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_IMG-3_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_IMG-4_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_IMG-5_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_IMG-6_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_MON-1_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_MON-2_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_MON-3_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_MON-4_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_MON-5_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_MON-6_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_MON-7_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_MON-8_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_NET-1_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_NET-2_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_NET-3_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_NET-4_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_RTS-1_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_RTS-2_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_RTS-3_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_RTS-4_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_RTS-5_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_RTS-6_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_RTS-7_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_SCM-1_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_SCM-2_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_SCM-3_Weight , csro:ContainerExploitPublicFacingApp_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerExploitPublicFacingApp attack technique" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingAppExposureRule csro:ContainerExploitPublicFacingAppExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerExploitPublicFacingApp ; csro:hasWeight csro:ContainerExploitPublicFacingApp_Exposure_AUTH-1_Weight , csro:ContainerExploitPublicFacingApp_Exposure_AUTH-2_Weight , csro:ContainerExploitPublicFacingApp_Exposure_AUTH-3_Weight , csro:ContainerExploitPublicFacingApp_Exposure_CIC-1_Weight , csro:ContainerExploitPublicFacingApp_Exposure_CIC-2_Weight , csro:ContainerExploitPublicFacingApp_Exposure_CIC-3_Weight , csro:ContainerExploitPublicFacingApp_Exposure_CIC-4_Weight , csro:ContainerExploitPublicFacingApp_Exposure_CIC-5_Weight , csro:ContainerExploitPublicFacingApp_Exposure_CIC-6_Weight , csro:ContainerExploitPublicFacingApp_Exposure_CRM-1_Weight , csro:ContainerExploitPublicFacingApp_Exposure_CRM-2_Weight , csro:ContainerExploitPublicFacingApp_Exposure_CRM-3_Weight , csro:ContainerExploitPublicFacingApp_Exposure_CRM-4_Weight , csro:ContainerExploitPublicFacingApp_Exposure_HIS-1_Weight , csro:ContainerExploitPublicFacingApp_Exposure_HIS-2_Weight , csro:ContainerExploitPublicFacingApp_Exposure_HIS-3_Weight , csro:ContainerExploitPublicFacingApp_Exposure_IMG-1_Weight , csro:ContainerExploitPublicFacingApp_Exposure_IMG-2_Weight , csro:ContainerExploitPublicFacingApp_Exposure_IMG-3_Weight , csro:ContainerExploitPublicFacingApp_Exposure_IMG-4_Weight , csro:ContainerExploitPublicFacingApp_Exposure_IMG-5_Weight , csro:ContainerExploitPublicFacingApp_Exposure_IMG-6_Weight , csro:ContainerExploitPublicFacingApp_Exposure_MON-1_Weight , csro:ContainerExploitPublicFacingApp_Exposure_MON-2_Weight , csro:ContainerExploitPublicFacingApp_Exposure_MON-3_Weight , csro:ContainerExploitPublicFacingApp_Exposure_MON-4_Weight , csro:ContainerExploitPublicFacingApp_Exposure_MON-5_Weight , csro:ContainerExploitPublicFacingApp_Exposure_MON-6_Weight , csro:ContainerExploitPublicFacingApp_Exposure_MON-7_Weight , csro:ContainerExploitPublicFacingApp_Exposure_MON-8_Weight , csro:ContainerExploitPublicFacingApp_Exposure_NET-1_Weight , csro:ContainerExploitPublicFacingApp_Exposure_NET-2_Weight , csro:ContainerExploitPublicFacingApp_Exposure_NET-3_Weight , csro:ContainerExploitPublicFacingApp_Exposure_NET-4_Weight , csro:ContainerExploitPublicFacingApp_Exposure_RTS-1_Weight , csro:ContainerExploitPublicFacingApp_Exposure_RTS-2_Weight , csro:ContainerExploitPublicFacingApp_Exposure_RTS-3_Weight , csro:ContainerExploitPublicFacingApp_Exposure_RTS-4_Weight , csro:ContainerExploitPublicFacingApp_Exposure_RTS-5_Weight , csro:ContainerExploitPublicFacingApp_Exposure_RTS-6_Weight , csro:ContainerExploitPublicFacingApp_Exposure_RTS-7_Weight , csro:ContainerExploitPublicFacingApp_Exposure_SCM-1_Weight , csro:ContainerExploitPublicFacingApp_Exposure_SCM-2_Weight , csro:ContainerExploitPublicFacingApp_Exposure_SCM-3_Weight , csro:ContainerExploitPublicFacingApp_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerExploitPublicFacingApp attack technique" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_AUTH-1_Weight csro:ContainerExploitPublicFacingApp_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to container infrastructure" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_AUTH-2_Weight csro:ContainerExploitPublicFacingApp_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to container infrastructure" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_AUTH-3_Weight csro:ContainerExploitPublicFacingApp_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to container infrastructure" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_CIC-1_Weight csro:ContainerExploitPublicFacingApp_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not focus the prevention of initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_CIC-2_Weight csro:ContainerExploitPublicFacingApp_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not focus the prevention of initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_CIC-3_Weight csro:ContainerExploitPublicFacingApp_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not focus the prevention of initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_CIC-4_Weight csro:ContainerExploitPublicFacingApp_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not focus the prevention of initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_CIC-5_Weight csro:ContainerExploitPublicFacingApp_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not focus the prevention of initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_CIC-6_Weight csro:ContainerExploitPublicFacingApp_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not focus the prevention of initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_CRM-1_Weight csro:ContainerExploitPublicFacingApp_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help identifying the capabilities to access an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_CRM-2_Weight csro:ContainerExploitPublicFacingApp_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help identifying the capabilities to access an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_CRM-3_Weight csro:ContainerExploitPublicFacingApp_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help identifying the capabilities to access an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_CRM-4_Weight csro:ContainerExploitPublicFacingApp_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help identifying the capabilities to access an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_HIS-1_Weight csro:ContainerExploitPublicFacingApp_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 1.0 ; csro:effectDescription "An up-to-date container runtime ensures that current measures for access control are implemented" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_HIS-2_Weight csro:ContainerExploitPublicFacingApp_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not prevent initial access to an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_HIS-3_Weight csro:ContainerExploitPublicFacingApp_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not prevent initial access to an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_IMG-1_Weight csro:ContainerExploitPublicFacingApp_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_IMG-2_Weight csro:ContainerExploitPublicFacingApp_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_IMG-3_Weight csro:ContainerExploitPublicFacingApp_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_IMG-4_Weight csro:ContainerExploitPublicFacingApp_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_IMG-5_Weight csro:ContainerExploitPublicFacingApp_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_IMG-6_Weight csro:ContainerExploitPublicFacingApp_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_MON-1_Weight csro:ContainerExploitPublicFacingApp_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make the initial access to a container more difficult" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_MON-2_Weight csro:ContainerExploitPublicFacingApp_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make the initial access to a container more difficult" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_MON-3_Weight csro:ContainerExploitPublicFacingApp_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make the initial access to a container more difficult" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_MON-4_Weight csro:ContainerExploitPublicFacingApp_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make the initial access to a container more difficult" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_MON-5_Weight csro:ContainerExploitPublicFacingApp_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make the initial access to a container more difficult" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_MON-6_Weight csro:ContainerExploitPublicFacingApp_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make the initial access to a container more difficult" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_MON-7_Weight csro:ContainerExploitPublicFacingApp_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make the initial access to a container more difficult" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_MON-8_Weight csro:ContainerExploitPublicFacingApp_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make the initial access to a container more difficult" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_NET-1_Weight csro:ContainerExploitPublicFacingApp_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit network access and make it harder for an attacker to navigate to the desired container process" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_NET-2_Weight csro:ContainerExploitPublicFacingApp_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit network access and make it harder for an attacker to navigate to the desired container process" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_NET-3_Weight csro:ContainerExploitPublicFacingApp_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit network access and make it harder for an attacker to navigate to the desired container process" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_NET-4_Weight csro:ContainerExploitPublicFacingApp_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit network access and make it harder for an attacker to navigate to the desired container process" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_RTS-1_Weight csro:ContainerExploitPublicFacingApp_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the likelihood of attackers gaining initial access to an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_RTS-2_Weight csro:ContainerExploitPublicFacingApp_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the likelihood of attackers gaining initial access to an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_RTS-3_Weight csro:ContainerExploitPublicFacingApp_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the likelihood of attackers gaining initial access to an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_RTS-4_Weight csro:ContainerExploitPublicFacingApp_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the likelihood of attackers gaining initial access to an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_RTS-5_Weight csro:ContainerExploitPublicFacingApp_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the likelihood of attackers gaining initial access to an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_RTS-6_Weight csro:ContainerExploitPublicFacingApp_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the likelihood of attackers gaining initial access to an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_RTS-7_Weight csro:ContainerExploitPublicFacingApp_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the likelihood of attackers gaining initial access to an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_SCM-1_Weight csro:ContainerExploitPublicFacingApp_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 1.0 ; csro:effectDescription "Secrets management controls prevent attackers from accessing credentials (e.g., passwords) to gain initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_SCM-2_Weight csro:ContainerExploitPublicFacingApp_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 1.0 ; csro:effectDescription "Secrets management controls prevent attackers from accessing credentials (e.g., passwords) to gain initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_SCM-3_Weight csro:ContainerExploitPublicFacingApp_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 1.0 ; csro:effectDescription "Secrets management controls prevent attackers from accessing credentials (e.g., passwords) to gain initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exploitability_SCM-4_Weight csro:ContainerExploitPublicFacingApp_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 1.0 ; csro:effectDescription "Secrets management controls prevent attackers from accessing credentials (e.g., passwords) to gain initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_AUTH-1_Weight csro:ContainerExploitPublicFacingApp_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls introduce additional security layers between attackers and containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_AUTH-2_Weight csro:ContainerExploitPublicFacingApp_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls introduce additional security layers between attackers and containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_AUTH-3_Weight csro:ContainerExploitPublicFacingApp_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls introduce additional security layers between attackers and containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_CIC-1_Weight csro:ContainerExploitPublicFacingApp_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not reduce the attack surface of an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_CIC-2_Weight csro:ContainerExploitPublicFacingApp_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not reduce the attack surface of an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_CIC-3_Weight csro:ContainerExploitPublicFacingApp_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not reduce the attack surface of an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_CIC-4_Weight csro:ContainerExploitPublicFacingApp_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not reduce the attack surface of an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_CIC-5_Weight csro:ContainerExploitPublicFacingApp_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not reduce the attack surface of an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_CIC-6_Weight csro:ContainerExploitPublicFacingApp_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities during development, but do not reduce the attack surface of an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_CRM-1_Weight csro:ContainerExploitPublicFacingApp_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate to which threats a container is exposed" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_CRM-2_Weight csro:ContainerExploitPublicFacingApp_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate to which threats a container is exposed" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_CRM-3_Weight csro:ContainerExploitPublicFacingApp_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate to which threats a container is exposed" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_CRM-4_Weight csro:ContainerExploitPublicFacingApp_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate to which threats a container is exposed" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_HIS-1_Weight csro:ContainerExploitPublicFacingApp_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface of exposed containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_HIS-2_Weight csro:ContainerExploitPublicFacingApp_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface of exposed containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_HIS-3_Weight csro:ContainerExploitPublicFacingApp_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface of exposed containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_IMG-1_Weight csro:ContainerExploitPublicFacingApp_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the attack surface of exposed containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_IMG-2_Weight csro:ContainerExploitPublicFacingApp_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the attack surface of exposed containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_IMG-3_Weight csro:ContainerExploitPublicFacingApp_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the attack surface of exposed containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_IMG-4_Weight csro:ContainerExploitPublicFacingApp_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the attack surface of exposed containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_IMG-5_Weight csro:ContainerExploitPublicFacingApp_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the attack surface of exposed containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_IMG-6_Weight csro:ContainerExploitPublicFacingApp_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the attack surface of exposed containers" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_MON-1_Weight csro:ContainerExploitPublicFacingApp_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification and response to attacks, but unwanted access needs to be identified correctly" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_MON-2_Weight csro:ContainerExploitPublicFacingApp_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification and response to attacks, but unwanted access needs to be identified correctly" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_MON-3_Weight csro:ContainerExploitPublicFacingApp_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification and response to attacks, but unwanted access needs to be identified correctly" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_MON-4_Weight csro:ContainerExploitPublicFacingApp_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification and response to attacks, but unwanted access needs to be identified correctly" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_MON-5_Weight csro:ContainerExploitPublicFacingApp_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification and response to attacks, but unwanted access needs to be identified correctly" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_MON-6_Weight csro:ContainerExploitPublicFacingApp_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification and response to attacks, but unwanted access needs to be identified correctly" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_MON-7_Weight csro:ContainerExploitPublicFacingApp_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification and response to attacks, but unwanted access needs to be identified correctly" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_MON-8_Weight csro:ContainerExploitPublicFacingApp_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification and response to attacks, but unwanted access needs to be identified correctly" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_NET-1_Weight csro:ContainerExploitPublicFacingApp_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_NET-2_Weight csro:ContainerExploitPublicFacingApp_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_NET-3_Weight csro:ContainerExploitPublicFacingApp_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_NET-4_Weight csro:ContainerExploitPublicFacingApp_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_RTS-1_Weight csro:ContainerExploitPublicFacingApp_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the attacksurface of a container for initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_RTS-2_Weight csro:ContainerExploitPublicFacingApp_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the attacksurface of a container for initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_RTS-3_Weight csro:ContainerExploitPublicFacingApp_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the attacksurface of a container for initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_RTS-4_Weight csro:ContainerExploitPublicFacingApp_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the attacksurface of a container for initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_RTS-5_Weight csro:ContainerExploitPublicFacingApp_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the attacksurface of a container for initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_RTS-6_Weight csro:ContainerExploitPublicFacingApp_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the attacksurface of a container for initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_RTS-7_Weight csro:ContainerExploitPublicFacingApp_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security measures for containers do not reduce the attacksurface of a container for initial access" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_SCM-1_Weight csro:ContainerExploitPublicFacingApp_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attack surface of an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_SCM-2_Weight csro:ContainerExploitPublicFacingApp_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attack surface of an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_SCM-3_Weight csro:ContainerExploitPublicFacingApp_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attack surface of an exposed container" . ### https://w3id.org/csro/ontology#ContainerExploitPublicFacingApp_Exposure_SCM-4_Weight csro:ContainerExploitPublicFacingApp_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attack surface of an exposed container" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable csro:ContainerFirewallDisable rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Low ; csro:referencesAttackTechnique d3f:T1562.004 ; csro:requiresTrait csro:cap_add_CAP_NET_ADMIN , csro:host_network ; csro:description "Disabling or modifying host firewall rules from containers with CAP_NET_ADMIN capability to remove network security controls" ; rdfs:label "Container Firewall Disable" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_AirGappedScenario csro:ContainerFirewallDisableAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerFirewallDisable attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_BalancedContainerSecurityScenario csro:ContainerFirewallDisableAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerFirewallDisable attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_BasicContainerSecurityScenario csro:ContainerFirewallDisableAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerFirewallDisable attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_BasicScenario csro:ContainerFirewallDisableAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:BasicScenario ; csro:description "ContainerFirewallDisable attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_CICDSecurityScenario csro:ContainerFirewallDisableAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerFirewallDisable attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_CISCompliantScenario csro:ContainerFirewallDisableAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerFirewallDisable attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_DevelopmentScenario csro:ContainerFirewallDisableAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerFirewallDisable attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_EdgeComputingScenario csro:ContainerFirewallDisableAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerFirewallDisable attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_HardenedScenario csro:ContainerFirewallDisableAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:HardenedScenario ; csro:description "ContainerFirewallDisable attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_HighRiskScenario csro:ContainerFirewallDisableAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerFirewallDisable attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_HybridCloudScenario csro:ContainerFirewallDisableAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerFirewallDisable attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_ImageSecurityFocusedScenario csro:ContainerFirewallDisableAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerFirewallDisable attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_MicroservicesScenario csro:ContainerFirewallDisableAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerFirewallDisable attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_MixedScenario csro:ContainerFirewallDisableAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:MixedScenario ; csro:description "ContainerFirewallDisable attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_NISTCompliantScenario csro:ContainerFirewallDisableAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerFirewallDisable attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_NetworkHardenedScenario csro:ContainerFirewallDisableAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerFirewallDisable attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_OWASPCheatSheetCompliantScenario csro:ContainerFirewallDisableAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerFirewallDisable attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_OWASPTop10CompliantScenario csro:ContainerFirewallDisableAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerFirewallDisable attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_OutdatedContainersScenario csro:ContainerFirewallDisableAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerFirewallDisable attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_ProductionScenario csro:ContainerFirewallDisableAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:ProductionScenario ; csro:description "ContainerFirewallDisable attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_RapidPrototypeScenario csro:ContainerFirewallDisableAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerFirewallDisable attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableAttack_RuntimeHardenedScenario csro:ContainerFirewallDisableAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerFirewallDisable ; csro:causesImpact csro:FirewallIntegrityViolation ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerFirewallDisable attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableExploitabilityRule csro:ContainerFirewallDisableExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerFirewallDisable ; csro:hasWeight csro:ContainerFirewallDisable_Exploitability_AUTH-1_Weight , csro:ContainerFirewallDisable_Exploitability_AUTH-2_Weight , csro:ContainerFirewallDisable_Exploitability_AUTH-3_Weight , csro:ContainerFirewallDisable_Exploitability_CIC-1_Weight , csro:ContainerFirewallDisable_Exploitability_CIC-2_Weight , csro:ContainerFirewallDisable_Exploitability_CIC-3_Weight , csro:ContainerFirewallDisable_Exploitability_CIC-4_Weight , csro:ContainerFirewallDisable_Exploitability_CIC-5_Weight , csro:ContainerFirewallDisable_Exploitability_CIC-6_Weight , csro:ContainerFirewallDisable_Exploitability_CRM-1_Weight , csro:ContainerFirewallDisable_Exploitability_CRM-2_Weight , csro:ContainerFirewallDisable_Exploitability_CRM-3_Weight , csro:ContainerFirewallDisable_Exploitability_CRM-4_Weight , csro:ContainerFirewallDisable_Exploitability_HIS-1_Weight , csro:ContainerFirewallDisable_Exploitability_HIS-2_Weight , csro:ContainerFirewallDisable_Exploitability_HIS-3_Weight , csro:ContainerFirewallDisable_Exploitability_IMG-1_Weight , csro:ContainerFirewallDisable_Exploitability_IMG-2_Weight , csro:ContainerFirewallDisable_Exploitability_IMG-3_Weight , csro:ContainerFirewallDisable_Exploitability_IMG-4_Weight , csro:ContainerFirewallDisable_Exploitability_IMG-5_Weight , csro:ContainerFirewallDisable_Exploitability_IMG-6_Weight , csro:ContainerFirewallDisable_Exploitability_MON-1_Weight , csro:ContainerFirewallDisable_Exploitability_MON-2_Weight , csro:ContainerFirewallDisable_Exploitability_MON-3_Weight , csro:ContainerFirewallDisable_Exploitability_MON-4_Weight , csro:ContainerFirewallDisable_Exploitability_MON-5_Weight , csro:ContainerFirewallDisable_Exploitability_MON-6_Weight , csro:ContainerFirewallDisable_Exploitability_MON-7_Weight , csro:ContainerFirewallDisable_Exploitability_MON-8_Weight , csro:ContainerFirewallDisable_Exploitability_NET-1_Weight , csro:ContainerFirewallDisable_Exploitability_NET-2_Weight , csro:ContainerFirewallDisable_Exploitability_NET-3_Weight , csro:ContainerFirewallDisable_Exploitability_NET-4_Weight , csro:ContainerFirewallDisable_Exploitability_RTS-1_Weight , csro:ContainerFirewallDisable_Exploitability_RTS-2_Weight , csro:ContainerFirewallDisable_Exploitability_RTS-3_Weight , csro:ContainerFirewallDisable_Exploitability_RTS-4_Weight , csro:ContainerFirewallDisable_Exploitability_RTS-5_Weight , csro:ContainerFirewallDisable_Exploitability_RTS-6_Weight , csro:ContainerFirewallDisable_Exploitability_RTS-7_Weight , csro:ContainerFirewallDisable_Exploitability_SCM-1_Weight , csro:ContainerFirewallDisable_Exploitability_SCM-2_Weight , csro:ContainerFirewallDisable_Exploitability_SCM-3_Weight , csro:ContainerFirewallDisable_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerFirewallDisable attack technique" . ### https://w3id.org/csro/ontology#ContainerFirewallDisableExposureRule csro:ContainerFirewallDisableExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerFirewallDisable ; csro:hasWeight csro:ContainerFirewallDisable_Exposure_AUTH-1_Weight , csro:ContainerFirewallDisable_Exposure_AUTH-2_Weight , csro:ContainerFirewallDisable_Exposure_AUTH-3_Weight , csro:ContainerFirewallDisable_Exposure_CIC-1_Weight , csro:ContainerFirewallDisable_Exposure_CIC-2_Weight , csro:ContainerFirewallDisable_Exposure_CIC-3_Weight , csro:ContainerFirewallDisable_Exposure_CIC-4_Weight , csro:ContainerFirewallDisable_Exposure_CIC-5_Weight , csro:ContainerFirewallDisable_Exposure_CIC-6_Weight , csro:ContainerFirewallDisable_Exposure_CRM-1_Weight , csro:ContainerFirewallDisable_Exposure_CRM-2_Weight , csro:ContainerFirewallDisable_Exposure_CRM-3_Weight , csro:ContainerFirewallDisable_Exposure_CRM-4_Weight , csro:ContainerFirewallDisable_Exposure_HIS-1_Weight , csro:ContainerFirewallDisable_Exposure_HIS-2_Weight , csro:ContainerFirewallDisable_Exposure_HIS-3_Weight , csro:ContainerFirewallDisable_Exposure_IMG-1_Weight , csro:ContainerFirewallDisable_Exposure_IMG-2_Weight , csro:ContainerFirewallDisable_Exposure_IMG-3_Weight , csro:ContainerFirewallDisable_Exposure_IMG-4_Weight , csro:ContainerFirewallDisable_Exposure_IMG-5_Weight , csro:ContainerFirewallDisable_Exposure_IMG-6_Weight , csro:ContainerFirewallDisable_Exposure_MON-1_Weight , csro:ContainerFirewallDisable_Exposure_MON-2_Weight , csro:ContainerFirewallDisable_Exposure_MON-3_Weight , csro:ContainerFirewallDisable_Exposure_MON-4_Weight , csro:ContainerFirewallDisable_Exposure_MON-5_Weight , csro:ContainerFirewallDisable_Exposure_MON-6_Weight , csro:ContainerFirewallDisable_Exposure_MON-7_Weight , csro:ContainerFirewallDisable_Exposure_MON-8_Weight , csro:ContainerFirewallDisable_Exposure_NET-1_Weight , csro:ContainerFirewallDisable_Exposure_NET-2_Weight , csro:ContainerFirewallDisable_Exposure_NET-3_Weight , csro:ContainerFirewallDisable_Exposure_NET-4_Weight , csro:ContainerFirewallDisable_Exposure_RTS-1_Weight , csro:ContainerFirewallDisable_Exposure_RTS-2_Weight , csro:ContainerFirewallDisable_Exposure_RTS-3_Weight , csro:ContainerFirewallDisable_Exposure_RTS-4_Weight , csro:ContainerFirewallDisable_Exposure_RTS-5_Weight , csro:ContainerFirewallDisable_Exposure_RTS-6_Weight , csro:ContainerFirewallDisable_Exposure_RTS-7_Weight , csro:ContainerFirewallDisable_Exposure_SCM-1_Weight , csro:ContainerFirewallDisable_Exposure_SCM-2_Weight , csro:ContainerFirewallDisable_Exposure_SCM-3_Weight , csro:ContainerFirewallDisable_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerFirewallDisable attack technique" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_AUTH-1_Weight csro:ContainerFirewallDisable_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make network configuration modification more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_AUTH-2_Weight csro:ContainerFirewallDisable_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make network configuration modification more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_AUTH-3_Weight csro:ContainerFirewallDisable_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make network configuration modification more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_CIC-1_Weight csro:ContainerFirewallDisable_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_CIC-2_Weight csro:ContainerFirewallDisable_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_CIC-3_Weight csro:ContainerFirewallDisable_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_CIC-4_Weight csro:ContainerFirewallDisable_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_CIC-5_Weight csro:ContainerFirewallDisable_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_CIC-6_Weight csro:ContainerFirewallDisable_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_CRM-1_Weight csro:ContainerFirewallDisable_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management helps to assess how a container with networking privileges can damage the production environment" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_CRM-2_Weight csro:ContainerFirewallDisable_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management helps to assess how a container with networking privileges can damage the production environment" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_CRM-3_Weight csro:ContainerFirewallDisable_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management helps to assess how a container with networking privileges can damage the production environment" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_CRM-4_Weight csro:ContainerFirewallDisable_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management helps to assess how a container with networking privileges can damage the production environment" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_HIS-1_Weight csro:ContainerFirewallDisable_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_HIS-2_Weight csro:ContainerFirewallDisable_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_HIS-3_Weight csro:ContainerFirewallDisable_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_IMG-1_Weight csro:ContainerFirewallDisable_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_IMG-2_Weight csro:ContainerFirewallDisable_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_IMG-3_Weight csro:ContainerFirewallDisable_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_IMG-4_Weight csro:ContainerFirewallDisable_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_IMG-5_Weight csro:ContainerFirewallDisable_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_IMG-6_Weight csro:ContainerFirewallDisable_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_MON-1_Weight csro:ContainerFirewallDisable_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_MON-2_Weight csro:ContainerFirewallDisable_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_MON-3_Weight csro:ContainerFirewallDisable_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_MON-4_Weight csro:ContainerFirewallDisable_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_MON-5_Weight csro:ContainerFirewallDisable_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_MON-6_Weight csro:ContainerFirewallDisable_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_MON-7_Weight csro:ContainerFirewallDisable_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_MON-8_Weight csro:ContainerFirewallDisable_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_NET-1_Weight csro:ContainerFirewallDisable_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_NET-2_Weight csro:ContainerFirewallDisable_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_NET-3_Weight csro:ContainerFirewallDisable_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_NET-4_Weight csro:ContainerFirewallDisable_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_RTS-1_Weight csro:ContainerFirewallDisable_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 3.0 ; csro:effectDescription "Using a non-root user for the container makes it more difficult gain access to and modify host network configuration" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_RTS-2_Weight csro:ContainerFirewallDisable_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_RTS-3_Weight csro:ContainerFirewallDisable_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_RTS-4_Weight csro:ContainerFirewallDisable_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_RTS-5_Weight csro:ContainerFirewallDisable_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_RTS-6_Weight csro:ContainerFirewallDisable_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_RTS-7_Weight csro:ContainerFirewallDisable_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_SCM-1_Weight csro:ContainerFirewallDisable_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not increase the efforts and difficulty for network configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_SCM-2_Weight csro:ContainerFirewallDisable_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not increase the efforts and difficulty for network configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_SCM-3_Weight csro:ContainerFirewallDisable_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not increase the efforts and difficulty for network configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exploitability_SCM-4_Weight csro:ContainerFirewallDisable_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not increase the efforts and difficulty for network configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_AUTH-1_Weight csro:ContainerFirewallDisable_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the container with the network privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_AUTH-2_Weight csro:ContainerFirewallDisable_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the container with the network privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_AUTH-3_Weight csro:ContainerFirewallDisable_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the container with the network privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_CIC-1_Weight csro:ContainerFirewallDisable_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_CIC-2_Weight csro:ContainerFirewallDisable_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_CIC-3_Weight csro:ContainerFirewallDisable_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_CIC-4_Weight csro:ContainerFirewallDisable_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_CIC-5_Weight csro:ContainerFirewallDisable_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_CIC-6_Weight csro:ContainerFirewallDisable_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_CRM-1_Weight csro:ContainerFirewallDisable_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess measures to restric access to a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_CRM-2_Weight csro:ContainerFirewallDisable_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess measures to restric access to a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_CRM-3_Weight csro:ContainerFirewallDisable_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess measures to restric access to a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_CRM-4_Weight csro:ContainerFirewallDisable_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess measures to restric access to a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_HIS-1_Weight csro:ContainerFirewallDisable_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "The status of the container runtime does not reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_HIS-2_Weight csro:ContainerFirewallDisable_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 2.0 ; csro:effectDescription "Configuring the host network configuration as immutable and monitoring changes increases the likelihood of detecting malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_HIS-3_Weight csro:ContainerFirewallDisable_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Configuring the host network configuration as immutable and monitoring changes increases the likelihood of detecting malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_IMG-1_Weight csro:ContainerFirewallDisable_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_IMG-2_Weight csro:ContainerFirewallDisable_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_IMG-3_Weight csro:ContainerFirewallDisable_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_IMG-4_Weight csro:ContainerFirewallDisable_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_IMG-5_Weight csro:ContainerFirewallDisable_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_IMG-6_Weight csro:ContainerFirewallDisable_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_MON-1_Weight csro:ContainerFirewallDisable_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_MON-2_Weight csro:ContainerFirewallDisable_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_MON-3_Weight csro:ContainerFirewallDisable_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_MON-4_Weight csro:ContainerFirewallDisable_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_MON-5_Weight csro:ContainerFirewallDisable_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_MON-6_Weight csro:ContainerFirewallDisable_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_MON-7_Weight csro:ContainerFirewallDisable_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_MON-8_Weight csro:ContainerFirewallDisable_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_NET-1_Weight csro:ContainerFirewallDisable_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls greatly improve the isolation of the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_NET-2_Weight csro:ContainerFirewallDisable_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls greatly improve the isolation of the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_NET-3_Weight csro:ContainerFirewallDisable_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls greatly improve the isolation of the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_NET-4_Weight csro:ContainerFirewallDisable_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls greatly improve the isolation of the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_RTS-1_Weight csro:ContainerFirewallDisable_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_RTS-2_Weight csro:ContainerFirewallDisable_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_RTS-3_Weight csro:ContainerFirewallDisable_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_RTS-4_Weight csro:ContainerFirewallDisable_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_RTS-5_Weight csro:ContainerFirewallDisable_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_RTS-6_Weight csro:ContainerFirewallDisable_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_RTS-7_Weight csro:ContainerFirewallDisable_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_SCM-1_Weight csro:ContainerFirewallDisable_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not reduce the attack surface posed by a privileged network container and does not support detection of configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_SCM-2_Weight csro:ContainerFirewallDisable_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not reduce the attack surface posed by a privileged network container and does not support detection of configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_SCM-3_Weight csro:ContainerFirewallDisable_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not reduce the attack surface posed by a privileged network container and does not support detection of configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerFirewallDisable_Exposure_SCM-4_Weight csro:ContainerFirewallDisable_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not reduce the attack surface posed by a privileged network container and does not support detection of configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerImageSecurity csro:ContainerImageSecurity rdf:type owl:NamedIndividual , csro:AssumptionCategory ; csro:description "Security assumptions related to container image security and integrity." ; rdfs:label "Container Image Security" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading csro:ContainerKernelModuleLoading rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:High ; csro:referencesAttackTechnique d3f:T1547.006 ; csro:requiresTrait csro:cap_add_CAP_SYS_MODULE ; csro:description "Loading malicious kernel modules from containers with CAP_SYS_MODULE capability to achieve persistence and host-level compromise" ; rdfs:label "Container Kernel Module Loading" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_AirGappedScenario csro:ContainerKernelModuleLoadingAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerKernelModuleLoading attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_BalancedContainerSecurityScenario csro:ContainerKernelModuleLoadingAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerKernelModuleLoading attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_BasicContainerSecurityScenario csro:ContainerKernelModuleLoadingAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerKernelModuleLoading attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_BasicScenario csro:ContainerKernelModuleLoadingAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:BasicScenario ; csro:description "ContainerKernelModuleLoading attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_CICDSecurityScenario csro:ContainerKernelModuleLoadingAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerKernelModuleLoading attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_CISCompliantScenario csro:ContainerKernelModuleLoadingAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerKernelModuleLoading attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_DevelopmentScenario csro:ContainerKernelModuleLoadingAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerKernelModuleLoading attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_EdgeComputingScenario csro:ContainerKernelModuleLoadingAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerKernelModuleLoading attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_HardenedScenario csro:ContainerKernelModuleLoadingAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:HardenedScenario ; csro:description "ContainerKernelModuleLoading attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_HighRiskScenario csro:ContainerKernelModuleLoadingAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerKernelModuleLoading attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_HybridCloudScenario csro:ContainerKernelModuleLoadingAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerKernelModuleLoading attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_ImageSecurityFocusedScenario csro:ContainerKernelModuleLoadingAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerKernelModuleLoading attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_MicroservicesScenario csro:ContainerKernelModuleLoadingAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerKernelModuleLoading attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_MixedScenario csro:ContainerKernelModuleLoadingAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:MixedScenario ; csro:description "ContainerKernelModuleLoading attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_NISTCompliantScenario csro:ContainerKernelModuleLoadingAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerKernelModuleLoading attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_NetworkHardenedScenario csro:ContainerKernelModuleLoadingAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerKernelModuleLoading attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_OWASPCheatSheetCompliantScenario csro:ContainerKernelModuleLoadingAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerKernelModuleLoading attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_OWASPTop10CompliantScenario csro:ContainerKernelModuleLoadingAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerKernelModuleLoading attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_OutdatedContainersScenario csro:ContainerKernelModuleLoadingAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerKernelModuleLoading attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_ProductionScenario csro:ContainerKernelModuleLoadingAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:ProductionScenario ; csro:description "ContainerKernelModuleLoading attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_RapidPrototypeScenario csro:ContainerKernelModuleLoadingAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerKernelModuleLoading attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingAttack_RuntimeHardenedScenario csro:ContainerKernelModuleLoadingAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem ; csro:appliesTechnique csro:ContainerKernelModuleLoading ; csro:causesImpact csro:KernelIntegrityCompromise , csro:RootkitPersistence ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerKernelModuleLoading attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingExploitabilityRule csro:ContainerKernelModuleLoadingExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerKernelModuleLoading ; csro:hasWeight csro:ContainerKernelModuleLoading_Exploitability_AUTH-1_Weight , csro:ContainerKernelModuleLoading_Exploitability_AUTH-2_Weight , csro:ContainerKernelModuleLoading_Exploitability_AUTH-3_Weight , csro:ContainerKernelModuleLoading_Exploitability_CIC-1_Weight , csro:ContainerKernelModuleLoading_Exploitability_CIC-2_Weight , csro:ContainerKernelModuleLoading_Exploitability_CIC-3_Weight , csro:ContainerKernelModuleLoading_Exploitability_CIC-4_Weight , csro:ContainerKernelModuleLoading_Exploitability_CIC-5_Weight , csro:ContainerKernelModuleLoading_Exploitability_CIC-6_Weight , csro:ContainerKernelModuleLoading_Exploitability_CRM-1_Weight , csro:ContainerKernelModuleLoading_Exploitability_CRM-2_Weight , csro:ContainerKernelModuleLoading_Exploitability_CRM-3_Weight , csro:ContainerKernelModuleLoading_Exploitability_CRM-4_Weight , csro:ContainerKernelModuleLoading_Exploitability_HIS-1_Weight , csro:ContainerKernelModuleLoading_Exploitability_HIS-2_Weight , csro:ContainerKernelModuleLoading_Exploitability_HIS-3_Weight , csro:ContainerKernelModuleLoading_Exploitability_IMG-1_Weight , csro:ContainerKernelModuleLoading_Exploitability_IMG-2_Weight , csro:ContainerKernelModuleLoading_Exploitability_IMG-3_Weight , csro:ContainerKernelModuleLoading_Exploitability_IMG-4_Weight , csro:ContainerKernelModuleLoading_Exploitability_IMG-5_Weight , csro:ContainerKernelModuleLoading_Exploitability_IMG-6_Weight , csro:ContainerKernelModuleLoading_Exploitability_MON-1_Weight , csro:ContainerKernelModuleLoading_Exploitability_MON-2_Weight , csro:ContainerKernelModuleLoading_Exploitability_MON-3_Weight , csro:ContainerKernelModuleLoading_Exploitability_MON-4_Weight , csro:ContainerKernelModuleLoading_Exploitability_MON-5_Weight , csro:ContainerKernelModuleLoading_Exploitability_MON-6_Weight , csro:ContainerKernelModuleLoading_Exploitability_MON-7_Weight , csro:ContainerKernelModuleLoading_Exploitability_MON-8_Weight , csro:ContainerKernelModuleLoading_Exploitability_NET-1_Weight , csro:ContainerKernelModuleLoading_Exploitability_NET-2_Weight , csro:ContainerKernelModuleLoading_Exploitability_NET-3_Weight , csro:ContainerKernelModuleLoading_Exploitability_NET-4_Weight , csro:ContainerKernelModuleLoading_Exploitability_RTS-1_Weight , csro:ContainerKernelModuleLoading_Exploitability_RTS-2_Weight , csro:ContainerKernelModuleLoading_Exploitability_RTS-3_Weight , csro:ContainerKernelModuleLoading_Exploitability_RTS-4_Weight , csro:ContainerKernelModuleLoading_Exploitability_RTS-5_Weight , csro:ContainerKernelModuleLoading_Exploitability_RTS-6_Weight , csro:ContainerKernelModuleLoading_Exploitability_RTS-7_Weight , csro:ContainerKernelModuleLoading_Exploitability_SCM-1_Weight , csro:ContainerKernelModuleLoading_Exploitability_SCM-2_Weight , csro:ContainerKernelModuleLoading_Exploitability_SCM-3_Weight , csro:ContainerKernelModuleLoading_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerKernelModuleLoading attack technique" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoadingExposureRule csro:ContainerKernelModuleLoadingExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerKernelModuleLoading ; csro:hasWeight csro:ContainerKernelModuleLoading_Exposure_AUTH-1_Weight , csro:ContainerKernelModuleLoading_Exposure_AUTH-2_Weight , csro:ContainerKernelModuleLoading_Exposure_AUTH-3_Weight , csro:ContainerKernelModuleLoading_Exposure_CIC-1_Weight , csro:ContainerKernelModuleLoading_Exposure_CIC-2_Weight , csro:ContainerKernelModuleLoading_Exposure_CIC-3_Weight , csro:ContainerKernelModuleLoading_Exposure_CIC-4_Weight , csro:ContainerKernelModuleLoading_Exposure_CIC-5_Weight , csro:ContainerKernelModuleLoading_Exposure_CIC-6_Weight , csro:ContainerKernelModuleLoading_Exposure_CRM-1_Weight , csro:ContainerKernelModuleLoading_Exposure_CRM-2_Weight , csro:ContainerKernelModuleLoading_Exposure_CRM-3_Weight , csro:ContainerKernelModuleLoading_Exposure_CRM-4_Weight , csro:ContainerKernelModuleLoading_Exposure_HIS-1_Weight , csro:ContainerKernelModuleLoading_Exposure_HIS-2_Weight , csro:ContainerKernelModuleLoading_Exposure_HIS-3_Weight , csro:ContainerKernelModuleLoading_Exposure_IMG-1_Weight , csro:ContainerKernelModuleLoading_Exposure_IMG-2_Weight , csro:ContainerKernelModuleLoading_Exposure_IMG-3_Weight , csro:ContainerKernelModuleLoading_Exposure_IMG-4_Weight , csro:ContainerKernelModuleLoading_Exposure_IMG-5_Weight , csro:ContainerKernelModuleLoading_Exposure_IMG-6_Weight , csro:ContainerKernelModuleLoading_Exposure_MON-1_Weight , csro:ContainerKernelModuleLoading_Exposure_MON-2_Weight , csro:ContainerKernelModuleLoading_Exposure_MON-3_Weight , csro:ContainerKernelModuleLoading_Exposure_MON-4_Weight , csro:ContainerKernelModuleLoading_Exposure_MON-5_Weight , csro:ContainerKernelModuleLoading_Exposure_MON-6_Weight , csro:ContainerKernelModuleLoading_Exposure_MON-7_Weight , csro:ContainerKernelModuleLoading_Exposure_MON-8_Weight , csro:ContainerKernelModuleLoading_Exposure_NET-1_Weight , csro:ContainerKernelModuleLoading_Exposure_NET-2_Weight , csro:ContainerKernelModuleLoading_Exposure_NET-3_Weight , csro:ContainerKernelModuleLoading_Exposure_NET-4_Weight , csro:ContainerKernelModuleLoading_Exposure_RTS-1_Weight , csro:ContainerKernelModuleLoading_Exposure_RTS-2_Weight , csro:ContainerKernelModuleLoading_Exposure_RTS-3_Weight , csro:ContainerKernelModuleLoading_Exposure_RTS-4_Weight , csro:ContainerKernelModuleLoading_Exposure_RTS-5_Weight , csro:ContainerKernelModuleLoading_Exposure_RTS-6_Weight , csro:ContainerKernelModuleLoading_Exposure_RTS-7_Weight , csro:ContainerKernelModuleLoading_Exposure_SCM-1_Weight , csro:ContainerKernelModuleLoading_Exposure_SCM-2_Weight , csro:ContainerKernelModuleLoading_Exposure_SCM-3_Weight , csro:ContainerKernelModuleLoading_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerKernelModuleLoading attack technique" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_AUTH-1_Weight csro:ContainerKernelModuleLoading_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_AUTH-2_Weight csro:ContainerKernelModuleLoading_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_AUTH-3_Weight csro:ContainerKernelModuleLoading_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_CIC-1_Weight csro:ContainerKernelModuleLoading_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness and robustness of the container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_CIC-2_Weight csro:ContainerKernelModuleLoading_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness and robustness of the container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_CIC-3_Weight csro:ContainerKernelModuleLoading_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness and robustness of the container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_CIC-4_Weight csro:ContainerKernelModuleLoading_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness and robustness of the container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_CIC-5_Weight csro:ContainerKernelModuleLoading_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness and robustness of the container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_CIC-6_Weight csro:ContainerKernelModuleLoading_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness and robustness of the container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_CRM-1_Weight csro:ContainerKernelModuleLoading_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate the difficulty of causing damage by loading a kernel module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_CRM-2_Weight csro:ContainerKernelModuleLoading_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate the difficulty of causing damage by loading a kernel module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_CRM-3_Weight csro:ContainerKernelModuleLoading_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate the difficulty of causing damage by loading a kernel module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_CRM-4_Weight csro:ContainerKernelModuleLoading_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate the difficulty of causing damage by loading a kernel module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_HIS-1_Weight csro:ContainerKernelModuleLoading_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_HIS-2_Weight csro:ContainerKernelModuleLoading_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_HIS-3_Weight csro:ContainerKernelModuleLoading_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_IMG-1_Weight csro:ContainerKernelModuleLoading_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make it more difficult for attackers to load malicious modules" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_IMG-2_Weight csro:ContainerKernelModuleLoading_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make it more difficult for attackers to load malicious modules" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_IMG-3_Weight csro:ContainerKernelModuleLoading_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make it more difficult for attackers to load malicious modules" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_IMG-4_Weight csro:ContainerKernelModuleLoading_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make it more difficult for attackers to load malicious modules" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_IMG-5_Weight csro:ContainerKernelModuleLoading_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make it more difficult for attackers to load malicious modules" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_IMG-6_Weight csro:ContainerKernelModuleLoading_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make it more difficult for attackers to load malicious modules" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_MON-1_Weight csro:ContainerKernelModuleLoading_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_MON-2_Weight csro:ContainerKernelModuleLoading_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_MON-3_Weight csro:ContainerKernelModuleLoading_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_MON-4_Weight csro:ContainerKernelModuleLoading_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_MON-5_Weight csro:ContainerKernelModuleLoading_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_MON-6_Weight csro:ContainerKernelModuleLoading_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_MON-7_Weight csro:ContainerKernelModuleLoading_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_MON-8_Weight csro:ContainerKernelModuleLoading_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_NET-1_Weight csro:ContainerKernelModuleLoading_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_NET-2_Weight csro:ContainerKernelModuleLoading_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_NET-3_Weight csro:ContainerKernelModuleLoading_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_NET-4_Weight csro:ContainerKernelModuleLoading_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_RTS-1_Weight csro:ContainerKernelModuleLoading_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 2.0 ; csro:effectDescription "Makes loading a malicious module more complicated, since file capabilities have to be specifically assigned" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_RTS-2_Weight csro:ContainerKernelModuleLoading_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make loading malicious kernel modules more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_RTS-3_Weight csro:ContainerKernelModuleLoading_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make loading malicious kernel modules more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_RTS-4_Weight csro:ContainerKernelModuleLoading_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 3.0 ; csro:effectDescription "A tailored Seccomp profile can restrict the actions of the privileged container and mitigate the attack vector of loading a malicious module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_RTS-5_Weight csro:ContainerKernelModuleLoading_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make loading malicious kernel modules more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_RTS-6_Weight csro:ContainerKernelModuleLoading_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make loading malicious kernel modules more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_RTS-7_Weight csro:ContainerKernelModuleLoading_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make loading malicious kernel modules more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_SCM-1_Weight csro:ContainerKernelModuleLoading_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_SCM-2_Weight csro:ContainerKernelModuleLoading_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_SCM-3_Weight csro:ContainerKernelModuleLoading_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exploitability_SCM-4_Weight csro:ContainerKernelModuleLoading_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not make loading a malicious kernel module more difficult" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_AUTH-1_Weight csro:ContainerKernelModuleLoading_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to container infrastructure" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_AUTH-2_Weight csro:ContainerKernelModuleLoading_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to container infrastructure" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_AUTH-3_Weight csro:ContainerKernelModuleLoading_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to container infrastructure" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_CIC-1_Weight csro:ContainerKernelModuleLoading_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities and support identifying containers that aim to load a malicious module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_CIC-2_Weight csro:ContainerKernelModuleLoading_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities and support identifying containers that aim to load a malicious module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_CIC-3_Weight csro:ContainerKernelModuleLoading_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities and support identifying containers that aim to load a malicious module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_CIC-4_Weight csro:ContainerKernelModuleLoading_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities and support identifying containers that aim to load a malicious module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_CIC-5_Weight csro:ContainerKernelModuleLoading_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities and support identifying containers that aim to load a malicious module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_CIC-6_Weight csro:ContainerKernelModuleLoading_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities and support identifying containers that aim to load a malicious module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_CRM-1_Weight csro:ContainerKernelModuleLoading_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management do not reduce the attack surface introduced by a container that can load kernel modules" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_CRM-2_Weight csro:ContainerKernelModuleLoading_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management do not reduce the attack surface introduced by a container that can load kernel modules" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_CRM-3_Weight csro:ContainerKernelModuleLoading_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management do not reduce the attack surface introduced by a container that can load kernel modules" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_CRM-4_Weight csro:ContainerKernelModuleLoading_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management do not reduce the attack surface introduced by a container that can load kernel modules" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_HIS-1_Weight csro:ContainerKernelModuleLoading_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface required for loading a malicious kernel module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_HIS-2_Weight csro:ContainerKernelModuleLoading_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface required for loading a malicious kernel module" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_HIS-3_Weight csro:ContainerKernelModuleLoading_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring of the host kernel increases the chance of discovering malicious activities regarding kernel module loading" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_IMG-1_Weight csro:ContainerKernelModuleLoading_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_IMG-2_Weight csro:ContainerKernelModuleLoading_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_IMG-3_Weight csro:ContainerKernelModuleLoading_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_IMG-4_Weight csro:ContainerKernelModuleLoading_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_IMG-5_Weight csro:ContainerKernelModuleLoading_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_IMG-6_Weight csro:ContainerKernelModuleLoading_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_MON-1_Weight csro:ContainerKernelModuleLoading_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of malicious kernel module loading" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_MON-2_Weight csro:ContainerKernelModuleLoading_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of malicious kernel module loading" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_MON-3_Weight csro:ContainerKernelModuleLoading_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of malicious kernel module loading" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_MON-4_Weight csro:ContainerKernelModuleLoading_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of malicious kernel module loading" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_MON-5_Weight csro:ContainerKernelModuleLoading_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of malicious kernel module loading" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_MON-6_Weight csro:ContainerKernelModuleLoading_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of malicious kernel module loading" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_MON-7_Weight csro:ContainerKernelModuleLoading_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of malicious kernel module loading" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_MON-8_Weight csro:ContainerKernelModuleLoading_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring and detection controls enable early identification of malicious kernel module loading" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_NET-1_Weight csro:ContainerKernelModuleLoading_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_NET-2_Weight csro:ContainerKernelModuleLoading_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_NET-3_Weight csro:ContainerKernelModuleLoading_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_NET-4_Weight csro:ContainerKernelModuleLoading_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_RTS-1_Weight csro:ContainerKernelModuleLoading_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not restrict the access of the attacker inside the privileged container, nor do they support detection of malicious activity" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_RTS-2_Weight csro:ContainerKernelModuleLoading_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not restrict the access of the attacker inside the privileged container, nor do they support detection of malicious activity" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_RTS-3_Weight csro:ContainerKernelModuleLoading_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not restrict the access of the attacker inside the privileged container, nor do they support detection of malicious activity" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_RTS-4_Weight csro:ContainerKernelModuleLoading_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not restrict the access of the attacker inside the privileged container, nor do they support detection of malicious activity" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_RTS-5_Weight csro:ContainerKernelModuleLoading_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not restrict the access of the attacker inside the privileged container, nor do they support detection of malicious activity" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_RTS-6_Weight csro:ContainerKernelModuleLoading_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not restrict the access of the attacker inside the privileged container, nor do they support detection of malicious activity" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_RTS-7_Weight csro:ContainerKernelModuleLoading_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not restrict the access of the attacker inside the privileged container, nor do they support detection of malicious activity" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_SCM-1_Weight csro:ContainerKernelModuleLoading_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attack surface of malicious module loading or support detection" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_SCM-2_Weight csro:ContainerKernelModuleLoading_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attack surface of malicious module loading or support detection" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_SCM-3_Weight csro:ContainerKernelModuleLoading_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attack surface of malicious module loading or support detection" . ### https://w3id.org/csro/ontology#ContainerKernelModuleLoading_Exposure_SCM-4_Weight csro:ContainerKernelModuleLoading_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attack surface of malicious module loading or support detection" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM csro:ContainerLayer2MitM rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Medium ; csro:referencesAttackTechnique d3f:T1557 ; csro:requiresTrait csro:layer2_network ; csro:description "Performing ARP spoofing or similar Layer 2 attacks to intercept network traffic between containers or with external systems" ; rdfs:label "Container Layer 2 Man-in-the-Middle" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_AirGappedScenario csro:ContainerLayer2MitMAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerLayer2MitM attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_BalancedContainerSecurityScenario csro:ContainerLayer2MitMAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerLayer2MitM attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_BasicContainerSecurityScenario csro:ContainerLayer2MitMAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerLayer2MitM attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_BasicScenario csro:ContainerLayer2MitMAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:BasicScenario ; csro:description "ContainerLayer2MitM attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_CICDSecurityScenario csro:ContainerLayer2MitMAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerLayer2MitM attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_CISCompliantScenario csro:ContainerLayer2MitMAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerLayer2MitM attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_DevelopmentScenario csro:ContainerLayer2MitMAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerLayer2MitM attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_EdgeComputingScenario csro:ContainerLayer2MitMAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerLayer2MitM attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_HardenedScenario csro:ContainerLayer2MitMAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:HardenedScenario ; csro:description "ContainerLayer2MitM attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_HighRiskScenario csro:ContainerLayer2MitMAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerLayer2MitM attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_HybridCloudScenario csro:ContainerLayer2MitMAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerLayer2MitM attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_ImageSecurityFocusedScenario csro:ContainerLayer2MitMAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerLayer2MitM attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_MicroservicesScenario csro:ContainerLayer2MitMAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerLayer2MitM attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_MixedScenario csro:ContainerLayer2MitMAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:MixedScenario ; csro:description "ContainerLayer2MitM attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_NISTCompliantScenario csro:ContainerLayer2MitMAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerLayer2MitM attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_NetworkHardenedScenario csro:ContainerLayer2MitMAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerLayer2MitM attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_OWASPCheatSheetCompliantScenario csro:ContainerLayer2MitMAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerLayer2MitM attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_OWASPTop10CompliantScenario csro:ContainerLayer2MitMAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerLayer2MitM attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_OutdatedContainersScenario csro:ContainerLayer2MitMAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerLayer2MitM attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_ProductionScenario csro:ContainerLayer2MitMAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:ProductionScenario ; csro:description "ContainerLayer2MitM attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_RapidPrototypeScenario csro:ContainerLayer2MitMAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerLayer2MitM attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMAttack_RuntimeHardenedScenario csro:ContainerLayer2MitMAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerLayer2MitM ; csro:causesImpact csro:Layer2TrafficInterception ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerLayer2MitM attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMExploitabilityRule csro:ContainerLayer2MitMExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerLayer2MitM ; csro:hasWeight csro:ContainerLayer2MitM_Exploitability_AUTH-1_Weight , csro:ContainerLayer2MitM_Exploitability_AUTH-2_Weight , csro:ContainerLayer2MitM_Exploitability_AUTH-3_Weight , csro:ContainerLayer2MitM_Exploitability_CIC-1_Weight , csro:ContainerLayer2MitM_Exploitability_CIC-2_Weight , csro:ContainerLayer2MitM_Exploitability_CIC-3_Weight , csro:ContainerLayer2MitM_Exploitability_CIC-4_Weight , csro:ContainerLayer2MitM_Exploitability_CIC-5_Weight , csro:ContainerLayer2MitM_Exploitability_CIC-6_Weight , csro:ContainerLayer2MitM_Exploitability_CRM-1_Weight , csro:ContainerLayer2MitM_Exploitability_CRM-2_Weight , csro:ContainerLayer2MitM_Exploitability_CRM-3_Weight , csro:ContainerLayer2MitM_Exploitability_CRM-4_Weight , csro:ContainerLayer2MitM_Exploitability_HIS-1_Weight , csro:ContainerLayer2MitM_Exploitability_HIS-2_Weight , csro:ContainerLayer2MitM_Exploitability_HIS-3_Weight , csro:ContainerLayer2MitM_Exploitability_IMG-1_Weight , csro:ContainerLayer2MitM_Exploitability_IMG-2_Weight , csro:ContainerLayer2MitM_Exploitability_IMG-3_Weight , csro:ContainerLayer2MitM_Exploitability_IMG-4_Weight , csro:ContainerLayer2MitM_Exploitability_IMG-5_Weight , csro:ContainerLayer2MitM_Exploitability_IMG-6_Weight , csro:ContainerLayer2MitM_Exploitability_MON-1_Weight , csro:ContainerLayer2MitM_Exploitability_MON-2_Weight , csro:ContainerLayer2MitM_Exploitability_MON-3_Weight , csro:ContainerLayer2MitM_Exploitability_MON-4_Weight , csro:ContainerLayer2MitM_Exploitability_MON-5_Weight , csro:ContainerLayer2MitM_Exploitability_MON-6_Weight , csro:ContainerLayer2MitM_Exploitability_MON-7_Weight , csro:ContainerLayer2MitM_Exploitability_MON-8_Weight , csro:ContainerLayer2MitM_Exploitability_NET-1_Weight , csro:ContainerLayer2MitM_Exploitability_NET-2_Weight , csro:ContainerLayer2MitM_Exploitability_NET-3_Weight , csro:ContainerLayer2MitM_Exploitability_NET-4_Weight , csro:ContainerLayer2MitM_Exploitability_RTS-1_Weight , csro:ContainerLayer2MitM_Exploitability_RTS-2_Weight , csro:ContainerLayer2MitM_Exploitability_RTS-3_Weight , csro:ContainerLayer2MitM_Exploitability_RTS-4_Weight , csro:ContainerLayer2MitM_Exploitability_RTS-5_Weight , csro:ContainerLayer2MitM_Exploitability_RTS-6_Weight , csro:ContainerLayer2MitM_Exploitability_RTS-7_Weight , csro:ContainerLayer2MitM_Exploitability_SCM-1_Weight , csro:ContainerLayer2MitM_Exploitability_SCM-2_Weight , csro:ContainerLayer2MitM_Exploitability_SCM-3_Weight , csro:ContainerLayer2MitM_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerLayer2MitM attack technique" . ### https://w3id.org/csro/ontology#ContainerLayer2MitMExposureRule csro:ContainerLayer2MitMExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerLayer2MitM ; csro:hasWeight csro:ContainerLayer2MitM_Exposure_AUTH-1_Weight , csro:ContainerLayer2MitM_Exposure_AUTH-2_Weight , csro:ContainerLayer2MitM_Exposure_AUTH-3_Weight , csro:ContainerLayer2MitM_Exposure_CIC-1_Weight , csro:ContainerLayer2MitM_Exposure_CIC-2_Weight , csro:ContainerLayer2MitM_Exposure_CIC-3_Weight , csro:ContainerLayer2MitM_Exposure_CIC-4_Weight , csro:ContainerLayer2MitM_Exposure_CIC-5_Weight , csro:ContainerLayer2MitM_Exposure_CIC-6_Weight , csro:ContainerLayer2MitM_Exposure_CRM-1_Weight , csro:ContainerLayer2MitM_Exposure_CRM-2_Weight , csro:ContainerLayer2MitM_Exposure_CRM-3_Weight , csro:ContainerLayer2MitM_Exposure_CRM-4_Weight , csro:ContainerLayer2MitM_Exposure_HIS-1_Weight , csro:ContainerLayer2MitM_Exposure_HIS-2_Weight , csro:ContainerLayer2MitM_Exposure_HIS-3_Weight , csro:ContainerLayer2MitM_Exposure_IMG-1_Weight , csro:ContainerLayer2MitM_Exposure_IMG-2_Weight , csro:ContainerLayer2MitM_Exposure_IMG-3_Weight , csro:ContainerLayer2MitM_Exposure_IMG-4_Weight , csro:ContainerLayer2MitM_Exposure_IMG-5_Weight , csro:ContainerLayer2MitM_Exposure_IMG-6_Weight , csro:ContainerLayer2MitM_Exposure_MON-1_Weight , csro:ContainerLayer2MitM_Exposure_MON-2_Weight , csro:ContainerLayer2MitM_Exposure_MON-3_Weight , csro:ContainerLayer2MitM_Exposure_MON-4_Weight , csro:ContainerLayer2MitM_Exposure_MON-5_Weight , csro:ContainerLayer2MitM_Exposure_MON-6_Weight , csro:ContainerLayer2MitM_Exposure_MON-7_Weight , csro:ContainerLayer2MitM_Exposure_MON-8_Weight , csro:ContainerLayer2MitM_Exposure_NET-1_Weight , csro:ContainerLayer2MitM_Exposure_NET-2_Weight , csro:ContainerLayer2MitM_Exposure_NET-3_Weight , csro:ContainerLayer2MitM_Exposure_NET-4_Weight , csro:ContainerLayer2MitM_Exposure_RTS-1_Weight , csro:ContainerLayer2MitM_Exposure_RTS-2_Weight , csro:ContainerLayer2MitM_Exposure_RTS-3_Weight , csro:ContainerLayer2MitM_Exposure_RTS-4_Weight , csro:ContainerLayer2MitM_Exposure_RTS-5_Weight , csro:ContainerLayer2MitM_Exposure_RTS-6_Weight , csro:ContainerLayer2MitM_Exposure_RTS-7_Weight , csro:ContainerLayer2MitM_Exposure_SCM-1_Weight , csro:ContainerLayer2MitM_Exposure_SCM-2_Weight , csro:ContainerLayer2MitM_Exposure_SCM-3_Weight , csro:ContainerLayer2MitM_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerLayer2MitM attack technique" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_AUTH-1_Weight csro:ContainerLayer2MitM_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_AUTH-2_Weight csro:ContainerLayer2MitM_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_AUTH-3_Weight csro:ContainerLayer2MitM_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_CIC-1_Weight csro:ContainerLayer2MitM_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_CIC-2_Weight csro:ContainerLayer2MitM_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_CIC-3_Weight csro:ContainerLayer2MitM_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_CIC-4_Weight csro:ContainerLayer2MitM_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_CIC-5_Weight csro:ContainerLayer2MitM_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_CIC-6_Weight csro:ContainerLayer2MitM_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_CRM-1_Weight csro:ContainerLayer2MitM_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of what a container with layer 2 network access can do in a context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_CRM-2_Weight csro:ContainerLayer2MitM_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of what a container with layer 2 network access can do in a context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_CRM-3_Weight csro:ContainerLayer2MitM_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of what a container with layer 2 network access can do in a context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_CRM-4_Weight csro:ContainerLayer2MitM_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of what a container with layer 2 network access can do in a context" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_HIS-1_Weight csro:ContainerLayer2MitM_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_HIS-2_Weight csro:ContainerLayer2MitM_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_HIS-3_Weight csro:ContainerLayer2MitM_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_IMG-1_Weight csro:ContainerLayer2MitM_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_IMG-2_Weight csro:ContainerLayer2MitM_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_IMG-3_Weight csro:ContainerLayer2MitM_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_IMG-4_Weight csro:ContainerLayer2MitM_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_IMG-5_Weight csro:ContainerLayer2MitM_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_IMG-6_Weight csro:ContainerLayer2MitM_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_MON-1_Weight csro:ContainerLayer2MitM_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_MON-2_Weight csro:ContainerLayer2MitM_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_MON-3_Weight csro:ContainerLayer2MitM_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_MON-4_Weight csro:ContainerLayer2MitM_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_MON-5_Weight csro:ContainerLayer2MitM_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_MON-6_Weight csro:ContainerLayer2MitM_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_MON-7_Weight csro:ContainerLayer2MitM_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_MON-8_Weight csro:ContainerLayer2MitM_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_NET-1_Weight csro:ContainerLayer2MitM_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls determine traffic flow to and from the host system in the layer 2 network and what the container can access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_NET-2_Weight csro:ContainerLayer2MitM_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls determine traffic flow to and from the host system in the layer 2 network and what the container can access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_NET-3_Weight csro:ContainerLayer2MitM_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls determine traffic flow to and from the host system in the layer 2 network and what the container can access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_NET-4_Weight csro:ContainerLayer2MitM_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls determine traffic flow to and from the host system in the layer 2 network and what the container can access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_RTS-1_Weight csro:ContainerLayer2MitM_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_RTS-2_Weight csro:ContainerLayer2MitM_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_RTS-3_Weight csro:ContainerLayer2MitM_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_RTS-4_Weight csro:ContainerLayer2MitM_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_RTS-5_Weight csro:ContainerLayer2MitM_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_RTS-6_Weight csro:ContainerLayer2MitM_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_RTS-7_Weight csro:ContainerLayer2MitM_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_SCM-1_Weight csro:ContainerLayer2MitM_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_SCM-2_Weight csro:ContainerLayer2MitM_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_SCM-3_Weight csro:ContainerLayer2MitM_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exploitability_SCM-4_Weight csro:ContainerLayer2MitM_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_AUTH-1_Weight csro:ContainerLayer2MitM_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls reduce the attack surface of the container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_AUTH-2_Weight csro:ContainerLayer2MitM_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls reduce the attack surface of the container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_AUTH-3_Weight csro:ContainerLayer2MitM_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls reduce the attack surface of the container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_CIC-1_Weight csro:ContainerLayer2MitM_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_CIC-2_Weight csro:ContainerLayer2MitM_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_CIC-3_Weight csro:ContainerLayer2MitM_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_CIC-4_Weight csro:ContainerLayer2MitM_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_CIC-5_Weight csro:ContainerLayer2MitM_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_CIC-6_Weight csro:ContainerLayer2MitM_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_CRM-1_Weight csro:ContainerLayer2MitM_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how vulnerable to attacks a container with layer 2 network access is" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_CRM-2_Weight csro:ContainerLayer2MitM_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how vulnerable to attacks a container with layer 2 network access is" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_CRM-3_Weight csro:ContainerLayer2MitM_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how vulnerable to attacks a container with layer 2 network access is" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_CRM-4_Weight csro:ContainerLayer2MitM_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how vulnerable to attacks a container with layer 2 network access is" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_HIS-1_Weight csro:ContainerLayer2MitM_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface of a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_HIS-2_Weight csro:ContainerLayer2MitM_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface of a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_HIS-3_Weight csro:ContainerLayer2MitM_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface of a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_IMG-1_Weight csro:ContainerLayer2MitM_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_IMG-2_Weight csro:ContainerLayer2MitM_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_IMG-3_Weight csro:ContainerLayer2MitM_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_IMG-4_Weight csro:ContainerLayer2MitM_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_IMG-5_Weight csro:ContainerLayer2MitM_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_IMG-6_Weight csro:ContainerLayer2MitM_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_MON-1_Weight csro:ContainerLayer2MitM_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_MON-2_Weight csro:ContainerLayer2MitM_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_MON-3_Weight csro:ContainerLayer2MitM_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_MON-4_Weight csro:ContainerLayer2MitM_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_MON-5_Weight csro:ContainerLayer2MitM_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_MON-6_Weight csro:ContainerLayer2MitM_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_MON-7_Weight csro:ContainerLayer2MitM_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_MON-8_Weight csro:ContainerLayer2MitM_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_NET-1_Weight csro:ContainerLayer2MitM_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface for a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_NET-2_Weight csro:ContainerLayer2MitM_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface for a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_NET-3_Weight csro:ContainerLayer2MitM_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface for a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_NET-4_Weight csro:ContainerLayer2MitM_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface for a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_RTS-1_Weight csro:ContainerLayer2MitM_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_RTS-2_Weight csro:ContainerLayer2MitM_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_RTS-3_Weight csro:ContainerLayer2MitM_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_RTS-4_Weight csro:ContainerLayer2MitM_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_RTS-5_Weight csro:ContainerLayer2MitM_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_RTS-6_Weight csro:ContainerLayer2MitM_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_RTS-7_Weight csro:ContainerLayer2MitM_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_SCM-1_Weight csro:ContainerLayer2MitM_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support detection of layer 2 network attacks" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_SCM-2_Weight csro:ContainerLayer2MitM_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support detection of layer 2 network attacks" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_SCM-3_Weight csro:ContainerLayer2MitM_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support detection of layer 2 network attacks" . ### https://w3id.org/csro/ontology#ContainerLayer2MitM_Exposure_SCM-4_Weight csro:ContainerLayer2MitM_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support detection of layer 2 network attacks" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion csro:ContainerNetworkBridgeEvasion rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Medium ; csro:referencesAttackTechnique d3f:T1599.001 ; csro:requiresTrait csro:cap_add_CAP_NET_ADMIN , csro:host_network ; csro:description "Manipulating network bridges and routing tables using CAP_NET_ADMIN to bypass network segmentation controls" ; rdfs:label "Container Network Bridge Evasion" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_AirGappedScenario csro:ContainerNetworkBridgeEvasionAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_BalancedContainerSecurityScenario csro:ContainerNetworkBridgeEvasionAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_BasicContainerSecurityScenario csro:ContainerNetworkBridgeEvasionAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_BasicScenario csro:ContainerNetworkBridgeEvasionAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:BasicScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_CICDSecurityScenario csro:ContainerNetworkBridgeEvasionAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_CISCompliantScenario csro:ContainerNetworkBridgeEvasionAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_DevelopmentScenario csro:ContainerNetworkBridgeEvasionAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_EdgeComputingScenario csro:ContainerNetworkBridgeEvasionAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_HardenedScenario csro:ContainerNetworkBridgeEvasionAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:HardenedScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_HighRiskScenario csro:ContainerNetworkBridgeEvasionAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_HybridCloudScenario csro:ContainerNetworkBridgeEvasionAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_ImageSecurityFocusedScenario csro:ContainerNetworkBridgeEvasionAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_MicroservicesScenario csro:ContainerNetworkBridgeEvasionAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_MixedScenario csro:ContainerNetworkBridgeEvasionAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:MixedScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_NISTCompliantScenario csro:ContainerNetworkBridgeEvasionAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_NetworkHardenedScenario csro:ContainerNetworkBridgeEvasionAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_OWASPCheatSheetCompliantScenario csro:ContainerNetworkBridgeEvasionAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_OWASPTop10CompliantScenario csro:ContainerNetworkBridgeEvasionAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_OutdatedContainersScenario csro:ContainerNetworkBridgeEvasionAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_ProductionScenario csro:ContainerNetworkBridgeEvasionAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:ProductionScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_RapidPrototypeScenario csro:ContainerNetworkBridgeEvasionAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionAttack_RuntimeHardenedScenario csro:ContainerNetworkBridgeEvasionAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerNetworkBridgeEvasion ; csro:causesImpact csro:NetworkSegmentationBypass ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerNetworkBridgeEvasion attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionExploitabilityRule csro:ContainerNetworkBridgeEvasionExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerNetworkBridgeEvasion ; csro:hasWeight csro:ContainerNetworkBridgeEvasion_Exploitability_AUTH-1_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_AUTH-2_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_AUTH-3_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-1_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-2_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-3_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-4_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-5_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-6_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_CRM-1_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_CRM-2_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_CRM-3_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_CRM-4_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_HIS-1_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_HIS-2_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_HIS-3_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-1_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-2_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-3_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-4_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-5_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-6_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_MON-1_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_MON-2_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_MON-3_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_MON-4_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_MON-5_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_MON-6_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_MON-7_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_MON-8_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_NET-1_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_NET-2_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_NET-3_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_NET-4_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-1_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-2_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-3_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-4_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-5_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-6_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-7_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_SCM-1_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_SCM-2_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_SCM-3_Weight , csro:ContainerNetworkBridgeEvasion_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerNetworkBridgeEvasion attack technique" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasionExposureRule csro:ContainerNetworkBridgeEvasionExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerNetworkBridgeEvasion ; csro:hasWeight csro:ContainerNetworkBridgeEvasion_Exposure_AUTH-1_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_AUTH-2_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_AUTH-3_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_CIC-1_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_CIC-2_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_CIC-3_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_CIC-4_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_CIC-5_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_CIC-6_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_CRM-1_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_CRM-2_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_CRM-3_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_CRM-4_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_HIS-1_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_HIS-2_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_HIS-3_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_IMG-1_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_IMG-2_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_IMG-3_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_IMG-4_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_IMG-5_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_IMG-6_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_MON-1_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_MON-2_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_MON-3_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_MON-4_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_MON-5_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_MON-6_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_MON-7_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_MON-8_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_NET-1_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_NET-2_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_NET-3_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_NET-4_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_RTS-1_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_RTS-2_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_RTS-3_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_RTS-4_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_RTS-5_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_RTS-6_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_RTS-7_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_SCM-1_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_SCM-2_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_SCM-3_Weight , csro:ContainerNetworkBridgeEvasion_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerNetworkBridgeEvasion attack technique" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_AUTH-1_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make network configuration modification more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_AUTH-2_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make network configuration modification more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_AUTH-3_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make network configuration modification more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_CIC-1_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_CIC-2_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_CIC-3_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_CIC-4_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_CIC-5_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_CIC-6_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls prevent introduction of vulnerabilities to containers with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_CRM-1_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management helps to assess how a container with networking privileges can damage the production environment" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_CRM-2_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management helps to assess how a container with networking privileges can damage the production environment" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_CRM-3_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management helps to assess how a container with networking privileges can damage the production environment" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_CRM-4_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management helps to assess how a container with networking privileges can damage the production environment" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_HIS-1_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_HIS-2_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_HIS-3_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_IMG-1_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_IMG-2_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_IMG-3_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_IMG-4_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_IMG-5_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_IMG-6_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_MON-1_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_MON-2_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_MON-3_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_MON-4_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_MON-5_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_MON-6_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_MON-7_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_MON-8_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make network configuration manipulation more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_NET-1_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_NET-2_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_NET-3_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_NET-4_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make manipulating network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_RTS-1_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 3.0 ; csro:effectDescription "Using a non-root user for the container makes it more difficult gain access to and modify host network configuration" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_RTS-2_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_RTS-3_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_RTS-4_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_RTS-5_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_RTS-6_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_RTS-7_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make manipulation of network configuration more difficult" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_SCM-1_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not increase the efforts and difficulty for network configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_SCM-2_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not increase the efforts and difficulty for network configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_SCM-3_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not increase the efforts and difficulty for network configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exploitability_SCM-4_Weight csro:ContainerNetworkBridgeEvasion_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not increase the efforts and difficulty for network configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_AUTH-1_Weight csro:ContainerNetworkBridgeEvasion_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the container with the network privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_AUTH-2_Weight csro:ContainerNetworkBridgeEvasion_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the container with the network privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_AUTH-3_Weight csro:ContainerNetworkBridgeEvasion_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the container with the network privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_CIC-1_Weight csro:ContainerNetworkBridgeEvasion_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_CIC-2_Weight csro:ContainerNetworkBridgeEvasion_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_CIC-3_Weight csro:ContainerNetworkBridgeEvasion_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_CIC-4_Weight csro:ContainerNetworkBridgeEvasion_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_CIC-5_Weight csro:ContainerNetworkBridgeEvasion_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_CIC-6_Weight csro:ContainerNetworkBridgeEvasion_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls help to reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_CRM-1_Weight csro:ContainerNetworkBridgeEvasion_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess measures to restric access to a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_CRM-2_Weight csro:ContainerNetworkBridgeEvasion_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess measures to restric access to a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_CRM-3_Weight csro:ContainerNetworkBridgeEvasion_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess measures to restric access to a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_CRM-4_Weight csro:ContainerNetworkBridgeEvasion_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess measures to restric access to a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_HIS-1_Weight csro:ContainerNetworkBridgeEvasion_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "The status of the container runtime does not reduce the attack surface of a container with networking privileges" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_HIS-2_Weight csro:ContainerNetworkBridgeEvasion_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 2.0 ; csro:effectDescription "Configuring the host network configuration as immutable and monitoring changes increases the likelihood of detecting malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_HIS-3_Weight csro:ContainerNetworkBridgeEvasion_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Configuring the host network configuration as immutable and monitoring changes increases the likelihood of detecting malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_IMG-1_Weight csro:ContainerNetworkBridgeEvasion_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_IMG-2_Weight csro:ContainerNetworkBridgeEvasion_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_IMG-3_Weight csro:ContainerNetworkBridgeEvasion_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_IMG-4_Weight csro:ContainerNetworkBridgeEvasion_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_IMG-5_Weight csro:ContainerNetworkBridgeEvasion_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_IMG-6_Weight csro:ContainerNetworkBridgeEvasion_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of identifying malicious container design" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_MON-1_Weight csro:ContainerNetworkBridgeEvasion_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_MON-2_Weight csro:ContainerNetworkBridgeEvasion_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_MON-3_Weight csro:ContainerNetworkBridgeEvasion_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_MON-4_Weight csro:ContainerNetworkBridgeEvasion_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_MON-5_Weight csro:ContainerNetworkBridgeEvasion_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_MON-6_Weight csro:ContainerNetworkBridgeEvasion_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_MON-7_Weight csro:ContainerNetworkBridgeEvasion_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_MON-8_Weight csro:ContainerNetworkBridgeEvasion_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 2.0 ; csro:effectDescription "Activities of a privileged network container should be monitored to detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_NET-1_Weight csro:ContainerNetworkBridgeEvasion_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls greatly improve the isolation of the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_NET-2_Weight csro:ContainerNetworkBridgeEvasion_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls greatly improve the isolation of the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_NET-3_Weight csro:ContainerNetworkBridgeEvasion_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls greatly improve the isolation of the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_NET-4_Weight csro:ContainerNetworkBridgeEvasion_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls greatly improve the isolation of the privileged container and reduce the attack surface" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_RTS-1_Weight csro:ContainerNetworkBridgeEvasion_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_RTS-2_Weight csro:ContainerNetworkBridgeEvasion_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_RTS-3_Weight csro:ContainerNetworkBridgeEvasion_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_RTS-4_Weight csro:ContainerNetworkBridgeEvasion_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_RTS-5_Weight csro:ContainerNetworkBridgeEvasion_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_RTS-6_Weight csro:ContainerNetworkBridgeEvasion_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_RTS-7_Weight csro:ContainerNetworkBridgeEvasion_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface for network hijacking or support detection of malicious activities" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_SCM-1_Weight csro:ContainerNetworkBridgeEvasion_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not reduce the attack surface posed by a privileged network container and does not support detection of configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_SCM-2_Weight csro:ContainerNetworkBridgeEvasion_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not reduce the attack surface posed by a privileged network container and does not support detection of configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_SCM-3_Weight csro:ContainerNetworkBridgeEvasion_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not reduce the attack surface posed by a privileged network container and does not support detection of configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerNetworkBridgeEvasion_Exposure_SCM-4_Weight csro:ContainerNetworkBridgeEvasion_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secure secrets management does not reduce the attack surface posed by a privileged network container and does not support detection of configuration manipulation" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack csro:ContainerOTNetworkAttack rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:High ; csro:referencesAttackTechnique d3f:T1200 ; csro:requiresTrait csro:layer2_network ; csro:description "Exploiting Layer 2 network access to attack operational technology (OT) networks and industrial control systems through protocol manipulation" ; rdfs:label "Container OT Network Attack" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_AirGappedScenario csro:ContainerOTNetworkAttackAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerOTNetworkAttack attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_BalancedContainerSecurityScenario csro:ContainerOTNetworkAttackAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerOTNetworkAttack attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_BasicContainerSecurityScenario csro:ContainerOTNetworkAttackAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerOTNetworkAttack attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_BasicScenario csro:ContainerOTNetworkAttackAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:BasicScenario ; csro:description "ContainerOTNetworkAttack attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_CICDSecurityScenario csro:ContainerOTNetworkAttackAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerOTNetworkAttack attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_CISCompliantScenario csro:ContainerOTNetworkAttackAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerOTNetworkAttack attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_DevelopmentScenario csro:ContainerOTNetworkAttackAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerOTNetworkAttack attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_EdgeComputingScenario csro:ContainerOTNetworkAttackAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerOTNetworkAttack attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_HardenedScenario csro:ContainerOTNetworkAttackAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:HardenedScenario ; csro:description "ContainerOTNetworkAttack attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_HighRiskScenario csro:ContainerOTNetworkAttackAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerOTNetworkAttack attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_HybridCloudScenario csro:ContainerOTNetworkAttackAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerOTNetworkAttack attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_ImageSecurityFocusedScenario csro:ContainerOTNetworkAttackAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerOTNetworkAttack attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_MicroservicesScenario csro:ContainerOTNetworkAttackAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerOTNetworkAttack attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_MixedScenario csro:ContainerOTNetworkAttackAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:MixedScenario ; csro:description "ContainerOTNetworkAttack attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_NISTCompliantScenario csro:ContainerOTNetworkAttackAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerOTNetworkAttack attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_NetworkHardenedScenario csro:ContainerOTNetworkAttackAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerOTNetworkAttack attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_OWASPCheatSheetCompliantScenario csro:ContainerOTNetworkAttackAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerOTNetworkAttack attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_OWASPTop10CompliantScenario csro:ContainerOTNetworkAttackAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerOTNetworkAttack attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_OutdatedContainersScenario csro:ContainerOTNetworkAttackAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerOTNetworkAttack attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_ProductionScenario csro:ContainerOTNetworkAttackAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:ProductionScenario ; csro:description "ContainerOTNetworkAttack attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_RapidPrototypeScenario csro:ContainerOTNetworkAttackAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerOTNetworkAttack attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackAttack_RuntimeHardenedScenario csro:ContainerOTNetworkAttackAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerOTNetworkAttack ; csro:causesImpact csro:OTSystemCompromise ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerOTNetworkAttack attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackExploitabilityRule csro:ContainerOTNetworkAttackExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerOTNetworkAttack ; csro:hasWeight csro:ContainerOTNetworkAttack_Exploitability_AUTH-1_Weight , csro:ContainerOTNetworkAttack_Exploitability_AUTH-2_Weight , csro:ContainerOTNetworkAttack_Exploitability_AUTH-3_Weight , csro:ContainerOTNetworkAttack_Exploitability_CIC-1_Weight , csro:ContainerOTNetworkAttack_Exploitability_CIC-2_Weight , csro:ContainerOTNetworkAttack_Exploitability_CIC-3_Weight , csro:ContainerOTNetworkAttack_Exploitability_CIC-4_Weight , csro:ContainerOTNetworkAttack_Exploitability_CIC-5_Weight , csro:ContainerOTNetworkAttack_Exploitability_CIC-6_Weight , csro:ContainerOTNetworkAttack_Exploitability_CRM-1_Weight , csro:ContainerOTNetworkAttack_Exploitability_CRM-2_Weight , csro:ContainerOTNetworkAttack_Exploitability_CRM-3_Weight , csro:ContainerOTNetworkAttack_Exploitability_CRM-4_Weight , csro:ContainerOTNetworkAttack_Exploitability_HIS-1_Weight , csro:ContainerOTNetworkAttack_Exploitability_HIS-2_Weight , csro:ContainerOTNetworkAttack_Exploitability_HIS-3_Weight , csro:ContainerOTNetworkAttack_Exploitability_IMG-1_Weight , csro:ContainerOTNetworkAttack_Exploitability_IMG-2_Weight , csro:ContainerOTNetworkAttack_Exploitability_IMG-3_Weight , csro:ContainerOTNetworkAttack_Exploitability_IMG-4_Weight , csro:ContainerOTNetworkAttack_Exploitability_IMG-5_Weight , csro:ContainerOTNetworkAttack_Exploitability_IMG-6_Weight , csro:ContainerOTNetworkAttack_Exploitability_MON-1_Weight , csro:ContainerOTNetworkAttack_Exploitability_MON-2_Weight , csro:ContainerOTNetworkAttack_Exploitability_MON-3_Weight , csro:ContainerOTNetworkAttack_Exploitability_MON-4_Weight , csro:ContainerOTNetworkAttack_Exploitability_MON-5_Weight , csro:ContainerOTNetworkAttack_Exploitability_MON-6_Weight , csro:ContainerOTNetworkAttack_Exploitability_MON-7_Weight , csro:ContainerOTNetworkAttack_Exploitability_MON-8_Weight , csro:ContainerOTNetworkAttack_Exploitability_NET-1_Weight , csro:ContainerOTNetworkAttack_Exploitability_NET-2_Weight , csro:ContainerOTNetworkAttack_Exploitability_NET-3_Weight , csro:ContainerOTNetworkAttack_Exploitability_NET-4_Weight , csro:ContainerOTNetworkAttack_Exploitability_RTS-1_Weight , csro:ContainerOTNetworkAttack_Exploitability_RTS-2_Weight , csro:ContainerOTNetworkAttack_Exploitability_RTS-3_Weight , csro:ContainerOTNetworkAttack_Exploitability_RTS-4_Weight , csro:ContainerOTNetworkAttack_Exploitability_RTS-5_Weight , csro:ContainerOTNetworkAttack_Exploitability_RTS-6_Weight , csro:ContainerOTNetworkAttack_Exploitability_RTS-7_Weight , csro:ContainerOTNetworkAttack_Exploitability_SCM-1_Weight , csro:ContainerOTNetworkAttack_Exploitability_SCM-2_Weight , csro:ContainerOTNetworkAttack_Exploitability_SCM-3_Weight , csro:ContainerOTNetworkAttack_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerOTNetworkAttack attack technique" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttackExposureRule csro:ContainerOTNetworkAttackExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerOTNetworkAttack ; csro:hasWeight csro:ContainerOTNetworkAttack_Exposure_AUTH-1_Weight , csro:ContainerOTNetworkAttack_Exposure_AUTH-2_Weight , csro:ContainerOTNetworkAttack_Exposure_AUTH-3_Weight , csro:ContainerOTNetworkAttack_Exposure_CIC-1_Weight , csro:ContainerOTNetworkAttack_Exposure_CIC-2_Weight , csro:ContainerOTNetworkAttack_Exposure_CIC-3_Weight , csro:ContainerOTNetworkAttack_Exposure_CIC-4_Weight , csro:ContainerOTNetworkAttack_Exposure_CIC-5_Weight , csro:ContainerOTNetworkAttack_Exposure_CIC-6_Weight , csro:ContainerOTNetworkAttack_Exposure_CRM-1_Weight , csro:ContainerOTNetworkAttack_Exposure_CRM-2_Weight , csro:ContainerOTNetworkAttack_Exposure_CRM-3_Weight , csro:ContainerOTNetworkAttack_Exposure_CRM-4_Weight , csro:ContainerOTNetworkAttack_Exposure_HIS-1_Weight , csro:ContainerOTNetworkAttack_Exposure_HIS-2_Weight , csro:ContainerOTNetworkAttack_Exposure_HIS-3_Weight , csro:ContainerOTNetworkAttack_Exposure_IMG-1_Weight , csro:ContainerOTNetworkAttack_Exposure_IMG-2_Weight , csro:ContainerOTNetworkAttack_Exposure_IMG-3_Weight , csro:ContainerOTNetworkAttack_Exposure_IMG-4_Weight , csro:ContainerOTNetworkAttack_Exposure_IMG-5_Weight , csro:ContainerOTNetworkAttack_Exposure_IMG-6_Weight , csro:ContainerOTNetworkAttack_Exposure_MON-1_Weight , csro:ContainerOTNetworkAttack_Exposure_MON-2_Weight , csro:ContainerOTNetworkAttack_Exposure_MON-3_Weight , csro:ContainerOTNetworkAttack_Exposure_MON-4_Weight , csro:ContainerOTNetworkAttack_Exposure_MON-5_Weight , csro:ContainerOTNetworkAttack_Exposure_MON-6_Weight , csro:ContainerOTNetworkAttack_Exposure_MON-7_Weight , csro:ContainerOTNetworkAttack_Exposure_MON-8_Weight , csro:ContainerOTNetworkAttack_Exposure_NET-1_Weight , csro:ContainerOTNetworkAttack_Exposure_NET-2_Weight , csro:ContainerOTNetworkAttack_Exposure_NET-3_Weight , csro:ContainerOTNetworkAttack_Exposure_NET-4_Weight , csro:ContainerOTNetworkAttack_Exposure_RTS-1_Weight , csro:ContainerOTNetworkAttack_Exposure_RTS-2_Weight , csro:ContainerOTNetworkAttack_Exposure_RTS-3_Weight , csro:ContainerOTNetworkAttack_Exposure_RTS-4_Weight , csro:ContainerOTNetworkAttack_Exposure_RTS-5_Weight , csro:ContainerOTNetworkAttack_Exposure_RTS-6_Weight , csro:ContainerOTNetworkAttack_Exposure_RTS-7_Weight , csro:ContainerOTNetworkAttack_Exposure_SCM-1_Weight , csro:ContainerOTNetworkAttack_Exposure_SCM-2_Weight , csro:ContainerOTNetworkAttack_Exposure_SCM-3_Weight , csro:ContainerOTNetworkAttack_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerOTNetworkAttack attack technique" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_AUTH-1_Weight csro:ContainerOTNetworkAttack_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_AUTH-2_Weight csro:ContainerOTNetworkAttack_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_AUTH-3_Weight csro:ContainerOTNetworkAttack_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_CIC-1_Weight csro:ContainerOTNetworkAttack_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_CIC-2_Weight csro:ContainerOTNetworkAttack_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_CIC-3_Weight csro:ContainerOTNetworkAttack_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_CIC-4_Weight csro:ContainerOTNetworkAttack_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_CIC-5_Weight csro:ContainerOTNetworkAttack_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_CIC-6_Weight csro:ContainerOTNetworkAttack_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access supports its trustworthiness and robustness to vulnerabilities" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_CRM-1_Weight csro:ContainerOTNetworkAttack_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of what a container with layer 2 network access can do in a context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_CRM-2_Weight csro:ContainerOTNetworkAttack_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of what a container with layer 2 network access can do in a context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_CRM-3_Weight csro:ContainerOTNetworkAttack_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of what a container with layer 2 network access can do in a context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_CRM-4_Weight csro:ContainerOTNetworkAttack_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of what a container with layer 2 network access can do in a context" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_HIS-1_Weight csro:ContainerOTNetworkAttack_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_HIS-2_Weight csro:ContainerOTNetworkAttack_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_HIS-3_Weight csro:ContainerOTNetworkAttack_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_IMG-1_Weight csro:ContainerOTNetworkAttack_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Medium effect - reduces malicious code in images" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_IMG-2_Weight csro:ContainerOTNetworkAttack_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_IMG-3_Weight csro:ContainerOTNetworkAttack_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_IMG-4_Weight csro:ContainerOTNetworkAttack_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_IMG-5_Weight csro:ContainerOTNetworkAttack_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_IMG-6_Weight csro:ContainerOTNetworkAttack_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_MON-1_Weight csro:ContainerOTNetworkAttack_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_MON-2_Weight csro:ContainerOTNetworkAttack_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_MON-3_Weight csro:ContainerOTNetworkAttack_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_MON-4_Weight csro:ContainerOTNetworkAttack_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_MON-5_Weight csro:ContainerOTNetworkAttack_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_MON-6_Weight csro:ContainerOTNetworkAttack_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_MON-7_Weight csro:ContainerOTNetworkAttack_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_MON-8_Weight csro:ContainerOTNetworkAttack_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_NET-1_Weight csro:ContainerOTNetworkAttack_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls determine traffic flow to and from the host system in the layer 2 network and what the container can access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_NET-2_Weight csro:ContainerOTNetworkAttack_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls determine traffic flow to and from the host system in the layer 2 network and what the container can access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_NET-3_Weight csro:ContainerOTNetworkAttack_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls determine traffic flow to and from the host system in the layer 2 network and what the container can access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_NET-4_Weight csro:ContainerOTNetworkAttack_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls determine traffic flow to and from the host system in the layer 2 network and what the container can access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_RTS-1_Weight csro:ContainerOTNetworkAttack_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Medium effect - reduces ability to manipulate network protocols" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_RTS-2_Weight csro:ContainerOTNetworkAttack_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_RTS-3_Weight csro:ContainerOTNetworkAttack_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "High effect - without CAP_NET_ADMIN protocol manipulation is prevented" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_RTS-4_Weight csro:ContainerOTNetworkAttack_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_RTS-5_Weight csro:ContainerOTNetworkAttack_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Medium effect - LSM can restrict network and protocol operations" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_RTS-6_Weight csro:ContainerOTNetworkAttack_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_RTS-7_Weight csro:ContainerOTNetworkAttack_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of intercepting layer 2 network traffic" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_SCM-1_Weight csro:ContainerOTNetworkAttack_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_SCM-2_Weight csro:ContainerOTNetworkAttack_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_SCM-3_Weight csro:ContainerOTNetworkAttack_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exploitability_SCM-4_Weight csro:ContainerOTNetworkAttack_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not make layer 2 network attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_AUTH-1_Weight csro:ContainerOTNetworkAttack_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls reduce the attack surface of the container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_AUTH-2_Weight csro:ContainerOTNetworkAttack_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls reduce the attack surface of the container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_AUTH-3_Weight csro:ContainerOTNetworkAttack_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls reduce the attack surface of the container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_CIC-1_Weight csro:ContainerOTNetworkAttack_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_CIC-2_Weight csro:ContainerOTNetworkAttack_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_CIC-3_Weight csro:ContainerOTNetworkAttack_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_CIC-4_Weight csro:ContainerOTNetworkAttack_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_CIC-5_Weight csro:ContainerOTNetworkAttack_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_CIC-6_Weight csro:ContainerOTNetworkAttack_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls for containers with layer 2 network access support detection of malicious behaviour and reduce the attack surface of the privileged container" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_CRM-1_Weight csro:ContainerOTNetworkAttack_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how vulnerable to attacks a container with layer 2 network access is" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_CRM-2_Weight csro:ContainerOTNetworkAttack_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how vulnerable to attacks a container with layer 2 network access is" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_CRM-3_Weight csro:ContainerOTNetworkAttack_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how vulnerable to attacks a container with layer 2 network access is" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_CRM-4_Weight csro:ContainerOTNetworkAttack_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices support the assessment of how vulnerable to attacks a container with layer 2 network access is" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_HIS-1_Weight csro:ContainerOTNetworkAttack_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface of a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_HIS-2_Weight csro:ContainerOTNetworkAttack_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface of a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_HIS-3_Weight csro:ContainerOTNetworkAttack_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface of a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_IMG-1_Weight csro:ContainerOTNetworkAttack_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_IMG-2_Weight csro:ContainerOTNetworkAttack_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_IMG-3_Weight csro:ContainerOTNetworkAttack_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_IMG-4_Weight csro:ContainerOTNetworkAttack_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_IMG-5_Weight csro:ContainerOTNetworkAttack_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_IMG-6_Weight csro:ContainerOTNetworkAttack_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and the attack surface of a container with access to the layer 2 network" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_MON-1_Weight csro:ContainerOTNetworkAttack_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_MON-2_Weight csro:ContainerOTNetworkAttack_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_MON-3_Weight csro:ContainerOTNetworkAttack_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_MON-4_Weight csro:ContainerOTNetworkAttack_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_MON-5_Weight csro:ContainerOTNetworkAttack_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_MON-6_Weight csro:ContainerOTNetworkAttack_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_MON-7_Weight csro:ContainerOTNetworkAttack_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_MON-8_Weight csro:ContainerOTNetworkAttack_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls support detection of layer 2 network attacks, but provide limited support to prevent spoofing attacks" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_NET-1_Weight csro:ContainerOTNetworkAttack_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface for a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_NET-2_Weight csro:ContainerOTNetworkAttack_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface for a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_NET-3_Weight csro:ContainerOTNetworkAttack_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface for a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_NET-4_Weight csro:ContainerOTNetworkAttack_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls limit network access and reduce attack surface for a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_RTS-1_Weight csro:ContainerOTNetworkAttack_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_RTS-2_Weight csro:ContainerOTNetworkAttack_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_RTS-3_Weight csro:ContainerOTNetworkAttack_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_RTS-4_Weight csro:ContainerOTNetworkAttack_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_RTS-5_Weight csro:ContainerOTNetworkAttack_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_RTS-6_Weight csro:ContainerOTNetworkAttack_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_RTS-7_Weight csro:ContainerOTNetworkAttack_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attack surface presented by a container with layer 2 network access" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_SCM-1_Weight csro:ContainerOTNetworkAttack_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support detection of layer 2 network attacks" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_SCM-2_Weight csro:ContainerOTNetworkAttack_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support detection of layer 2 network attacks" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_SCM-3_Weight csro:ContainerOTNetworkAttack_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support detection of layer 2 network attacks" . ### https://w3id.org/csro/ontology#ContainerOTNetworkAttack_Exposure_SCM-4_Weight csro:ContainerOTNetworkAttack_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support detection of layer 2 network attacks" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS csro:ContainerPrivilegedPortNetworkDoS rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Low ; csro:referencesAttackTechnique d3f:T1498 ; csro:requiresTrait csro:cap_add_CAP_NET_BIND_SERVICE , csro:privileged_port ; csro:description "Binding to privileged ports to disrupt legitimate services by port hijacking and service blocking" ; rdfs:label "Container Privileged Port Network DoS" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_AirGappedScenario csro:ContainerPrivilegedPortNetworkDoSAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_BalancedContainerSecurityScenario csro:ContainerPrivilegedPortNetworkDoSAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_BasicContainerSecurityScenario csro:ContainerPrivilegedPortNetworkDoSAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_BasicScenario csro:ContainerPrivilegedPortNetworkDoSAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:BasicScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_CICDSecurityScenario csro:ContainerPrivilegedPortNetworkDoSAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_CISCompliantScenario csro:ContainerPrivilegedPortNetworkDoSAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_DevelopmentScenario csro:ContainerPrivilegedPortNetworkDoSAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_EdgeComputingScenario csro:ContainerPrivilegedPortNetworkDoSAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_HardenedScenario csro:ContainerPrivilegedPortNetworkDoSAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:HardenedScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_HighRiskScenario csro:ContainerPrivilegedPortNetworkDoSAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_HybridCloudScenario csro:ContainerPrivilegedPortNetworkDoSAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_ImageSecurityFocusedScenario csro:ContainerPrivilegedPortNetworkDoSAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_MicroservicesScenario csro:ContainerPrivilegedPortNetworkDoSAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_MixedScenario csro:ContainerPrivilegedPortNetworkDoSAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:MixedScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_NISTCompliantScenario csro:ContainerPrivilegedPortNetworkDoSAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_NetworkHardenedScenario csro:ContainerPrivilegedPortNetworkDoSAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_OWASPCheatSheetCompliantScenario csro:ContainerPrivilegedPortNetworkDoSAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_OWASPTop10CompliantScenario csro:ContainerPrivilegedPortNetworkDoSAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_OutdatedContainersScenario csro:ContainerPrivilegedPortNetworkDoSAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_ProductionScenario csro:ContainerPrivilegedPortNetworkDoSAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:ProductionScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_RapidPrototypeScenario csro:ContainerPrivilegedPortNetworkDoSAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSAttack_RuntimeHardenedScenario csro:ContainerPrivilegedPortNetworkDoSAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortNetworkDoS ; csro:causesImpact csro:PortHijackingDoS ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerPrivilegedPortNetworkDoS attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSExploitabilityRule csro:ContainerPrivilegedPortNetworkDoSExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerPrivilegedPortNetworkDoS ; csro:hasWeight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_AUTH-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_AUTH-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_AUTH-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-5_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-6_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_HIS-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_HIS-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_HIS-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-5_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-6_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-5_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-6_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-7_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-8_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_NET-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_NET-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_NET-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_NET-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-5_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-6_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-7_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerPrivilegedPortNetworkDoS attack technique" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoSExposureRule csro:ContainerPrivilegedPortNetworkDoSExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerPrivilegedPortNetworkDoS ; csro:hasWeight csro:ContainerPrivilegedPortNetworkDoS_Exposure_AUTH-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_AUTH-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_AUTH-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-5_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-6_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_CRM-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_CRM-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_CRM-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_CRM-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_HIS-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_HIS-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_HIS-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-5_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-6_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-5_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-6_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-7_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-8_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_NET-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_NET-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_NET-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_NET-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-4_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-5_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-6_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-7_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_SCM-1_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_SCM-2_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_SCM-3_Weight , csro:ContainerPrivilegedPortNetworkDoS_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerPrivilegedPortNetworkDoS attack technique" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_AUTH-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication of container APIs does not prevent them from binding privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_AUTH-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to counter privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_AUTH-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to counter privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-5_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-6_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_HIS-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to manage port bindings of containers and detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_HIS-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "An immutable host infrastructure does not prevent binding of privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_HIS-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to manage port bindings of containers and detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-5_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-6_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_MON-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_MON-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_MON-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_MON-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_MON-5_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_MON-6_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_MON-7_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_MON-8_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_NET-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_NET-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_NET-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_NET-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-5_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-6_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-7_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_AUTH-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication of container APIs does not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_AUTH-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to detect and react to privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_AUTH-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to detect and react to privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_CIC-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_CIC-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_CIC-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_CIC-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_CIC-5_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_CIC-6_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_CRM-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_CRM-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_CRM-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_CRM-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_HIS-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to detect unauthorized port bindings of containers" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_HIS-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "An immutable host infrastructure does not detect binding of privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_HIS-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to detect unauthorized port bindings of containers" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_IMG-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_IMG-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_IMG-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_IMG-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_IMG-5_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_IMG-6_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_MON-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_MON-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_MON-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_MON-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_MON-5_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_MON-6_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_MON-7_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_MON-8_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_NET-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_NET-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_NET-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_NET-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_RTS-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_RTS-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_RTS-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_RTS-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_RTS-5_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_RTS-6_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_RTS-7_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_SCM-1_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_SCM-2_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_SCM-3_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortNetworkDoS_Exposure_SCM-4_Weight csro:ContainerPrivilegedPortNetworkDoS_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation csro:ContainerPrivilegedPortServiceImpersonation rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Medium ; csro:referencesAttackTechnique d3f:T1556 ; csro:requiresTrait csro:cap_add_CAP_NET_BIND_SERVICE , csro:privileged_port ; csro:description "Binding to privileged ports to impersonate legitimate services and capture authentication credentials" ; rdfs:label "Container Privileged Port Service Impersonation" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_AirGappedScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_BalancedContainerSecurityScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_BasicContainerSecurityScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_BasicScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:BasicScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_CICDSecurityScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_CISCompliantScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_DevelopmentScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_EdgeComputingScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_HardenedScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:HardenedScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_HighRiskScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_HybridCloudScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_ImageSecurityFocusedScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_MicroservicesScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_MixedScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:MixedScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_NISTCompliantScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_NetworkHardenedScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_OWASPCheatSheetCompliantScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_OWASPTop10CompliantScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_OutdatedContainersScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_ProductionScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:ProductionScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_RapidPrototypeScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationAttack_RuntimeHardenedScenario csro:ContainerPrivilegedPortServiceImpersonationAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortServiceImpersonation ; csro:causesImpact csro:ServiceImpersonation ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerPrivilegedPortServiceImpersonation attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationExploitabilityRule csro:ContainerPrivilegedPortServiceImpersonationExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerPrivilegedPortServiceImpersonation ; csro:hasWeight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_AUTH-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_AUTH-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_AUTH-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-5_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-6_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_HIS-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_HIS-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_HIS-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-5_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-6_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-5_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-6_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-7_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-8_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-5_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-6_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-7_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerPrivilegedPortServiceImpersonation attack technique" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonationExposureRule csro:ContainerPrivilegedPortServiceImpersonationExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerPrivilegedPortServiceImpersonation ; csro:hasWeight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_AUTH-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_AUTH-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_AUTH-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-5_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-6_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_HIS-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_HIS-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_HIS-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-5_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-6_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-5_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-6_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-7_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-8_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_NET-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_NET-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_NET-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_NET-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-4_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-5_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-6_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-7_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-1_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-2_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-3_Weight , csro:ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerPrivilegedPortServiceImpersonation attack technique" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_AUTH-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication of container APIs does not prevent them from binding privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_AUTH-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to counter privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_AUTH-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to counter privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-5_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-6_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_HIS-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to manage port bindings of containers and detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_HIS-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "An immutable host infrastructure does not prevent binding of privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_HIS-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to manage port bindings of containers and detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-5_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-6_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-5_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-6_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-7_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-8_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-5_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-6_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-7_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_AUTH-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication of container APIs does not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_AUTH-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to detect and react to privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_AUTH-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to detect and react to privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-5_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-6_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_HIS-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to detect unauthorized port bindings of containers" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_HIS-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "An immutable host infrastructure does not detect binding of privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_HIS-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to detect unauthorized port bindings of containers" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-5_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-6_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_MON-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_MON-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_MON-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_MON-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_MON-5_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_MON-6_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_MON-7_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_MON-8_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_NET-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_NET-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_NET-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_NET-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-5_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-6_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-7_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-1_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-2_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-3_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-4_Weight csro:ContainerPrivilegedPortServiceImpersonation_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture csro:ContainerPrivilegedPortTrafficCapture rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Medium ; csro:referencesAttackTechnique d3f:T1040 ; csro:requiresTrait csro:cap_add_CAP_NET_BIND_SERVICE , csro:privileged_port ; csro:description "Binding to privileged ports to intercept or redirect legitimate service traffic for credential theft or data exfiltration" ; rdfs:label "Container Privileged Port Traffic Capture" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_AirGappedScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_BalancedContainerSecurityScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_BasicContainerSecurityScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_BasicScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:BasicScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_CICDSecurityScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_CISCompliantScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_DevelopmentScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_EdgeComputingScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_HardenedScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:HardenedScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_HighRiskScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_HybridCloudScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_ImageSecurityFocusedScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_MicroservicesScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_MixedScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:MixedScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_NISTCompliantScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_NetworkHardenedScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_OWASPCheatSheetCompliantScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_OWASPTop10CompliantScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_OutdatedContainersScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_ProductionScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:ProductionScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_RapidPrototypeScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureAttack_RuntimeHardenedScenario csro:ContainerPrivilegedPortTrafficCaptureAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPrivilegedPortTrafficCapture ; csro:causesImpact csro:TrafficInterception ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerPrivilegedPortTrafficCapture attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureExploitabilityRule csro:ContainerPrivilegedPortTrafficCaptureExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerPrivilegedPortTrafficCapture ; csro:hasWeight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_AUTH-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_AUTH-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_AUTH-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-5_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-6_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_HIS-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_HIS-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_HIS-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-5_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-6_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-5_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-6_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-7_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-8_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_NET-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_NET-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_NET-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_NET-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-5_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-6_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-7_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerPrivilegedPortTrafficCapture attack technique" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCaptureExposureRule csro:ContainerPrivilegedPortTrafficCaptureExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerPrivilegedPortTrafficCapture ; csro:hasWeight csro:ContainerPrivilegedPortTrafficCapture_Exposure_AUTH-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_AUTH-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_AUTH-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-5_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-6_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_CRM-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_CRM-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_CRM-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_CRM-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_HIS-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_HIS-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_HIS-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-5_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-6_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-5_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-6_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-7_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-8_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_NET-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_NET-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_NET-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_NET-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-4_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-5_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-6_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-7_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_SCM-1_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_SCM-2_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_SCM-3_Weight , csro:ContainerPrivilegedPortTrafficCapture_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerPrivilegedPortTrafficCapture attack technique" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_AUTH-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication of container APIs does not prevent them from binding privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_AUTH-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to counter privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_AUTH-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to counter privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-5_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-6_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not increase the difficulty of binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess what a container the binds a privileged port can do" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_HIS-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to manage port bindings of containers and detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_HIS-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "An immutable host infrastructure does not prevent binding of privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_HIS-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to manage port bindings of containers and detect malicious activities" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-5_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-6_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not make binding privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_MON-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_MON-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_MON-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_MON-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_MON-5_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_MON-6_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_MON-7_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_MON-8_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make binding of privileged ports more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_NET-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_NET-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_NET-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_NET-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not prevent or make port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-5_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-6_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-7_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not make privileged port binding more difficult" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not mitigate privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_AUTH-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication of container APIs does not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_AUTH-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to detect and react to privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_AUTH-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 3.0 ; csro:effectDescription "Authentication and access control measures for container management are essential to detect and react to privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_CIC-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_CIC-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_CIC-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_CIC-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_CIC-5_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_CIC-6_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls support the identification of the containers intent and reason for binding a privileged port" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_CRM-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_CRM-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_CRM-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_CRM-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess how prominent a container that binds a privileged port is in its environment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_HIS-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to detect unauthorized port bindings of containers" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_HIS-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "An immutable host infrastructure does not detect binding of privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_HIS-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security helps to detect unauthorized port bindings of containers" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_IMG-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_IMG-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_IMG-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_IMG-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_IMG-5_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_IMG-6_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 1.0 ; csro:effectDescription "Container image security practices help identifying containers that bind privileged ports and discovering why they do it" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_MON-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_MON-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_MON-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_MON-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_MON-5_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_MON-6_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_MON-7_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_MON-8_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring and detection controls do not prevent binding of privileged ports, but they help identifying malicious activities and the intention of container deployment" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_NET-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_NET-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_NET-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_NET-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 2.0 ; csro:effectDescription "Container network security controls support the management and identification of services that bind privileged ports" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_RTS-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_RTS-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_RTS-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_RTS-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_RTS-5_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_RTS-6_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_RTS-7_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not support the detection of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_SCM-1_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_SCM-2_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_SCM-3_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPrivilegedPortTrafficCapture_Exposure_SCM-4_Weight csro:ContainerPrivilegedPortTrafficCapture_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not support the detection and exposure of privileged port binding" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection csro:ContainerPtraceInjection rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Medium ; csro:referencesAttackTechnique d3f:T1055.008 ; csro:requiresTrait csro:cap_add_CAP_SYS_PTRACE , csro:host_pid ; csro:description "Using ptrace system calls for process injection to achieve container escape in environments with CAP_SYS_PTRACE capability and host PID namespace access" ; rdfs:label "Container Ptrace Injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_AirGappedScenario csro:ContainerPtraceInjectionAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerPtraceInjection attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_BalancedContainerSecurityScenario csro:ContainerPtraceInjectionAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerPtraceInjection attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_BasicContainerSecurityScenario csro:ContainerPtraceInjectionAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerPtraceInjection attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_BasicScenario csro:ContainerPtraceInjectionAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:BasicScenario ; csro:description "ContainerPtraceInjection attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_CICDSecurityScenario csro:ContainerPtraceInjectionAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerPtraceInjection attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_CISCompliantScenario csro:ContainerPtraceInjectionAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerPtraceInjection attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_DevelopmentScenario csro:ContainerPtraceInjectionAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerPtraceInjection attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_EdgeComputingScenario csro:ContainerPtraceInjectionAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerPtraceInjection attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_HardenedScenario csro:ContainerPtraceInjectionAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:HardenedScenario ; csro:description "ContainerPtraceInjection attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_HighRiskScenario csro:ContainerPtraceInjectionAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerPtraceInjection attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_HybridCloudScenario csro:ContainerPtraceInjectionAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerPtraceInjection attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_ImageSecurityFocusedScenario csro:ContainerPtraceInjectionAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerPtraceInjection attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_MicroservicesScenario csro:ContainerPtraceInjectionAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerPtraceInjection attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_MixedScenario csro:ContainerPtraceInjectionAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:MixedScenario ; csro:description "ContainerPtraceInjection attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_NISTCompliantScenario csro:ContainerPtraceInjectionAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerPtraceInjection attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_NetworkHardenedScenario csro:ContainerPtraceInjectionAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerPtraceInjection attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_OWASPCheatSheetCompliantScenario csro:ContainerPtraceInjectionAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerPtraceInjection attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_OWASPTop10CompliantScenario csro:ContainerPtraceInjectionAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerPtraceInjection attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_OutdatedContainersScenario csro:ContainerPtraceInjectionAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerPtraceInjection attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_ProductionScenario csro:ContainerPtraceInjectionAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:ProductionScenario ; csro:description "ContainerPtraceInjection attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_RapidPrototypeScenario csro:ContainerPtraceInjectionAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerPtraceInjection attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionAttack_RuntimeHardenedScenario csro:ContainerPtraceInjectionAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceInjection ; csro:causesImpact csro:HostProcessManipulation ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerPtraceInjection attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionExploitabilityRule csro:ContainerPtraceInjectionExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerPtraceInjection ; csro:hasWeight csro:ContainerPtraceInjection_Exploitability_AUTH-1_Weight , csro:ContainerPtraceInjection_Exploitability_AUTH-2_Weight , csro:ContainerPtraceInjection_Exploitability_AUTH-3_Weight , csro:ContainerPtraceInjection_Exploitability_CIC-1_Weight , csro:ContainerPtraceInjection_Exploitability_CIC-2_Weight , csro:ContainerPtraceInjection_Exploitability_CIC-3_Weight , csro:ContainerPtraceInjection_Exploitability_CIC-4_Weight , csro:ContainerPtraceInjection_Exploitability_CIC-5_Weight , csro:ContainerPtraceInjection_Exploitability_CIC-6_Weight , csro:ContainerPtraceInjection_Exploitability_CRM-1_Weight , csro:ContainerPtraceInjection_Exploitability_CRM-2_Weight , csro:ContainerPtraceInjection_Exploitability_CRM-3_Weight , csro:ContainerPtraceInjection_Exploitability_CRM-4_Weight , csro:ContainerPtraceInjection_Exploitability_HIS-1_Weight , csro:ContainerPtraceInjection_Exploitability_HIS-2_Weight , csro:ContainerPtraceInjection_Exploitability_HIS-3_Weight , csro:ContainerPtraceInjection_Exploitability_IMG-1_Weight , csro:ContainerPtraceInjection_Exploitability_IMG-2_Weight , csro:ContainerPtraceInjection_Exploitability_IMG-3_Weight , csro:ContainerPtraceInjection_Exploitability_IMG-4_Weight , csro:ContainerPtraceInjection_Exploitability_IMG-5_Weight , csro:ContainerPtraceInjection_Exploitability_IMG-6_Weight , csro:ContainerPtraceInjection_Exploitability_MON-1_Weight , csro:ContainerPtraceInjection_Exploitability_MON-2_Weight , csro:ContainerPtraceInjection_Exploitability_MON-3_Weight , csro:ContainerPtraceInjection_Exploitability_MON-4_Weight , csro:ContainerPtraceInjection_Exploitability_MON-5_Weight , csro:ContainerPtraceInjection_Exploitability_MON-6_Weight , csro:ContainerPtraceInjection_Exploitability_MON-7_Weight , csro:ContainerPtraceInjection_Exploitability_MON-8_Weight , csro:ContainerPtraceInjection_Exploitability_NET-1_Weight , csro:ContainerPtraceInjection_Exploitability_NET-2_Weight , csro:ContainerPtraceInjection_Exploitability_NET-3_Weight , csro:ContainerPtraceInjection_Exploitability_NET-4_Weight , csro:ContainerPtraceInjection_Exploitability_RTS-1_Weight , csro:ContainerPtraceInjection_Exploitability_RTS-2_Weight , csro:ContainerPtraceInjection_Exploitability_RTS-3_Weight , csro:ContainerPtraceInjection_Exploitability_RTS-4_Weight , csro:ContainerPtraceInjection_Exploitability_RTS-5_Weight , csro:ContainerPtraceInjection_Exploitability_RTS-6_Weight , csro:ContainerPtraceInjection_Exploitability_RTS-7_Weight , csro:ContainerPtraceInjection_Exploitability_SCM-1_Weight , csro:ContainerPtraceInjection_Exploitability_SCM-2_Weight , csro:ContainerPtraceInjection_Exploitability_SCM-3_Weight , csro:ContainerPtraceInjection_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerPtraceInjection attack technique" . ### https://w3id.org/csro/ontology#ContainerPtraceInjectionExposureRule csro:ContainerPtraceInjectionExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerPtraceInjection ; csro:hasWeight csro:ContainerPtraceInjection_Exposure_AUTH-1_Weight , csro:ContainerPtraceInjection_Exposure_AUTH-2_Weight , csro:ContainerPtraceInjection_Exposure_AUTH-3_Weight , csro:ContainerPtraceInjection_Exposure_CIC-1_Weight , csro:ContainerPtraceInjection_Exposure_CIC-2_Weight , csro:ContainerPtraceInjection_Exposure_CIC-3_Weight , csro:ContainerPtraceInjection_Exposure_CIC-4_Weight , csro:ContainerPtraceInjection_Exposure_CIC-5_Weight , csro:ContainerPtraceInjection_Exposure_CIC-6_Weight , csro:ContainerPtraceInjection_Exposure_CRM-1_Weight , csro:ContainerPtraceInjection_Exposure_CRM-2_Weight , csro:ContainerPtraceInjection_Exposure_CRM-3_Weight , csro:ContainerPtraceInjection_Exposure_CRM-4_Weight , csro:ContainerPtraceInjection_Exposure_HIS-1_Weight , csro:ContainerPtraceInjection_Exposure_HIS-2_Weight , csro:ContainerPtraceInjection_Exposure_HIS-3_Weight , csro:ContainerPtraceInjection_Exposure_IMG-1_Weight , csro:ContainerPtraceInjection_Exposure_IMG-2_Weight , csro:ContainerPtraceInjection_Exposure_IMG-3_Weight , csro:ContainerPtraceInjection_Exposure_IMG-4_Weight , csro:ContainerPtraceInjection_Exposure_IMG-5_Weight , csro:ContainerPtraceInjection_Exposure_IMG-6_Weight , csro:ContainerPtraceInjection_Exposure_MON-1_Weight , csro:ContainerPtraceInjection_Exposure_MON-2_Weight , csro:ContainerPtraceInjection_Exposure_MON-3_Weight , csro:ContainerPtraceInjection_Exposure_MON-4_Weight , csro:ContainerPtraceInjection_Exposure_MON-5_Weight , csro:ContainerPtraceInjection_Exposure_MON-6_Weight , csro:ContainerPtraceInjection_Exposure_MON-7_Weight , csro:ContainerPtraceInjection_Exposure_MON-8_Weight , csro:ContainerPtraceInjection_Exposure_NET-1_Weight , csro:ContainerPtraceInjection_Exposure_NET-2_Weight , csro:ContainerPtraceInjection_Exposure_NET-3_Weight , csro:ContainerPtraceInjection_Exposure_NET-4_Weight , csro:ContainerPtraceInjection_Exposure_RTS-1_Weight , csro:ContainerPtraceInjection_Exposure_RTS-2_Weight , csro:ContainerPtraceInjection_Exposure_RTS-3_Weight , csro:ContainerPtraceInjection_Exposure_RTS-4_Weight , csro:ContainerPtraceInjection_Exposure_RTS-5_Weight , csro:ContainerPtraceInjection_Exposure_RTS-6_Weight , csro:ContainerPtraceInjection_Exposure_RTS-7_Weight , csro:ContainerPtraceInjection_Exposure_SCM-1_Weight , csro:ContainerPtraceInjection_Exposure_SCM-2_Weight , csro:ContainerPtraceInjection_Exposure_SCM-3_Weight , csro:ContainerPtraceInjection_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerPtraceInjection attack technique" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_AUTH-1_Weight csro:ContainerPtraceInjection_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access control measures do not counter the shellcode injection attack vector" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_AUTH-2_Weight csro:ContainerPtraceInjection_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access control measures do not counter the shellcode injection attack vector" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_AUTH-3_Weight csro:ContainerPtraceInjection_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access control measures do not counter the shellcode injection attack vector" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_CIC-1_Weight csro:ContainerPtraceInjection_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help ensuring the trustworthiness of container images and identifying malicious scripts for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_CIC-2_Weight csro:ContainerPtraceInjection_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help ensuring the trustworthiness of container images and identifying malicious scripts for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_CIC-3_Weight csro:ContainerPtraceInjection_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help ensuring the trustworthiness of container images and identifying malicious scripts for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_CIC-4_Weight csro:ContainerPtraceInjection_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help ensuring the trustworthiness of container images and identifying malicious scripts for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_CIC-5_Weight csro:ContainerPtraceInjection_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help ensuring the trustworthiness of container images and identifying malicious scripts for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_CIC-6_Weight csro:ContainerPtraceInjection_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help ensuring the trustworthiness of container images and identifying malicious scripts for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_CRM-1_Weight csro:ContainerPtraceInjection_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to assess the risks of container escape threatened by shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_CRM-2_Weight csro:ContainerPtraceInjection_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to assess the risks of container escape threatened by shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_CRM-3_Weight csro:ContainerPtraceInjection_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to assess the risks of container escape threatened by shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_CRM-4_Weight csro:ContainerPtraceInjection_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to assess the risks of container escape threatened by shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_HIS-1_Weight csro:ContainerPtraceInjection_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not increase the difficulty of shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_HIS-2_Weight csro:ContainerPtraceInjection_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not increase the difficulty of shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_HIS-3_Weight csro:ContainerPtraceInjection_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not increase the difficulty of shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_IMG-1_Weight csro:ContainerPtraceInjection_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make the shellcode injection more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_IMG-2_Weight csro:ContainerPtraceInjection_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make the shellcode injection more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_IMG-3_Weight csro:ContainerPtraceInjection_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make the shellcode injection more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_IMG-4_Weight csro:ContainerPtraceInjection_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make the shellcode injection more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_IMG-5_Weight csro:ContainerPtraceInjection_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make the shellcode injection more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_IMG-6_Weight csro:ContainerPtraceInjection_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 2.0 ; csro:effectDescription "Container image security practices reduce the software footprint and make the shellcode injection more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_MON-1_Weight csro:ContainerPtraceInjection_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_MON-2_Weight csro:ContainerPtraceInjection_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_MON-3_Weight csro:ContainerPtraceInjection_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_MON-4_Weight csro:ContainerPtraceInjection_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_MON-5_Weight csro:ContainerPtraceInjection_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_MON-6_Weight csro:ContainerPtraceInjection_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_MON-7_Weight csro:ContainerPtraceInjection_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_MON-8_Weight csro:ContainerPtraceInjection_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection does not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_NET-1_Weight csro:ContainerPtraceInjection_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make the shellcode injection attack in the privileged container more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_NET-2_Weight csro:ContainerPtraceInjection_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make the shellcode injection attack in the privileged container more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_NET-3_Weight csro:ContainerPtraceInjection_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make the shellcode injection attack in the privileged container more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_NET-4_Weight csro:ContainerPtraceInjection_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not make the shellcode injection attack in the privileged container more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_RTS-1_Weight csro:ContainerPtraceInjection_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 3.0 ; csro:effectDescription "High effect - significantly reduces attack success by limiting process privileges and access to system resources" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_RTS-2_Weight csro:ContainerPtraceInjection_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 2.0 ; csro:effectDescription "Medium effect - provides moderate protection against shellcode injection by preventing file system modifications" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_RTS-3_Weight csro:ContainerPtraceInjection_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 1.0 ; csro:effectDescription "Low effect - provides basic protection by removing unnecessary Linux capabilities" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_RTS-4_Weight csro:ContainerPtraceInjection_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 3.0 ; csro:effectDescription "A tailored Seccomp profile can effectively mitigate the shellcode injection attack vector" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_RTS-5_Weight csro:ContainerPtraceInjection_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Access control policies do not prevent the shellcode injection attack" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_RTS-6_Weight csro:ContainerPtraceInjection_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Access control policies do not prevent the shellcode injection attack" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_RTS-7_Weight csro:ContainerPtraceInjection_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Reduced access to host resources (e.g., volumes, devices) does not make the shellcode more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_SCM-1_Weight csro:ContainerPtraceInjection_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_SCM-2_Weight csro:ContainerPtraceInjection_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_SCM-3_Weight csro:ContainerPtraceInjection_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exploitability_SCM-4_Weight csro:ContainerPtraceInjection_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not make the shellcode injection attack more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_AUTH-1_Weight csro:ContainerPtraceInjection_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication of container API's restricts access to the container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_AUTH-2_Weight csro:ContainerPtraceInjection_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Access control for container management and orchestration do not increase the risk of getting caught for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_AUTH-3_Weight csro:ContainerPtraceInjection_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 0.0 ; csro:effectDescription "Access control for container management and orchestration do not increase the risk of getting caught for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_CIC-1_Weight csro:ContainerPtraceInjection_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help identifying malicious scripts (e.g., introduced through dependencies) for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_CIC-2_Weight csro:ContainerPtraceInjection_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help identifying malicious scripts (e.g., introduced through dependencies) for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_CIC-3_Weight csro:ContainerPtraceInjection_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help identifying malicious scripts (e.g., introduced through dependencies) for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_CIC-4_Weight csro:ContainerPtraceInjection_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help identifying malicious scripts (e.g., introduced through dependencies) for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_CIC-5_Weight csro:ContainerPtraceInjection_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help identifying malicious scripts (e.g., introduced through dependencies) for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_CIC-6_Weight csro:ContainerPtraceInjection_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls help identifying malicious scripts (e.g., introduced through dependencies) for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_CRM-1_Weight csro:ContainerPtraceInjection_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate the assets that are exposed to the container which threatens shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_CRM-2_Weight csro:ContainerPtraceInjection_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate the assets that are exposed to the container which threatens shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_CRM-3_Weight csro:ContainerPtraceInjection_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate the assets that are exposed to the container which threatens shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_CRM-4_Weight csro:ContainerPtraceInjection_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 1.0 ; csro:effectDescription "Compliance and risk management practices help to evaluate the assets that are exposed to the container which threatens shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_HIS-1_Weight csro:ContainerPtraceInjection_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attackers access necessary for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_HIS-2_Weight csro:ContainerPtraceInjection_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attackers access necessary for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_HIS-3_Weight csro:ContainerPtraceInjection_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring of processes on the host device greatly increases the chances of detecting a shellcode injection attack" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_IMG-1_Weight csro:ContainerPtraceInjection_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not restrict the attack surface required for shellcode injection or help to detect attempted attacks" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_IMG-2_Weight csro:ContainerPtraceInjection_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not restrict the attack surface required for shellcode injection or help to detect attempted attacks" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_IMG-3_Weight csro:ContainerPtraceInjection_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not restrict the attack surface required for shellcode injection or help to detect attempted attacks" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_IMG-4_Weight csro:ContainerPtraceInjection_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not restrict the attack surface required for shellcode injection or help to detect attempted attacks" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_IMG-5_Weight csro:ContainerPtraceInjection_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not restrict the attack surface required for shellcode injection or help to detect attempted attacks" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_IMG-6_Weight csro:ContainerPtraceInjection_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not restrict the attack surface required for shellcode injection or help to detect attempted attacks" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_MON-1_Weight csro:ContainerPtraceInjection_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are necessary to detect suspicious behaviour, syscalls, and actions required for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_MON-2_Weight csro:ContainerPtraceInjection_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are necessary to detect suspicious behaviour, syscalls, and actions required for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_MON-3_Weight csro:ContainerPtraceInjection_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are necessary to detect suspicious behaviour, syscalls, and actions required for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_MON-4_Weight csro:ContainerPtraceInjection_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are necessary to detect suspicious behaviour, syscalls, and actions required for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_MON-5_Weight csro:ContainerPtraceInjection_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are necessary to detect suspicious behaviour, syscalls, and actions required for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_MON-6_Weight csro:ContainerPtraceInjection_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are necessary to detect suspicious behaviour, syscalls, and actions required for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_MON-7_Weight csro:ContainerPtraceInjection_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are necessary to detect suspicious behaviour, syscalls, and actions required for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_MON-8_Weight csro:ContainerPtraceInjection_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are necessary to detect suspicious behaviour, syscalls, and actions required for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_NET-1_Weight csro:ContainerPtraceInjection_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the privileged container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_NET-2_Weight csro:ContainerPtraceInjection_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the privileged container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_NET-3_Weight csro:ContainerPtraceInjection_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the privileged container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_NET-4_Weight csro:ContainerPtraceInjection_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the privileged container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_RTS-1_Weight csro:ContainerPtraceInjection_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attackers access to the process namespace of the host or make the attack more likely to be detected" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_RTS-2_Weight csro:ContainerPtraceInjection_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attackers access to the process namespace of the host or make the attack more likely to be detected" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_RTS-3_Weight csro:ContainerPtraceInjection_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attackers access to the process namespace of the host or make the attack more likely to be detected" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_RTS-4_Weight csro:ContainerPtraceInjection_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attackers access to the process namespace of the host or make the attack more likely to be detected" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_RTS-5_Weight csro:ContainerPtraceInjection_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attackers access to the process namespace of the host or make the attack more likely to be detected" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_RTS-6_Weight csro:ContainerPtraceInjection_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attackers access to the process namespace of the host or make the attack more likely to be detected" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_RTS-7_Weight csro:ContainerPtraceInjection_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not reduce the attackers access to the process namespace of the host or make the attack more likely to be detected" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_SCM-1_Weight csro:ContainerPtraceInjection_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not protect assets that are necessary for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_SCM-2_Weight csro:ContainerPtraceInjection_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not protect assets that are necessary for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_SCM-3_Weight csro:ContainerPtraceInjection_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not protect assets that are necessary for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceInjection_Exposure_SCM-4_Weight csro:ContainerPtraceInjection_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not protect assets that are necessary for shellcode injection" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery csro:ContainerPtraceProcessDiscovery rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Medium ; csro:referencesAttackTechnique d3f:T1057 ; csro:requiresTrait csro:cap_add_CAP_SYS_PTRACE , csro:host_pid ; csro:description "Leveraging CAP_SYS_PTRACE and host PID namespace to discover and enumerate host processes for information gathering" ; rdfs:label "Container Ptrace Process Discovery" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_AirGappedScenario csro:ContainerPtraceProcessDiscoveryAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_BalancedContainerSecurityScenario csro:ContainerPtraceProcessDiscoveryAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_BasicContainerSecurityScenario csro:ContainerPtraceProcessDiscoveryAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_BasicScenario csro:ContainerPtraceProcessDiscoveryAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:BasicScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_CICDSecurityScenario csro:ContainerPtraceProcessDiscoveryAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_CISCompliantScenario csro:ContainerPtraceProcessDiscoveryAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_DevelopmentScenario csro:ContainerPtraceProcessDiscoveryAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_EdgeComputingScenario csro:ContainerPtraceProcessDiscoveryAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_HardenedScenario csro:ContainerPtraceProcessDiscoveryAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:HardenedScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_HighRiskScenario csro:ContainerPtraceProcessDiscoveryAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_HybridCloudScenario csro:ContainerPtraceProcessDiscoveryAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_ImageSecurityFocusedScenario csro:ContainerPtraceProcessDiscoveryAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_MicroservicesScenario csro:ContainerPtraceProcessDiscoveryAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_MixedScenario csro:ContainerPtraceProcessDiscoveryAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:MixedScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_NISTCompliantScenario csro:ContainerPtraceProcessDiscoveryAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_NetworkHardenedScenario csro:ContainerPtraceProcessDiscoveryAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_OWASPCheatSheetCompliantScenario csro:ContainerPtraceProcessDiscoveryAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_OWASPTop10CompliantScenario csro:ContainerPtraceProcessDiscoveryAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_OutdatedContainersScenario csro:ContainerPtraceProcessDiscoveryAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_ProductionScenario csro:ContainerPtraceProcessDiscoveryAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:ProductionScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_RapidPrototypeScenario csro:ContainerPtraceProcessDiscoveryAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryAttack_RuntimeHardenedScenario csro:ContainerPtraceProcessDiscoveryAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerPtraceProcessDiscovery ; csro:causesImpact csro:HostProcessInformationDisclosure ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerPtraceProcessDiscovery attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryExploitabilityRule csro:ContainerPtraceProcessDiscoveryExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerPtraceProcessDiscovery ; csro:hasWeight csro:ContainerPtraceProcessDiscovery_Exploitability_AUTH-1_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_AUTH-2_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_AUTH-3_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-1_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-2_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-3_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-4_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-5_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-6_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_CRM-1_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_CRM-2_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_CRM-3_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_CRM-4_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_HIS-1_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_HIS-2_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_HIS-3_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-1_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-2_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-3_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-4_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-5_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-6_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_MON-1_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_MON-2_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_MON-3_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_MON-4_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_MON-5_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_MON-6_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_MON-7_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_MON-8_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_NET-1_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_NET-2_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_NET-3_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_NET-4_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-1_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-2_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-3_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-4_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-5_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-6_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-7_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_SCM-1_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_SCM-2_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_SCM-3_Weight , csro:ContainerPtraceProcessDiscovery_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerPtraceProcessDiscovery attack technique" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscoveryExposureRule csro:ContainerPtraceProcessDiscoveryExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerPtraceProcessDiscovery ; csro:hasWeight csro:ContainerPtraceProcessDiscovery_Exposure_AUTH-1_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_AUTH-2_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_AUTH-3_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_CIC-1_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_CIC-2_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_CIC-3_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_CIC-4_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_CIC-5_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_CIC-6_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_CRM-1_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_CRM-2_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_CRM-3_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_CRM-4_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_HIS-1_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_HIS-2_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_HIS-3_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_IMG-1_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_IMG-2_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_IMG-3_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_IMG-4_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_IMG-5_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_IMG-6_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_MON-1_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_MON-2_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_MON-3_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_MON-4_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_MON-5_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_MON-6_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_MON-7_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_MON-8_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_NET-1_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_NET-2_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_NET-3_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_NET-4_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_RTS-1_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_RTS-2_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_RTS-3_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_RTS-4_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_RTS-5_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_RTS-6_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_RTS-7_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_SCM-1_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_SCM-2_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_SCM-3_Weight , csro:ContainerPtraceProcessDiscovery_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerPtraceProcessDiscovery attack technique" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_AUTH-1_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_AUTH-2_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_AUTH-3_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_CIC-1_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_CIC-2_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_CIC-3_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_CIC-4_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_CIC-5_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_CIC-6_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 0.0 ; csro:effectDescription "CI/CD and supply chain controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_CRM-1_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management does not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_CRM-2_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management does not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_CRM-3_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management does not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_CRM-4_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Compliance and risk management does not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_HIS-1_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_HIS-2_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_HIS-3_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_IMG-1_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_IMG-2_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_IMG-3_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_IMG-4_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_IMG-5_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_IMG-6_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_MON-1_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_MON-2_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_MON-3_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_MON-4_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_MON-5_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_MON-6_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_MON-7_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_MON-8_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make process discovery more difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_NET-1_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not increase the efforts for tracing processes from the privileged container" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_NET-2_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not increase the efforts for tracing processes from the privileged container" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_NET-3_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not increase the efforts for tracing processes from the privileged container" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_NET-4_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 0.0 ; csro:effectDescription "Network security controls do not increase the efforts for tracing processes from the privileged container" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_RTS-1_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_RTS-2_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_RTS-3_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_RTS-4_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_RTS-5_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_RTS-6_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_RTS-7_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the difficulty of discovering host processes" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_SCM-1_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not have an effect on process discovery" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_SCM-2_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not have an effect on process discovery" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_SCM-3_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not have an effect on process discovery" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exploitability_SCM-4_Weight csro:ContainerPtraceProcessDiscovery_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not have an effect on process discovery" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_AUTH-1_Weight csro:ContainerPtraceProcessDiscovery_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_AUTH-2_Weight csro:ContainerPtraceProcessDiscovery_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_AUTH-3_Weight csro:ContainerPtraceProcessDiscovery_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to the container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_CIC-1_Weight csro:ContainerPtraceProcessDiscovery_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness of the privileged application, which reduces the likelihood of malicious activity" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_CIC-2_Weight csro:ContainerPtraceProcessDiscovery_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness of the privileged application, which reduces the likelihood of malicious activity" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_CIC-3_Weight csro:ContainerPtraceProcessDiscovery_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness of the privileged application, which reduces the likelihood of malicious activity" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_CIC-4_Weight csro:ContainerPtraceProcessDiscovery_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness of the privileged application, which reduces the likelihood of malicious activity" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_CIC-5_Weight csro:ContainerPtraceProcessDiscovery_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness of the privileged application, which reduces the likelihood of malicious activity" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_CIC-6_Weight csro:ContainerPtraceProcessDiscovery_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 2.0 ; csro:effectDescription "CI/CD and supply chain controls increase trustworthiness of the privileged application, which reduces the likelihood of malicious activity" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_CRM-1_Weight csro:ContainerPtraceProcessDiscovery_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess which processes a privileged container can trace in its environment" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_CRM-2_Weight csro:ContainerPtraceProcessDiscovery_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess which processes a privileged container can trace in its environment" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_CRM-3_Weight csro:ContainerPtraceProcessDiscovery_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess which processes a privileged container can trace in its environment" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_CRM-4_Weight csro:ContainerPtraceProcessDiscovery_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices help to assess which processes a privileged container can trace in its environment" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_HIS-1_Weight csro:ContainerPtraceProcessDiscovery_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not support in identifying unauthorized process discovery" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_HIS-2_Weight csro:ContainerPtraceProcessDiscovery_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not support in identifying unauthorized process discovery" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_HIS-3_Weight csro:ContainerPtraceProcessDiscovery_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 1.0 ; csro:effectDescription "Monitoring which processes are traced by the container helps identifying malicious activities" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_IMG-1_Weight csro:ContainerPtraceProcessDiscovery_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the risk of getting caught or reduce the attack surface of the container" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_IMG-2_Weight csro:ContainerPtraceProcessDiscovery_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the risk of getting caught or reduce the attack surface of the container" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_IMG-3_Weight csro:ContainerPtraceProcessDiscovery_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the risk of getting caught or reduce the attack surface of the container" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_IMG-4_Weight csro:ContainerPtraceProcessDiscovery_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the risk of getting caught or reduce the attack surface of the container" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_IMG-5_Weight csro:ContainerPtraceProcessDiscovery_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the risk of getting caught or reduce the attack surface of the container" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_IMG-6_Weight csro:ContainerPtraceProcessDiscovery_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 0.0 ; csro:effectDescription "Container image security practices do not increase the risk of getting caught or reduce the attack surface of the container" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_MON-1_Weight csro:ContainerPtraceProcessDiscovery_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 1.0 ; csro:effectDescription "As monitoring is the desired functionality of these containers, identifying extensive/malicious activities is possible, but difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_MON-2_Weight csro:ContainerPtraceProcessDiscovery_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 1.0 ; csro:effectDescription "As monitoring is the desired functionality of these containers, identifying extensive/malicious activities is possible, but difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_MON-3_Weight csro:ContainerPtraceProcessDiscovery_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 1.0 ; csro:effectDescription "As monitoring is the desired functionality of these containers, identifying extensive/malicious activities is possible, but difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_MON-4_Weight csro:ContainerPtraceProcessDiscovery_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 1.0 ; csro:effectDescription "As monitoring is the desired functionality of these containers, identifying extensive/malicious activities is possible, but difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_MON-5_Weight csro:ContainerPtraceProcessDiscovery_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 1.0 ; csro:effectDescription "As monitoring is the desired functionality of these containers, identifying extensive/malicious activities is possible, but difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_MON-6_Weight csro:ContainerPtraceProcessDiscovery_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 1.0 ; csro:effectDescription "As monitoring is the desired functionality of these containers, identifying extensive/malicious activities is possible, but difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_MON-7_Weight csro:ContainerPtraceProcessDiscovery_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 1.0 ; csro:effectDescription "As monitoring is the desired functionality of these containers, identifying extensive/malicious activities is possible, but difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_MON-8_Weight csro:ContainerPtraceProcessDiscovery_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 1.0 ; csro:effectDescription "As monitoring is the desired functionality of these containers, identifying extensive/malicious activities is possible, but difficult" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_NET-1_Weight csro:ContainerPtraceProcessDiscovery_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container which has access to the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_NET-2_Weight csro:ContainerPtraceProcessDiscovery_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container which has access to the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_NET-3_Weight csro:ContainerPtraceProcessDiscovery_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container which has access to the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_NET-4_Weight csro:ContainerPtraceProcessDiscovery_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit access to the container which has access to the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_RTS-1_Weight csro:ContainerPtraceProcessDiscovery_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the risk of getting caught for running the ptrace syscall" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_RTS-2_Weight csro:ContainerPtraceProcessDiscovery_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the risk of getting caught for running the ptrace syscall" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_RTS-3_Weight csro:ContainerPtraceProcessDiscovery_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the risk of getting caught for running the ptrace syscall" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_RTS-4_Weight csro:ContainerPtraceProcessDiscovery_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the risk of getting caught for running the ptrace syscall" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_RTS-5_Weight csro:ContainerPtraceProcessDiscovery_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the risk of getting caught for running the ptrace syscall" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_RTS-6_Weight csro:ContainerPtraceProcessDiscovery_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the risk of getting caught for running the ptrace syscall" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_RTS-7_Weight csro:ContainerPtraceProcessDiscovery_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not increase the risk of getting caught for running the ptrace syscall" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_SCM-1_Weight csro:ContainerPtraceProcessDiscovery_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attacker's access to the container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_SCM-2_Weight csro:ContainerPtraceProcessDiscovery_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attacker's access to the container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_SCM-3_Weight csro:ContainerPtraceProcessDiscovery_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attacker's access to the container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerPtraceProcessDiscovery_Exposure_SCM-4_Weight csro:ContainerPtraceProcessDiscovery_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management controls do not reduce the attacker's access to the container in the pid namespace of the host" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape csro:ContainerSystemAdminEscape rdf:type owl:NamedIndividual , csro:ContainerAttackTechnique ; csro:hasBaseDifficulty csro:Medium ; csro:referencesAttackTechnique d3f:T1611 ; csro:requiresTrait csro:cap_add_CAP_SYS_ADMIN ; csro:description "Leveraging CAP_SYS_ADMIN capability to perform container escape through mounting host filesystems, manipulating namespaces, or exploiting kernel interfaces" ; rdfs:label "Container System Admin Escape" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_AirGappedScenario csro:ContainerSystemAdminEscapeAttack_AirGappedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:AirGappedScenario ; csro:description "ContainerSystemAdminEscape attack applied in AirGappedScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_BalancedContainerSecurityScenario csro:ContainerSystemAdminEscapeAttack_BalancedContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:BalancedContainerSecurityScenario ; csro:description "ContainerSystemAdminEscape attack applied in BalancedContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_BasicContainerSecurityScenario csro:ContainerSystemAdminEscapeAttack_BasicContainerSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:BasicContainerSecurityScenario ; csro:description "ContainerSystemAdminEscape attack applied in BasicContainerSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_BasicScenario csro:ContainerSystemAdminEscapeAttack_BasicScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:BasicScenario ; csro:description "ContainerSystemAdminEscape attack applied in BasicScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_CICDSecurityScenario csro:ContainerSystemAdminEscapeAttack_CICDSecurityScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:CICDSecurityScenario ; csro:description "ContainerSystemAdminEscape attack applied in CICDSecurityScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_CISCompliantScenario csro:ContainerSystemAdminEscapeAttack_CISCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:CISCompliantScenario ; csro:description "ContainerSystemAdminEscape attack applied in CISCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_DevelopmentScenario csro:ContainerSystemAdminEscapeAttack_DevelopmentScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:DevelopmentScenario ; csro:description "ContainerSystemAdminEscape attack applied in DevelopmentScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_EdgeComputingScenario csro:ContainerSystemAdminEscapeAttack_EdgeComputingScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:EdgeComputingScenario ; csro:description "ContainerSystemAdminEscape attack applied in EdgeComputingScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_HardenedScenario csro:ContainerSystemAdminEscapeAttack_HardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:HardenedScenario ; csro:description "ContainerSystemAdminEscape attack applied in HardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_HighRiskScenario csro:ContainerSystemAdminEscapeAttack_HighRiskScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:HighRiskScenario ; csro:description "ContainerSystemAdminEscape attack applied in HighRiskScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_HybridCloudScenario csro:ContainerSystemAdminEscapeAttack_HybridCloudScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:HybridCloudScenario ; csro:description "ContainerSystemAdminEscape attack applied in HybridCloudScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_ImageSecurityFocusedScenario csro:ContainerSystemAdminEscapeAttack_ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:ImageSecurityFocusedScenario ; csro:description "ContainerSystemAdminEscape attack applied in ImageSecurityFocusedScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_MicroservicesScenario csro:ContainerSystemAdminEscapeAttack_MicroservicesScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:MicroservicesScenario ; csro:description "ContainerSystemAdminEscape attack applied in MicroservicesScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_MixedScenario csro:ContainerSystemAdminEscapeAttack_MixedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:MixedScenario ; csro:description "ContainerSystemAdminEscape attack applied in MixedScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_NISTCompliantScenario csro:ContainerSystemAdminEscapeAttack_NISTCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:NISTCompliantScenario ; csro:description "ContainerSystemAdminEscape attack applied in NISTCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_NetworkHardenedScenario csro:ContainerSystemAdminEscapeAttack_NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:NetworkHardenedScenario ; csro:description "ContainerSystemAdminEscape attack applied in NetworkHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_OWASPCheatSheetCompliantScenario csro:ContainerSystemAdminEscapeAttack_OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:OWASPCheatSheetCompliantScenario ; csro:description "ContainerSystemAdminEscape attack applied in OWASPCheatSheetCompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_OWASPTop10CompliantScenario csro:ContainerSystemAdminEscapeAttack_OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:OWASPTop10CompliantScenario ; csro:description "ContainerSystemAdminEscape attack applied in OWASPTop10CompliantScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_OutdatedContainersScenario csro:ContainerSystemAdminEscapeAttack_OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:OutdatedContainersScenario ; csro:description "ContainerSystemAdminEscape attack applied in OutdatedContainersScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_ProductionScenario csro:ContainerSystemAdminEscapeAttack_ProductionScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:ProductionScenario ; csro:description "ContainerSystemAdminEscape attack applied in ProductionScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_RapidPrototypeScenario csro:ContainerSystemAdminEscapeAttack_RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:RapidPrototypeScenario ; csro:description "ContainerSystemAdminEscape attack applied in RapidPrototypeScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeAttack_RuntimeHardenedScenario csro:ContainerSystemAdminEscapeAttack_RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:AttackAction ; csro:affects csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:appliesTechnique csro:ContainerSystemAdminEscape ; csro:causesImpact csro:ContainerEscapeImpact ; csro:inContext csro:RuntimeHardenedScenario ; csro:description "ContainerSystemAdminEscape attack applied in RuntimeHardenedScenario context" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeExploitabilityRule csro:ContainerSystemAdminEscapeExploitabilityRule rdf:type owl:NamedIndividual , csro:ExploitabilityCalculationRule ; csro:appliesTo csro:ContainerSystemAdminEscape ; csro:hasWeight csro:ContainerSystemAdminEscape_Exploitability_AUTH-1_Weight , csro:ContainerSystemAdminEscape_Exploitability_AUTH-2_Weight , csro:ContainerSystemAdminEscape_Exploitability_AUTH-3_Weight , csro:ContainerSystemAdminEscape_Exploitability_CIC-1_Weight , csro:ContainerSystemAdminEscape_Exploitability_CIC-2_Weight , csro:ContainerSystemAdminEscape_Exploitability_CIC-3_Weight , csro:ContainerSystemAdminEscape_Exploitability_CIC-4_Weight , csro:ContainerSystemAdminEscape_Exploitability_CIC-5_Weight , csro:ContainerSystemAdminEscape_Exploitability_CIC-6_Weight , csro:ContainerSystemAdminEscape_Exploitability_CRM-1_Weight , csro:ContainerSystemAdminEscape_Exploitability_CRM-2_Weight , csro:ContainerSystemAdminEscape_Exploitability_CRM-3_Weight , csro:ContainerSystemAdminEscape_Exploitability_CRM-4_Weight , csro:ContainerSystemAdminEscape_Exploitability_HIS-1_Weight , csro:ContainerSystemAdminEscape_Exploitability_HIS-2_Weight , csro:ContainerSystemAdminEscape_Exploitability_HIS-3_Weight , csro:ContainerSystemAdminEscape_Exploitability_IMG-1_Weight , csro:ContainerSystemAdminEscape_Exploitability_IMG-2_Weight , csro:ContainerSystemAdminEscape_Exploitability_IMG-3_Weight , csro:ContainerSystemAdminEscape_Exploitability_IMG-4_Weight , csro:ContainerSystemAdminEscape_Exploitability_IMG-5_Weight , csro:ContainerSystemAdminEscape_Exploitability_IMG-6_Weight , csro:ContainerSystemAdminEscape_Exploitability_MON-1_Weight , csro:ContainerSystemAdminEscape_Exploitability_MON-2_Weight , csro:ContainerSystemAdminEscape_Exploitability_MON-3_Weight , csro:ContainerSystemAdminEscape_Exploitability_MON-4_Weight , csro:ContainerSystemAdminEscape_Exploitability_MON-5_Weight , csro:ContainerSystemAdminEscape_Exploitability_MON-6_Weight , csro:ContainerSystemAdminEscape_Exploitability_MON-7_Weight , csro:ContainerSystemAdminEscape_Exploitability_MON-8_Weight , csro:ContainerSystemAdminEscape_Exploitability_NET-1_Weight , csro:ContainerSystemAdminEscape_Exploitability_NET-2_Weight , csro:ContainerSystemAdminEscape_Exploitability_NET-3_Weight , csro:ContainerSystemAdminEscape_Exploitability_NET-4_Weight , csro:ContainerSystemAdminEscape_Exploitability_RTS-1_Weight , csro:ContainerSystemAdminEscape_Exploitability_RTS-2_Weight , csro:ContainerSystemAdminEscape_Exploitability_RTS-3_Weight , csro:ContainerSystemAdminEscape_Exploitability_RTS-4_Weight , csro:ContainerSystemAdminEscape_Exploitability_RTS-5_Weight , csro:ContainerSystemAdminEscape_Exploitability_RTS-6_Weight , csro:ContainerSystemAdminEscape_Exploitability_RTS-7_Weight , csro:ContainerSystemAdminEscape_Exploitability_SCM-1_Weight , csro:ContainerSystemAdminEscape_Exploitability_SCM-2_Weight , csro:ContainerSystemAdminEscape_Exploitability_SCM-3_Weight , csro:ContainerSystemAdminEscape_Exploitability_SCM-4_Weight ; csro:description "Calculation rule for exploitability rating of ContainerSystemAdminEscape attack technique" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscapeExposureRule csro:ContainerSystemAdminEscapeExposureRule rdf:type owl:NamedIndividual , csro:ExposureCalculationRule ; csro:appliesTo csro:ContainerSystemAdminEscape ; csro:hasWeight csro:ContainerSystemAdminEscape_Exposure_AUTH-1_Weight , csro:ContainerSystemAdminEscape_Exposure_AUTH-2_Weight , csro:ContainerSystemAdminEscape_Exposure_AUTH-3_Weight , csro:ContainerSystemAdminEscape_Exposure_CIC-1_Weight , csro:ContainerSystemAdminEscape_Exposure_CIC-2_Weight , csro:ContainerSystemAdminEscape_Exposure_CIC-3_Weight , csro:ContainerSystemAdminEscape_Exposure_CIC-4_Weight , csro:ContainerSystemAdminEscape_Exposure_CIC-5_Weight , csro:ContainerSystemAdminEscape_Exposure_CIC-6_Weight , csro:ContainerSystemAdminEscape_Exposure_CRM-1_Weight , csro:ContainerSystemAdminEscape_Exposure_CRM-2_Weight , csro:ContainerSystemAdminEscape_Exposure_CRM-3_Weight , csro:ContainerSystemAdminEscape_Exposure_CRM-4_Weight , csro:ContainerSystemAdminEscape_Exposure_HIS-1_Weight , csro:ContainerSystemAdminEscape_Exposure_HIS-2_Weight , csro:ContainerSystemAdminEscape_Exposure_HIS-3_Weight , csro:ContainerSystemAdminEscape_Exposure_IMG-1_Weight , csro:ContainerSystemAdminEscape_Exposure_IMG-2_Weight , csro:ContainerSystemAdminEscape_Exposure_IMG-3_Weight , csro:ContainerSystemAdminEscape_Exposure_IMG-4_Weight , csro:ContainerSystemAdminEscape_Exposure_IMG-5_Weight , csro:ContainerSystemAdminEscape_Exposure_IMG-6_Weight , csro:ContainerSystemAdminEscape_Exposure_MON-1_Weight , csro:ContainerSystemAdminEscape_Exposure_MON-2_Weight , csro:ContainerSystemAdminEscape_Exposure_MON-3_Weight , csro:ContainerSystemAdminEscape_Exposure_MON-4_Weight , csro:ContainerSystemAdminEscape_Exposure_MON-5_Weight , csro:ContainerSystemAdminEscape_Exposure_MON-6_Weight , csro:ContainerSystemAdminEscape_Exposure_MON-7_Weight , csro:ContainerSystemAdminEscape_Exposure_MON-8_Weight , csro:ContainerSystemAdminEscape_Exposure_NET-1_Weight , csro:ContainerSystemAdminEscape_Exposure_NET-2_Weight , csro:ContainerSystemAdminEscape_Exposure_NET-3_Weight , csro:ContainerSystemAdminEscape_Exposure_NET-4_Weight , csro:ContainerSystemAdminEscape_Exposure_RTS-1_Weight , csro:ContainerSystemAdminEscape_Exposure_RTS-2_Weight , csro:ContainerSystemAdminEscape_Exposure_RTS-3_Weight , csro:ContainerSystemAdminEscape_Exposure_RTS-4_Weight , csro:ContainerSystemAdminEscape_Exposure_RTS-5_Weight , csro:ContainerSystemAdminEscape_Exposure_RTS-6_Weight , csro:ContainerSystemAdminEscape_Exposure_RTS-7_Weight , csro:ContainerSystemAdminEscape_Exposure_SCM-1_Weight , csro:ContainerSystemAdminEscape_Exposure_SCM-2_Weight , csro:ContainerSystemAdminEscape_Exposure_SCM-3_Weight , csro:ContainerSystemAdminEscape_Exposure_SCM-4_Weight ; csro:description "Calculation rule for exposure rating of ContainerSystemAdminEscape attack technique" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_AUTH-1_Weight csro:ContainerSystemAdminEscape_Exploitability_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not increase the difficulty of attacks enabled by SYS_ADMIN" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_AUTH-2_Weight csro:ContainerSystemAdminEscape_Exploitability_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not increase the difficulty of attacks enabled by SYS_ADMIN" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_AUTH-3_Weight csro:ContainerSystemAdminEscape_Exploitability_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 0.0 ; csro:effectDescription "Authentication and access controls do not increase the difficulty of attacks enabled by SYS_ADMIN" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_CIC-1_Weight csro:ContainerSystemAdminEscape_Exploitability_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to make attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_CIC-2_Weight csro:ContainerSystemAdminEscape_Exploitability_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to make attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_CIC-3_Weight csro:ContainerSystemAdminEscape_Exploitability_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to make attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_CIC-4_Weight csro:ContainerSystemAdminEscape_Exploitability_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to make attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_CIC-5_Weight csro:ContainerSystemAdminEscape_Exploitability_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to make attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_CIC-6_Weight csro:ContainerSystemAdminEscape_Exploitability_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to make attacks more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_CRM-1_Weight csro:ContainerSystemAdminEscape_Exploitability_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices are necessary to assess the capabilities and boundaries of a container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_CRM-2_Weight csro:ContainerSystemAdminEscape_Exploitability_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices are necessary to assess the capabilities and boundaries of a container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_CRM-3_Weight csro:ContainerSystemAdminEscape_Exploitability_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices are necessary to assess the capabilities and boundaries of a container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_CRM-4_Weight csro:ContainerSystemAdminEscape_Exploitability_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices are necessary to assess the capabilities and boundaries of a container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_HIS-1_Weight csro:ContainerSystemAdminEscape_Exploitability_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security makes attacks exploiting the SYS_ADMIN capability more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_HIS-2_Weight csro:ContainerSystemAdminEscape_Exploitability_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security makes attacks exploiting the SYS_ADMIN capability more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_HIS-3_Weight csro:ContainerSystemAdminEscape_Exploitability_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Host infrastructure security makes attacks exploiting the SYS_ADMIN capability more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_IMG-1_Weight csro:ContainerSystemAdminEscape_Exploitability_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices greatly reduce the capabilities of a highly privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_IMG-2_Weight csro:ContainerSystemAdminEscape_Exploitability_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices greatly reduce the capabilities of a highly privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_IMG-3_Weight csro:ContainerSystemAdminEscape_Exploitability_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices greatly reduce the capabilities of a highly privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_IMG-4_Weight csro:ContainerSystemAdminEscape_Exploitability_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices greatly reduce the capabilities of a highly privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_IMG-5_Weight csro:ContainerSystemAdminEscape_Exploitability_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices greatly reduce the capabilities of a highly privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_IMG-6_Weight csro:ContainerSystemAdminEscape_Exploitability_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices greatly reduce the capabilities of a highly privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_MON-1_Weight csro:ContainerSystemAdminEscape_Exploitability_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make container escapes enabled by SYS_ADMIN more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_MON-2_Weight csro:ContainerSystemAdminEscape_Exploitability_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make container escapes enabled by SYS_ADMIN more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_MON-3_Weight csro:ContainerSystemAdminEscape_Exploitability_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make container escapes enabled by SYS_ADMIN more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_MON-4_Weight csro:ContainerSystemAdminEscape_Exploitability_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make container escapes enabled by SYS_ADMIN more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_MON-5_Weight csro:ContainerSystemAdminEscape_Exploitability_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make container escapes enabled by SYS_ADMIN more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_MON-6_Weight csro:ContainerSystemAdminEscape_Exploitability_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make container escapes enabled by SYS_ADMIN more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_MON-7_Weight csro:ContainerSystemAdminEscape_Exploitability_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make container escapes enabled by SYS_ADMIN more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_MON-8_Weight csro:ContainerSystemAdminEscape_Exploitability_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 0.0 ; csro:effectDescription "Monitoring and detection controls do not make container escapes enabled by SYS_ADMIN more difficult" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_NET-1_Weight csro:ContainerSystemAdminEscape_Exploitability_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit the capabilities of a highly-privileged container with SYS_ADMIN, e.g. which components in the environment to affect" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_NET-2_Weight csro:ContainerSystemAdminEscape_Exploitability_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit the capabilities of a highly-privileged container with SYS_ADMIN, e.g. which components in the environment to affect" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_NET-3_Weight csro:ContainerSystemAdminEscape_Exploitability_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit the capabilities of a highly-privileged container with SYS_ADMIN, e.g. which components in the environment to affect" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_NET-4_Weight csro:ContainerSystemAdminEscape_Exploitability_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 2.0 ; csro:effectDescription "Network security controls limit the capabilities of a highly-privileged container with SYS_ADMIN, e.g. which components in the environment to affect" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_RTS-1_Weight csro:ContainerSystemAdminEscape_Exploitability_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls limit container privileges and restrict access to host resources, which is an approach to restrict containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_RTS-2_Weight csro:ContainerSystemAdminEscape_Exploitability_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls limit container privileges and restrict access to host resources, which is an approach to restrict containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_RTS-3_Weight csro:ContainerSystemAdminEscape_Exploitability_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls limit container privileges and restrict access to host resources, which is an approach to restrict containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_RTS-4_Weight csro:ContainerSystemAdminEscape_Exploitability_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls limit container privileges and restrict access to host resources, which is an approach to restrict containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_RTS-5_Weight csro:ContainerSystemAdminEscape_Exploitability_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls limit container privileges and restrict access to host resources, which is an approach to restrict containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_RTS-6_Weight csro:ContainerSystemAdminEscape_Exploitability_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls limit container privileges and restrict access to host resources, which is an approach to restrict containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_RTS-7_Weight csro:ContainerSystemAdminEscape_Exploitability_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 3.0 ; csro:effectDescription "Runtime security controls limit container privileges and restrict access to host resources, which is an approach to restrict containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_SCM-1_Weight csro:ContainerSystemAdminEscape_Exploitability_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 1.0 ; csro:effectDescription "Secrets and config management can limit the capabilities of a highly-privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_SCM-2_Weight csro:ContainerSystemAdminEscape_Exploitability_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 1.0 ; csro:effectDescription "Secrets and config management can limit the capabilities of a highly-privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_SCM-3_Weight csro:ContainerSystemAdminEscape_Exploitability_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 1.0 ; csro:effectDescription "Secrets and config management can limit the capabilities of a highly-privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exploitability_SCM-4_Weight csro:ContainerSystemAdminEscape_Exploitability_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 1.0 ; csro:effectDescription "Secrets and config management can limit the capabilities of a highly-privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_AUTH-1_Weight csro:ContainerSystemAdminEscape_Exposure_AUTH-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_1 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to highly-privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_AUTH-2_Weight csro:ContainerSystemAdminEscape_Exposure_AUTH-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_2 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to highly-privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_AUTH-3_Weight csro:ContainerSystemAdminEscape_Exposure_AUTH-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:AUTH_3 ; csro:weightValue 2.0 ; csro:effectDescription "Authentication and access controls prevent unauthorized access to highly-privileged container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_CIC-1_Weight csro:ContainerSystemAdminEscape_Exposure_CIC-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_1 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to identify the intent to escape the container" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_CIC-2_Weight csro:ContainerSystemAdminEscape_Exposure_CIC-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_2 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to identify the intent to escape the container" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_CIC-3_Weight csro:ContainerSystemAdminEscape_Exposure_CIC-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_3 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to identify the intent to escape the container" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_CIC-4_Weight csro:ContainerSystemAdminEscape_Exposure_CIC-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_4 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to identify the intent to escape the container" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_CIC-5_Weight csro:ContainerSystemAdminEscape_Exposure_CIC-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_5 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to identify the intent to escape the container" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_CIC-6_Weight csro:ContainerSystemAdminEscape_Exposure_CIC-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CIC_6 ; csro:weightValue 1.0 ; csro:effectDescription "CI/CD and supply chain controls are useful to evaluate the trustwortiness of highly-privileged containers with the SYS_ADMIN capability, but provide limited measures to identify the intent to escape the container" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_CRM-1_Weight csro:ContainerSystemAdminEscape_Exposure_CRM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_1 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices are necessary to assess the attack surface of a highly-privileged container with the SYS_ADMIN capability and identify detection measures" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_CRM-2_Weight csro:ContainerSystemAdminEscape_Exposure_CRM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_2 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices are necessary to assess the attack surface of a highly-privileged container with the SYS_ADMIN capability and identify detection measures" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_CRM-3_Weight csro:ContainerSystemAdminEscape_Exposure_CRM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_3 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices are necessary to assess the attack surface of a highly-privileged container with the SYS_ADMIN capability and identify detection measures" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_CRM-4_Weight csro:ContainerSystemAdminEscape_Exposure_CRM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:CRM_4 ; csro:weightValue 2.0 ; csro:effectDescription "Compliance and risk management practices are necessary to assess the attack surface of a highly-privileged container with the SYS_ADMIN capability and identify detection measures" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_HIS-1_Weight csro:ContainerSystemAdminEscape_Exposure_HIS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface of a container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_HIS-2_Weight csro:ContainerSystemAdminEscape_Exposure_HIS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Host infrastructure security does not reduce the attack surface of a container with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_HIS-3_Weight csro:ContainerSystemAdminEscape_Exposure_HIS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:HIS_3 ; csro:weightValue 2.0 ; csro:effectDescription "Monitoring on the host device supports the detection of container escapes based on the SYS_ADMIN privilege" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_IMG-1_Weight csro:ContainerSystemAdminEscape_Exposure_IMG-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_1 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities for highly privileged containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_IMG-2_Weight csro:ContainerSystemAdminEscape_Exposure_IMG-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_2 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities for highly privileged containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_IMG-3_Weight csro:ContainerSystemAdminEscape_Exposure_IMG-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_3 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities for highly privileged containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_IMG-4_Weight csro:ContainerSystemAdminEscape_Exposure_IMG-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_4 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities for highly privileged containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_IMG-5_Weight csro:ContainerSystemAdminEscape_Exposure_IMG-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_5 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities for highly privileged containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_IMG-6_Weight csro:ContainerSystemAdminEscape_Exposure_IMG-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:IMG_6 ; csro:weightValue 3.0 ; csro:effectDescription "Container image security practices reduce the software footprint and likelihood of exploitable vulnerabilities for highly privileged containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_MON-1_Weight csro:ContainerSystemAdminEscape_Exposure_MON-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_1 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are crucial to detect container escapes enabled by the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_MON-2_Weight csro:ContainerSystemAdminEscape_Exposure_MON-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_2 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are crucial to detect container escapes enabled by the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_MON-3_Weight csro:ContainerSystemAdminEscape_Exposure_MON-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_3 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are crucial to detect container escapes enabled by the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_MON-4_Weight csro:ContainerSystemAdminEscape_Exposure_MON-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_4 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are crucial to detect container escapes enabled by the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_MON-5_Weight csro:ContainerSystemAdminEscape_Exposure_MON-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_5 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are crucial to detect container escapes enabled by the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_MON-6_Weight csro:ContainerSystemAdminEscape_Exposure_MON-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_6 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are crucial to detect container escapes enabled by the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_MON-7_Weight csro:ContainerSystemAdminEscape_Exposure_MON-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_7 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are crucial to detect container escapes enabled by the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_MON-8_Weight csro:ContainerSystemAdminEscape_Exposure_MON-8_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:MON_8 ; csro:weightValue 3.0 ; csro:effectDescription "Monitoring and detection controls are crucial to detect container escapes enabled by the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_NET-1_Weight csro:ContainerSystemAdminEscape_Exposure_NET-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_1 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls are highly important to isolate privileged containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_NET-2_Weight csro:ContainerSystemAdminEscape_Exposure_NET-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_2 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls are highly important to isolate privileged containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_NET-3_Weight csro:ContainerSystemAdminEscape_Exposure_NET-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_3 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls are highly important to isolate privileged containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_NET-4_Weight csro:ContainerSystemAdminEscape_Exposure_NET-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:NET_4 ; csro:weightValue 3.0 ; csro:effectDescription "Network security controls are highly important to isolate privileged containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_RTS-1_Weight csro:ContainerSystemAdminEscape_Exposure_RTS-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_1 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not affect the attack surface or detection rate of a container with SYS_ADMIN" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_RTS-2_Weight csro:ContainerSystemAdminEscape_Exposure_RTS-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_2 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not affect the attack surface or detection rate of a container with SYS_ADMIN" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_RTS-3_Weight csro:ContainerSystemAdminEscape_Exposure_RTS-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_3 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not affect the attack surface or detection rate of a container with SYS_ADMIN" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_RTS-4_Weight csro:ContainerSystemAdminEscape_Exposure_RTS-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_4 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not affect the attack surface or detection rate of a container with SYS_ADMIN" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_RTS-5_Weight csro:ContainerSystemAdminEscape_Exposure_RTS-5_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_5 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not affect the attack surface or detection rate of a container with SYS_ADMIN" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_RTS-6_Weight csro:ContainerSystemAdminEscape_Exposure_RTS-6_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_6 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not affect the attack surface or detection rate of a container with SYS_ADMIN" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_RTS-7_Weight csro:ContainerSystemAdminEscape_Exposure_RTS-7_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:RTS_7 ; csro:weightValue 0.0 ; csro:effectDescription "Runtime security controls do not affect the attack surface or detection rate of a container with SYS_ADMIN" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_SCM-1_Weight csro:ContainerSystemAdminEscape_Exposure_SCM-1_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_1 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface or support detection of containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_SCM-2_Weight csro:ContainerSystemAdminEscape_Exposure_SCM-2_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_2 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface or support detection of containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_SCM-3_Weight csro:ContainerSystemAdminEscape_Exposure_SCM-3_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_3 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface or support detection of containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#ContainerSystemAdminEscape_Exposure_SCM-4_Weight csro:ContainerSystemAdminEscape_Exposure_SCM-4_Weight rdf:type owl:NamedIndividual , csro:AssumptionWeight ; csro:refersToAssumption csro:SCM_4 ; csro:weightValue 0.0 ; csro:effectDescription "Secrets management does not reduce the attack surface or support detection of containers with the SYS_ADMIN capability" . ### https://w3id.org/csro/ontology#CredentialTheftRisk csro:CredentialTheftRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of confidentiality breach through network traffic interception exposing authentication data" ; rdfs:label "Credential Theft Risk" . ### https://w3id.org/csro/ontology#Critical csro:Critical rdf:type owl:NamedIndividual , csro:ImpactRating ; csro:description "Critical impact rating indicating severe consequences." . ### https://w3id.org/csro/ontology#DeployDecoyContainers csro:DeployDecoyContainers rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:MON_6 ; csro:description "Deploy decoy containers as honeypots to detect malicious activities" ; rdfs:label "Deploy Decoy Containers" . ### https://w3id.org/csro/ontology#DeployImmutableInfrastructure csro:DeployImmutableInfrastructure rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:HIS_2 ; csro:description "Deploy host devices as immutable infrastructure to prevent unauthorized modifications" ; rdfs:label "Deploy Immutable Infrastructure" . ### https://w3id.org/csro/ontology#DevelopmentScenario csro:DevelopmentScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:DevelopmentScenario_AUTH_1 , csro:DevelopmentScenario_AUTH_2 , csro:DevelopmentScenario_AUTH_3 , csro:DevelopmentScenario_CIC_1 , csro:DevelopmentScenario_CIC_2 , csro:DevelopmentScenario_CIC_3 , csro:DevelopmentScenario_CIC_4 , csro:DevelopmentScenario_CIC_5 , csro:DevelopmentScenario_CIC_6 , csro:DevelopmentScenario_CRM_1 , csro:DevelopmentScenario_CRM_2 , csro:DevelopmentScenario_CRM_3 , csro:DevelopmentScenario_CRM_4 , csro:DevelopmentScenario_HIS_1 , csro:DevelopmentScenario_HIS_2 , csro:DevelopmentScenario_HIS_3 , csro:DevelopmentScenario_IMG_1 , csro:DevelopmentScenario_IMG_2 , csro:DevelopmentScenario_IMG_3 , csro:DevelopmentScenario_IMG_4 , csro:DevelopmentScenario_IMG_5 , csro:DevelopmentScenario_IMG_6 , csro:DevelopmentScenario_MON_1 , csro:DevelopmentScenario_MON_2 , csro:DevelopmentScenario_MON_3 , csro:DevelopmentScenario_MON_4 , csro:DevelopmentScenario_MON_5 , csro:DevelopmentScenario_MON_6 , csro:DevelopmentScenario_MON_7 , csro:DevelopmentScenario_MON_8 , csro:DevelopmentScenario_NET_1 , csro:DevelopmentScenario_NET_2 , csro:DevelopmentScenario_NET_3 , csro:DevelopmentScenario_NET_4 , csro:DevelopmentScenario_RTS_1 , csro:DevelopmentScenario_RTS_2 , csro:DevelopmentScenario_RTS_3 , csro:DevelopmentScenario_RTS_4 , csro:DevelopmentScenario_RTS_5 , csro:DevelopmentScenario_RTS_6 , csro:DevelopmentScenario_RTS_7 , csro:DevelopmentScenario_SCM_1 , csro:DevelopmentScenario_SCM_2 , csro:DevelopmentScenario_SCM_3 , csro:DevelopmentScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Development environment with minimal security controls for ease of development and debugging" ; rdfs:label "Development Scenario" . ### https://w3id.org/csro/ontology#DevelopmentScenario_AUTH_1 csro:DevelopmentScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_AUTH_2 csro:DevelopmentScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_AUTH_3 csro:DevelopmentScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_CIC_1 csro:DevelopmentScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_CIC_2 csro:DevelopmentScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_CIC_3 csro:DevelopmentScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_CIC_4 csro:DevelopmentScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_CIC_5 csro:DevelopmentScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_CIC_6 csro:DevelopmentScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_CRM_1 csro:DevelopmentScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_CRM_2 csro:DevelopmentScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_CRM_3 csro:DevelopmentScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_CRM_4 csro:DevelopmentScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_HIS_1 csro:DevelopmentScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_HIS_2 csro:DevelopmentScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_HIS_3 csro:DevelopmentScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_IMG_1 csro:DevelopmentScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_IMG_2 csro:DevelopmentScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_IMG_3 csro:DevelopmentScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_IMG_4 csro:DevelopmentScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_IMG_5 csro:DevelopmentScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_IMG_6 csro:DevelopmentScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_MON_1 csro:DevelopmentScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_MON_2 csro:DevelopmentScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_MON_3 csro:DevelopmentScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_MON_4 csro:DevelopmentScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_MON_5 csro:DevelopmentScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_MON_6 csro:DevelopmentScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_MON_7 csro:DevelopmentScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_MON_8 csro:DevelopmentScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_NET_1 csro:DevelopmentScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_NET_2 csro:DevelopmentScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_NET_3 csro:DevelopmentScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_NET_4 csro:DevelopmentScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_RTS_1 csro:DevelopmentScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_RTS_2 csro:DevelopmentScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_RTS_3 csro:DevelopmentScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_RTS_4 csro:DevelopmentScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_RTS_5 csro:DevelopmentScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_RTS_6 csro:DevelopmentScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_RTS_7 csro:DevelopmentScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#DevelopmentScenario_SCM_1 csro:DevelopmentScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#DevelopmentScenario_SCM_2 csro:DevelopmentScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#DevelopmentScenario_SCM_3 csro:DevelopmentScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#DevelopmentScenario_SCM_4 csro:DevelopmentScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#Device csro:Device rdf:type owl:NamedIndividual , csro:Component ; csro:description "Physical or virtual device hosting the container runtime." ; rdfs:label "Device" . ### https://w3id.org/csro/ontology#DeviceAccess csro:DeviceAccess rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container has access to host devices" ; rdfs:label "device_access" . ### https://w3id.org/csro/ontology#DeviceContainerRuntime csro:DeviceContainerRuntime rdf:type owl:NamedIndividual , csro:Component ; csro:description "Container runtime engine (e.g., Docker, containerd) running on the host device." ; rdfs:label "Device Container Runtime" . ### https://w3id.org/csro/ontology#DeviceOperatingSystem csro:DeviceOperatingSystem rdf:type owl:NamedIndividual , csro:Component ; csro:description "Host operating system where containers are deployed." ; rdfs:label "Device Operating System" . ### https://w3id.org/csro/ontology#Disastrous csro:Disastrous rdf:type owl:NamedIndividual , csro:ImpactRating ; csro:description "Disastrous impact rating indicating catastrophic consequences." . ### https://w3id.org/csro/ontology#Dissatisfied csro:Dissatisfied rdf:type owl:NamedIndividual , csro:SatisfactionState ; csro:description "The security assumption is not satisfied/implemented." . ### https://w3id.org/csro/ontology#DocumentSecurityPolicies csro:DocumentSecurityPolicies rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:CRM_3 ; csro:description "Document and enforce container security policies throughout application lifecycle" ; rdfs:label "Document Security Policies" . ### https://w3id.org/csro/ontology#EdgeComputingScenario csro:EdgeComputingScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:EdgeComputingScenario_AUTH_1 , csro:EdgeComputingScenario_AUTH_2 , csro:EdgeComputingScenario_AUTH_3 , csro:EdgeComputingScenario_CIC_1 , csro:EdgeComputingScenario_CIC_2 , csro:EdgeComputingScenario_CIC_3 , csro:EdgeComputingScenario_CIC_4 , csro:EdgeComputingScenario_CIC_5 , csro:EdgeComputingScenario_CIC_6 , csro:EdgeComputingScenario_CRM_1 , csro:EdgeComputingScenario_CRM_2 , csro:EdgeComputingScenario_CRM_3 , csro:EdgeComputingScenario_CRM_4 , csro:EdgeComputingScenario_HIS_1 , csro:EdgeComputingScenario_HIS_2 , csro:EdgeComputingScenario_HIS_3 , csro:EdgeComputingScenario_IMG_1 , csro:EdgeComputingScenario_IMG_2 , csro:EdgeComputingScenario_IMG_3 , csro:EdgeComputingScenario_IMG_4 , csro:EdgeComputingScenario_IMG_5 , csro:EdgeComputingScenario_IMG_6 , csro:EdgeComputingScenario_MON_1 , csro:EdgeComputingScenario_MON_2 , csro:EdgeComputingScenario_MON_3 , csro:EdgeComputingScenario_MON_4 , csro:EdgeComputingScenario_MON_5 , csro:EdgeComputingScenario_MON_6 , csro:EdgeComputingScenario_MON_7 , csro:EdgeComputingScenario_MON_8 , csro:EdgeComputingScenario_NET_1 , csro:EdgeComputingScenario_NET_2 , csro:EdgeComputingScenario_NET_3 , csro:EdgeComputingScenario_NET_4 , csro:EdgeComputingScenario_RTS_1 , csro:EdgeComputingScenario_RTS_2 , csro:EdgeComputingScenario_RTS_3 , csro:EdgeComputingScenario_RTS_4 , csro:EdgeComputingScenario_RTS_5 , csro:EdgeComputingScenario_RTS_6 , csro:EdgeComputingScenario_RTS_7 , csro:EdgeComputingScenario_SCM_1 , csro:EdgeComputingScenario_SCM_2 , csro:EdgeComputingScenario_SCM_3 , csro:EdgeComputingScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Edge computing deployment with limited central monitoring and physical security constraints" ; rdfs:label "Edge Computing Scenario" . ### https://w3id.org/csro/ontology#EdgeComputingScenario_AUTH_1 csro:EdgeComputingScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_AUTH_2 csro:EdgeComputingScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_AUTH_3 csro:EdgeComputingScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_CIC_1 csro:EdgeComputingScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_CIC_2 csro:EdgeComputingScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_CIC_3 csro:EdgeComputingScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_CIC_4 csro:EdgeComputingScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_CIC_5 csro:EdgeComputingScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_CIC_6 csro:EdgeComputingScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_CRM_1 csro:EdgeComputingScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_CRM_2 csro:EdgeComputingScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_CRM_3 csro:EdgeComputingScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_CRM_4 csro:EdgeComputingScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_HIS_1 csro:EdgeComputingScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_HIS_2 csro:EdgeComputingScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_HIS_3 csro:EdgeComputingScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_IMG_1 csro:EdgeComputingScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_IMG_2 csro:EdgeComputingScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_IMG_3 csro:EdgeComputingScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_IMG_4 csro:EdgeComputingScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_IMG_5 csro:EdgeComputingScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_IMG_6 csro:EdgeComputingScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_MON_1 csro:EdgeComputingScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_MON_2 csro:EdgeComputingScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_MON_3 csro:EdgeComputingScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_MON_4 csro:EdgeComputingScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_MON_5 csro:EdgeComputingScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_MON_6 csro:EdgeComputingScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_MON_7 csro:EdgeComputingScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_MON_8 csro:EdgeComputingScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_NET_1 csro:EdgeComputingScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_NET_2 csro:EdgeComputingScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_NET_3 csro:EdgeComputingScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_NET_4 csro:EdgeComputingScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_RTS_1 csro:EdgeComputingScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_RTS_2 csro:EdgeComputingScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_RTS_3 csro:EdgeComputingScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_RTS_4 csro:EdgeComputingScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_RTS_5 csro:EdgeComputingScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_RTS_6 csro:EdgeComputingScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_RTS_7 csro:EdgeComputingScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#EdgeComputingScenario_SCM_1 csro:EdgeComputingScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_SCM_2 csro:EdgeComputingScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_SCM_3 csro:EdgeComputingScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EdgeComputingScenario_SCM_4 csro:EdgeComputingScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#EnableContainerLogging csro:EnableContainerLogging rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:MON_1 ; csro:description "Enable comprehensive container-level logging for security monitoring and audit" ; rdfs:label "Enable Container Logging" . ### https://w3id.org/csro/ontology#EnableReadOnlyFilesystem csro:EnableReadOnlyFilesystem rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:RTS_2 ; csro:hasGuideline csro:GuidelineFilesystem ; csro:isImplementedBy csro:read_only_filesystem ; csro:description "Mount container filesystem as read-only to prevent malicious file modifications" ; rdfs:label "Enable Read Only Filesystem" . ### https://w3id.org/csro/ontology#EnableReproducibleBuilds csro:EnableReproducibleBuilds rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:CIC_5 ; csro:description "Enable reproducible builds in CI/CD pipeline to ensure build consistency" ; rdfs:label "Enable Reproducible Builds" . ### https://w3id.org/csro/ontology#EncryptInterContainerCommunication csro:EncryptInterContainerCommunication rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:NET_3 ; csro:description "Encrypt inter-container communication to protect data in transit" ; rdfs:label "Encrypt Inter Container Communication" . ### https://w3id.org/csro/ontology#EncryptSecrets csro:EncryptSecrets rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:SCM_3 ; csro:description "Encrypt secrets both at rest and in transit to protect sensitive data" ; rdfs:label "Encrypt Secrets" . ### https://w3id.org/csro/ontology#EnforceAPIAuthentication csro:EnforceAPIAuthentication rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:AUTH_1 ; csro:description "Enforce authentication mechanisms for all exposed container APIs" ; rdfs:label "Enforce API Authentication" . ### https://w3id.org/csro/ontology#EnforceCodeReviewsAndTesting csro:EnforceCodeReviewsAndTesting rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:CIC_3 ; csro:description "Enforce code reviews and automated testing to identify security issues early" ; rdfs:label "Enforce Code Reviews And Testing" . ### https://w3id.org/csro/ontology#FirewallIntegrityViolation csro:FirewallIntegrityViolation rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Critical ; csro:indicates csro:NetworkSecurityControlsRemovalRisk ; csro:description "Integrity of network security controls compromised, exposing all system components and applications to unauthorized network access and potential confidentiality and availability impacts" ; rdfs:label "Firewall Integrity Violation" . ### https://w3id.org/csro/ontology#GuidelineCapabilities csro:GuidelineCapabilities rdf:type owl:NamedIndividual , csro:ContainerSecurityGuideline ; csro:description "Best practices for managing Linux capabilities in containers" ; csro:referenceUrl "https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities" ; rdfs:label "Container Capabilities Security Guidelines" . ### https://w3id.org/csro/ontology#GuidelineFilesystem csro:GuidelineFilesystem rdf:type owl:NamedIndividual , csro:ContainerSecurityGuideline ; csro:description "Best practices for container filesystem security" ; csro:referenceUrl "https://docs.docker.com/engine/reference/run/#read-only-containers" ; rdfs:label "Container Filesystem Security Guidelines" . ### https://w3id.org/csro/ontology#GuidelineNamespaces csro:GuidelineNamespaces rdf:type owl:NamedIndividual , csro:ContainerSecurityGuideline ; csro:description "Best practices for namespace isolation in containers" ; csro:referenceUrl "https://docs.docker.com/engine/security/userns-remap/" ; rdfs:label "Container Namespace Security Guidelines" . ### https://w3id.org/csro/ontology#GuidelineNetworking csro:GuidelineNetworking rdf:type owl:NamedIndividual , csro:ContainerSecurityGuideline ; csro:description "Best practices for container network security and segmentation" ; csro:referenceUrl "https://docs.docker.com/network/bridge/" ; rdfs:label "Container Network Security Guidelines" . ### https://w3id.org/csro/ontology#GuidelineUserConfiguration csro:GuidelineUserConfiguration rdf:type owl:NamedIndividual , csro:ContainerSecurityGuideline ; csro:description "Best practices for configuring container user permissions" ; csro:referenceUrl "https://docs.docker.com/develop/dev-best-practices/#how-to-keep-your-images-small" ; rdfs:label "Container User Configuration Guidelines" . ### https://w3id.org/csro/ontology#HIS_1 csro:HIS_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:HostInfrastructureSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_1_2_2 , csro:NIST_SP_800_190_Section_4_5_3 , csro:OWASP_Docker_Security_Cheat_Sheet_0 , csro:OWASP_Docker_Top_10_D02 ; csro:assumptionId "HIS-1" ; csro:description "The container runtime on the host device is up to date" . ### https://w3id.org/csro/ontology#HIS_2 csro:HIS_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:HostInfrastructureSecurity ; csro:originatesFrom csro:NIST_SP_800_190_Section_4_5_3 , csro:OWASP_Docker_Security_Cheat_Sheet_8 , csro:OWASP_Docker_Top_10_D09 ; csro:assumptionId "HIS-2" ; csro:description "The host device is deployed as an immutable infrastructure (e.g. read-only file system)" . ### https://w3id.org/csro/ontology#HIS_3 csro:HIS_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:HostInfrastructureSecurity ; csro:originatesFrom csro:NIST_SP_800_190_Section_4_5_5 ; csro:assumptionId "HIS-3" ; csro:description "The host device is monitored for unauthorized changes" . ### https://w3id.org/csro/ontology#HardenedScenario csro:HardenedScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:HardenedScenario_IMG_1 , csro:HardenedScenario_NET_1 , csro:HardenedScenario_NET_2 , csro:HardenedScenario_RTS_1 , csro:HardenedScenario_RTS_2 , csro:HardenedScenario_RTS_3 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Hardened container deployment scenario with comprehensive security measures implemented." ; rdfs:label "Hardened Scenario" . ### https://w3id.org/csro/ontology#HardenedScenario_IMG_1 csro:HardenedScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HardenedScenario_NET_1 csro:HardenedScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HardenedScenario_NET_2 csro:HardenedScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HardenedScenario_RTS_1 csro:HardenedScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HardenedScenario_RTS_2 csro:HardenedScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HardenedScenario_RTS_3 csro:HardenedScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#High csro:High rdf:type owl:NamedIndividual , csro:DifficultyLevel ; csro:description "High difficulty level for attack execution" . ### https://w3id.org/csro/ontology#HighExploitability csro:HighExploitability rdf:type owl:NamedIndividual , csro:ExploitabilityRating ; csro:description "High exploitability rating" . ### https://w3id.org/csro/ontology#HighExploitabilityAndHighExposure csro:HighExploitabilityAndHighExposure rdf:type owl:NamedIndividual , csro:LikelihoodCalculationRule ; csro:hasExploitabilityRating csro:HighExploitability ; csro:hasExposureRating csro:HighExposure ; csro:resultsIn csro:VeryLikely . ### https://w3id.org/csro/ontology#HighExploitabilityAndLowExposure csro:HighExploitabilityAndLowExposure rdf:type owl:NamedIndividual , csro:LikelihoodCalculationRule ; csro:hasExploitabilityRating csro:HighExploitability ; csro:hasExposureRating csro:LowExposure ; csro:resultsIn csro:Possible . ### https://w3id.org/csro/ontology#HighExploitabilityAndMediumExposure csro:HighExploitabilityAndMediumExposure rdf:type owl:NamedIndividual , csro:LikelihoodCalculationRule ; csro:hasExploitabilityRating csro:HighExploitability ; csro:hasExposureRating csro:MediumExposure ; csro:resultsIn csro:Likely . ### https://w3id.org/csro/ontology#HighExposure csro:HighExposure rdf:type owl:NamedIndividual , csro:ExposureRating ; csro:description "High exposure rating" . ### https://w3id.org/csro/ontology#HighRiskScenario csro:HighRiskScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:HighRiskScenario_AUTH_1 , csro:HighRiskScenario_AUTH_2 , csro:HighRiskScenario_AUTH_3 , csro:HighRiskScenario_CIC_1 , csro:HighRiskScenario_CIC_2 , csro:HighRiskScenario_CIC_3 , csro:HighRiskScenario_CIC_4 , csro:HighRiskScenario_CIC_5 , csro:HighRiskScenario_CIC_6 , csro:HighRiskScenario_CRM_1 , csro:HighRiskScenario_CRM_2 , csro:HighRiskScenario_CRM_3 , csro:HighRiskScenario_CRM_4 , csro:HighRiskScenario_HIS_1 , csro:HighRiskScenario_HIS_2 , csro:HighRiskScenario_HIS_3 , csro:HighRiskScenario_IMG_1 , csro:HighRiskScenario_IMG_2 , csro:HighRiskScenario_IMG_3 , csro:HighRiskScenario_IMG_4 , csro:HighRiskScenario_IMG_5 , csro:HighRiskScenario_IMG_6 , csro:HighRiskScenario_MON_1 , csro:HighRiskScenario_MON_2 , csro:HighRiskScenario_MON_3 , csro:HighRiskScenario_MON_4 , csro:HighRiskScenario_MON_5 , csro:HighRiskScenario_MON_6 , csro:HighRiskScenario_MON_7 , csro:HighRiskScenario_MON_8 , csro:HighRiskScenario_NET_1 , csro:HighRiskScenario_NET_2 , csro:HighRiskScenario_NET_3 , csro:HighRiskScenario_NET_4 , csro:HighRiskScenario_RTS_1 , csro:HighRiskScenario_RTS_2 , csro:HighRiskScenario_RTS_3 , csro:HighRiskScenario_RTS_4 , csro:HighRiskScenario_RTS_5 , csro:HighRiskScenario_RTS_6 , csro:HighRiskScenario_RTS_7 , csro:HighRiskScenario_SCM_1 , csro:HighRiskScenario_SCM_2 , csro:HighRiskScenario_SCM_3 , csro:HighRiskScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "High-risk deployment with most security controls disabled, representing worst-case scenario" ; rdfs:label "High Risk Scenario" . ### https://w3id.org/csro/ontology#HighRiskScenario_AUTH_1 csro:HighRiskScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_AUTH_2 csro:HighRiskScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_AUTH_3 csro:HighRiskScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_CIC_1 csro:HighRiskScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_CIC_2 csro:HighRiskScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_CIC_3 csro:HighRiskScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_CIC_4 csro:HighRiskScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_CIC_5 csro:HighRiskScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_CIC_6 csro:HighRiskScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_CRM_1 csro:HighRiskScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_CRM_2 csro:HighRiskScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_CRM_3 csro:HighRiskScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_CRM_4 csro:HighRiskScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_HIS_1 csro:HighRiskScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_HIS_2 csro:HighRiskScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_HIS_3 csro:HighRiskScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_IMG_1 csro:HighRiskScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_IMG_2 csro:HighRiskScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_IMG_3 csro:HighRiskScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_IMG_4 csro:HighRiskScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_IMG_5 csro:HighRiskScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_IMG_6 csro:HighRiskScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_MON_1 csro:HighRiskScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_MON_2 csro:HighRiskScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_MON_3 csro:HighRiskScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_MON_4 csro:HighRiskScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_MON_5 csro:HighRiskScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_MON_6 csro:HighRiskScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_MON_7 csro:HighRiskScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_MON_8 csro:HighRiskScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_NET_1 csro:HighRiskScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_NET_2 csro:HighRiskScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_NET_3 csro:HighRiskScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_NET_4 csro:HighRiskScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_RTS_1 csro:HighRiskScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_RTS_2 csro:HighRiskScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_RTS_3 csro:HighRiskScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_RTS_4 csro:HighRiskScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_RTS_5 csro:HighRiskScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_RTS_6 csro:HighRiskScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_RTS_7 csro:HighRiskScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_SCM_1 csro:HighRiskScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_SCM_2 csro:HighRiskScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_SCM_3 csro:HighRiskScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HighRiskScenario_SCM_4 csro:HighRiskScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#HostCompromiseRisk csro:HostCompromiseRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of total system compromise with complete CIA triad violation through container escape" ; rdfs:label "Host Compromise Risk" . ### https://w3id.org/csro/ontology#HostInfrastructureSecurity csro:HostInfrastructureSecurity rdf:type owl:NamedIndividual , csro:AssumptionCategory ; csro:description "Security assumptions related to host and infrastructure security." ; rdfs:label "Host Infrastructure Security" . ### https://w3id.org/csro/ontology#HostProcessInformationDisclosure csro:HostProcessInformationDisclosure rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Moderate ; csro:indicates csro:SystemInformationExposureRisk ; csro:description "Confidentiality of host process information compromised, exposing system architecture, running services, and potential security weaknesses" ; rdfs:label "Host Process Information Disclosure" . ### https://w3id.org/csro/ontology#HostProcessManipulation csro:HostProcessManipulation rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Disastrous ; csro:indicates csro:HostProcessManipulationRisk ; csro:description "Integrity and confidentiality of host processes compromised through code injection, enabling unauthorized control and data access at host level" ; rdfs:label "Host Process Manipulation" . ### https://w3id.org/csro/ontology#HostProcessManipulationRisk csro:HostProcessManipulationRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:isTreatedBy csro:ConfigureHostFirewall , csro:EnableReadOnlyFilesystem , csro:MinimizeCapabilities , csro:RunAsNonRootUser , csro:ScanContainerImages , csro:SegmentNetworks ; csro:description "Risk of container escape and host process manipulation through SysPtrace attack" ; rdfs:label "Host Process Manipulation Risk" . ### https://w3id.org/csro/ontology#HostSystemFilesExposed csro:HostSystemFilesExposed rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Moderate ; csro:indicates csro:HostSystemFilesExposedRisk ; csro:description "Confidential host system files exposed through privileged container volume mounts, potentially revealing sensitive configuration, credentials, or data." ; rdfs:label "Host System Files Exposed" . ### https://w3id.org/csro/ontology#HostSystemFilesExposedRisk csro:HostSystemFilesExposedRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:isTreatedBy csro:EnableReadOnlyFilesystem , csro:MinimizeCapabilities , csro:RunAsNonRootUser , csro:ScanContainerImages ; csro:description "Risk of sensitive host system files being exposed through container with privileged volume mounts" ; rdfs:label "Host System Files Exposed Risk" . ### https://w3id.org/csro/ontology#HybridCloudScenario csro:HybridCloudScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:HybridCloudScenario_AUTH_1 , csro:HybridCloudScenario_AUTH_2 , csro:HybridCloudScenario_AUTH_3 , csro:HybridCloudScenario_CIC_1 , csro:HybridCloudScenario_CIC_2 , csro:HybridCloudScenario_CIC_3 , csro:HybridCloudScenario_CIC_4 , csro:HybridCloudScenario_CIC_5 , csro:HybridCloudScenario_CIC_6 , csro:HybridCloudScenario_CRM_1 , csro:HybridCloudScenario_CRM_2 , csro:HybridCloudScenario_CRM_3 , csro:HybridCloudScenario_CRM_4 , csro:HybridCloudScenario_HIS_1 , csro:HybridCloudScenario_HIS_2 , csro:HybridCloudScenario_HIS_3 , csro:HybridCloudScenario_IMG_1 , csro:HybridCloudScenario_IMG_2 , csro:HybridCloudScenario_IMG_3 , csro:HybridCloudScenario_IMG_4 , csro:HybridCloudScenario_IMG_5 , csro:HybridCloudScenario_IMG_6 , csro:HybridCloudScenario_MON_1 , csro:HybridCloudScenario_MON_2 , csro:HybridCloudScenario_MON_3 , csro:HybridCloudScenario_MON_4 , csro:HybridCloudScenario_MON_5 , csro:HybridCloudScenario_MON_6 , csro:HybridCloudScenario_MON_7 , csro:HybridCloudScenario_MON_8 , csro:HybridCloudScenario_NET_1 , csro:HybridCloudScenario_NET_2 , csro:HybridCloudScenario_NET_3 , csro:HybridCloudScenario_NET_4 , csro:HybridCloudScenario_RTS_1 , csro:HybridCloudScenario_RTS_2 , csro:HybridCloudScenario_RTS_3 , csro:HybridCloudScenario_RTS_4 , csro:HybridCloudScenario_RTS_5 , csro:HybridCloudScenario_RTS_6 , csro:HybridCloudScenario_RTS_7 , csro:HybridCloudScenario_SCM_1 , csro:HybridCloudScenario_SCM_2 , csro:HybridCloudScenario_SCM_3 , csro:HybridCloudScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Hybrid cloud deployment with varying security controls across on-premises and cloud environments" ; rdfs:label "Hybrid Cloud Scenario" . ### https://w3id.org/csro/ontology#HybridCloudScenario_AUTH_1 csro:HybridCloudScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HybridCloudScenario_AUTH_2 csro:HybridCloudScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HybridCloudScenario_AUTH_3 csro:HybridCloudScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_CIC_1 csro:HybridCloudScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HybridCloudScenario_CIC_2 csro:HybridCloudScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_CIC_3 csro:HybridCloudScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_CIC_4 csro:HybridCloudScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_CIC_5 csro:HybridCloudScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_CIC_6 csro:HybridCloudScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_CRM_1 csro:HybridCloudScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_CRM_2 csro:HybridCloudScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_CRM_3 csro:HybridCloudScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_CRM_4 csro:HybridCloudScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_HIS_1 csro:HybridCloudScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_HIS_2 csro:HybridCloudScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_HIS_3 csro:HybridCloudScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_IMG_1 csro:HybridCloudScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HybridCloudScenario_IMG_2 csro:HybridCloudScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_IMG_3 csro:HybridCloudScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_IMG_4 csro:HybridCloudScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_IMG_5 csro:HybridCloudScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_IMG_6 csro:HybridCloudScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_MON_1 csro:HybridCloudScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HybridCloudScenario_MON_2 csro:HybridCloudScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_MON_3 csro:HybridCloudScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_MON_4 csro:HybridCloudScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_MON_5 csro:HybridCloudScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_MON_6 csro:HybridCloudScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_MON_7 csro:HybridCloudScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_MON_8 csro:HybridCloudScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_NET_1 csro:HybridCloudScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HybridCloudScenario_NET_2 csro:HybridCloudScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HybridCloudScenario_NET_3 csro:HybridCloudScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_NET_4 csro:HybridCloudScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_RTS_1 csro:HybridCloudScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HybridCloudScenario_RTS_2 csro:HybridCloudScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_RTS_3 csro:HybridCloudScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_RTS_4 csro:HybridCloudScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_RTS_5 csro:HybridCloudScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_RTS_6 csro:HybridCloudScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_RTS_7 csro:HybridCloudScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_SCM_1 csro:HybridCloudScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#HybridCloudScenario_SCM_2 csro:HybridCloudScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_SCM_3 csro:HybridCloudScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#HybridCloudScenario_SCM_4 csro:HybridCloudScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#IMG_1 csro:IMG_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:ContainerImageSecurity ; csro:isVerifiableBy csro:dockerfile_no_findings ; csro:originatesFrom csro:CIS_Docker_Benchmark_4_4 , csro:NIST_SP_800_190_Section_4_1_1 , csro:OWASP_Docker_Security_Cheat_Sheet_13 , csro:OWASP_Docker_Security_Cheat_Sheet_9 ; csro:assumptionId "IMG-1" ; csro:description "App images are scanned for vulnerabilities" . ### https://w3id.org/csro/ontology#IMG_2 csro:IMG_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:ContainerImageSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_4_3 , csro:NIST_SP_800_190_Section_4_1_2 , csro:OWASP_Docker_Top_10_D04 ; csro:assumptionId "IMG-2" ; csro:description "App uses minimal base images" . ### https://w3id.org/csro/ontology#IMG_3 csro:IMG_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:ContainerImageSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_4_2 , csro:CIS_Docker_Benchmark_4_5 , csro:NIST_SP_800_190_Section_4_1_5 , csro:OWASP_Docker_Security_Cheat_Sheet_13 , csro:OWASP_Docker_Top_10_D08 ; csro:assumptionId "IMG-3" ; csro:description "App images are signed and verified" . ### https://w3id.org/csro/ontology#IMG_4 csro:IMG_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:ContainerImageSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_6_1 , csro:NIST_SP_800_190_Section_4_2_2 , csro:OWASP_Docker_Security_Cheat_Sheet_9 ; csro:assumptionId "IMG-4" ; csro:description "Dockerfiles of the app pin the base image version" . ### https://w3id.org/csro/ontology#IMG_5 csro:IMG_5 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:ContainerImageSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_4_4 , csro:CIS_Docker_Benchmark_5_28 , csro:NIST_SP_800_190_Section_4_1_1 , csro:OWASP_Docker_Top_10_D02 ; csro:assumptionId "IMG-5" ; csro:description "App images are rebuilt and updated regularly" . ### https://w3id.org/csro/ontology#IMG_6 csro:IMG_6 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:ContainerImageSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_2_5 , csro:CIS_Docker_Benchmark_4_5 , csro:NIST_SP_800_190_Section_4_2 , csro:OWASP_Docker_Security_Cheat_Sheet_13 , csro:OWASP_Docker_Top_10_D08 ; csro:assumptionId "IMG-6" ; csro:description "Device orchestration only uses trusted image registries" . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario csro:ImageSecurityFocusedScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:ImageSecurityFocusedScenario_AUTH_1 , csro:ImageSecurityFocusedScenario_AUTH_2 , csro:ImageSecurityFocusedScenario_AUTH_3 , csro:ImageSecurityFocusedScenario_CIC_1 , csro:ImageSecurityFocusedScenario_CIC_2 , csro:ImageSecurityFocusedScenario_CIC_3 , csro:ImageSecurityFocusedScenario_CIC_4 , csro:ImageSecurityFocusedScenario_CIC_5 , csro:ImageSecurityFocusedScenario_CIC_6 , csro:ImageSecurityFocusedScenario_CRM_1 , csro:ImageSecurityFocusedScenario_CRM_2 , csro:ImageSecurityFocusedScenario_CRM_3 , csro:ImageSecurityFocusedScenario_CRM_4 , csro:ImageSecurityFocusedScenario_HIS_1 , csro:ImageSecurityFocusedScenario_HIS_2 , csro:ImageSecurityFocusedScenario_HIS_3 , csro:ImageSecurityFocusedScenario_IMG_1 , csro:ImageSecurityFocusedScenario_IMG_2 , csro:ImageSecurityFocusedScenario_IMG_3 , csro:ImageSecurityFocusedScenario_IMG_4 , csro:ImageSecurityFocusedScenario_IMG_5 , csro:ImageSecurityFocusedScenario_IMG_6 , csro:ImageSecurityFocusedScenario_MON_1 , csro:ImageSecurityFocusedScenario_MON_2 , csro:ImageSecurityFocusedScenario_MON_3 , csro:ImageSecurityFocusedScenario_MON_4 , csro:ImageSecurityFocusedScenario_MON_5 , csro:ImageSecurityFocusedScenario_MON_6 , csro:ImageSecurityFocusedScenario_MON_7 , csro:ImageSecurityFocusedScenario_MON_8 , csro:ImageSecurityFocusedScenario_NET_1 , csro:ImageSecurityFocusedScenario_NET_2 , csro:ImageSecurityFocusedScenario_NET_3 , csro:ImageSecurityFocusedScenario_NET_4 , csro:ImageSecurityFocusedScenario_RTS_1 , csro:ImageSecurityFocusedScenario_RTS_2 , csro:ImageSecurityFocusedScenario_RTS_3 , csro:ImageSecurityFocusedScenario_RTS_4 , csro:ImageSecurityFocusedScenario_RTS_5 , csro:ImageSecurityFocusedScenario_RTS_6 , csro:ImageSecurityFocusedScenario_RTS_7 , csro:ImageSecurityFocusedScenario_SCM_1 , csro:ImageSecurityFocusedScenario_SCM_2 , csro:ImageSecurityFocusedScenario_SCM_3 , csro:ImageSecurityFocusedScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Scenario with strong focus on container image security including scanning, signing, and minimal base images" ; rdfs:label "Image Security Focused Scenario" . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_AUTH_1 csro:ImageSecurityFocusedScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_AUTH_2 csro:ImageSecurityFocusedScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_AUTH_3 csro:ImageSecurityFocusedScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_CIC_1 csro:ImageSecurityFocusedScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_CIC_2 csro:ImageSecurityFocusedScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_CIC_3 csro:ImageSecurityFocusedScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_CIC_4 csro:ImageSecurityFocusedScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_CIC_5 csro:ImageSecurityFocusedScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_CIC_6 csro:ImageSecurityFocusedScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_CRM_1 csro:ImageSecurityFocusedScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_CRM_2 csro:ImageSecurityFocusedScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_CRM_3 csro:ImageSecurityFocusedScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_CRM_4 csro:ImageSecurityFocusedScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_HIS_1 csro:ImageSecurityFocusedScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_HIS_2 csro:ImageSecurityFocusedScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_HIS_3 csro:ImageSecurityFocusedScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_IMG_1 csro:ImageSecurityFocusedScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_IMG_2 csro:ImageSecurityFocusedScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_IMG_3 csro:ImageSecurityFocusedScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_IMG_4 csro:ImageSecurityFocusedScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_IMG_5 csro:ImageSecurityFocusedScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_IMG_6 csro:ImageSecurityFocusedScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_MON_1 csro:ImageSecurityFocusedScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_MON_2 csro:ImageSecurityFocusedScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_MON_3 csro:ImageSecurityFocusedScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_MON_4 csro:ImageSecurityFocusedScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_MON_5 csro:ImageSecurityFocusedScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_MON_6 csro:ImageSecurityFocusedScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_MON_7 csro:ImageSecurityFocusedScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_MON_8 csro:ImageSecurityFocusedScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_NET_1 csro:ImageSecurityFocusedScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_NET_2 csro:ImageSecurityFocusedScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_NET_3 csro:ImageSecurityFocusedScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_NET_4 csro:ImageSecurityFocusedScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_RTS_1 csro:ImageSecurityFocusedScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_RTS_2 csro:ImageSecurityFocusedScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_RTS_3 csro:ImageSecurityFocusedScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_RTS_4 csro:ImageSecurityFocusedScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_RTS_5 csro:ImageSecurityFocusedScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_RTS_6 csro:ImageSecurityFocusedScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_RTS_7 csro:ImageSecurityFocusedScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_SCM_1 csro:ImageSecurityFocusedScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_SCM_2 csro:ImageSecurityFocusedScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_SCM_3 csro:ImageSecurityFocusedScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImageSecurityFocusedScenario_SCM_4 csro:ImageSecurityFocusedScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ImplementAppArmor csro:ImplementAppArmor rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:RTS_5 ; csro:description "Implement AppArmor profiles to enforce mandatory access control for containers" ; rdfs:label "Implement App Armor" . ### https://w3id.org/csro/ontology#ImplementIncidentResponse csro:ImplementIncidentResponse rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:MON_4 ; csro:description "Implement and maintain incident response procedures for container security events" ; rdfs:label "Implement Incident Response" . ### https://w3id.org/csro/ontology#ImplementIngressEgressControls csro:ImplementIngressEgressControls rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:NET_4 ; csro:description "Implement ingress and egress controls to restrict container network traffic" ; rdfs:label "Implement Ingress Egress Controls" . ### https://w3id.org/csro/ontology#ImplementRBAC csro:ImplementRBAC rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:AUTH_2 ; csro:description "Implement role-based access control for container orchestration and management" ; rdfs:label "Implement RBAC" . ### https://w3id.org/csro/ontology#ImplementSELinux csro:ImplementSELinux rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:RTS_6 ; csro:description "Implement SELinux policies to provide mandatory access control for containers" ; rdfs:label "Implement SELinux" . ### https://w3id.org/csro/ontology#ImplementSeccomp csro:ImplementSeccomp rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:RTS_4 ; csro:description "Implement Seccomp profiles to restrict system calls available to containers" ; rdfs:label "Implement Seccomp" . ### https://w3id.org/csro/ontology#ImplementSecretRotation csro:ImplementSecretRotation rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:SCM_4 ; csro:description "Implement automatic secret rotation and revocation policies for credentials" ; rdfs:label "Implement Secret Rotation" . ### https://w3id.org/csro/ontology#IndustrialSystemCompromiseRisk csro:IndustrialSystemCompromiseRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of integrity and availability loss in industrial control systems causing physical harm or operational disruption" ; rdfs:label "Industrial System Compromise Risk" . ### https://w3id.org/csro/ontology#KernelIntegrityCompromise csro:KernelIntegrityCompromise rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Disastrous ; csro:indicates csro:SystemIntegrityLossRisk ; csro:description "Complete loss of system integrity and confidentiality at kernel level, enabling persistent unauthorized control over all system operations and data" ; rdfs:label "Kernel Integrity Compromise" . ### https://w3id.org/csro/ontology#Layer2TrafficInterception csro:Layer2TrafficInterception rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Critical ; csro:indicates csro:NetworkCommunicationCompromiseRisk ; csro:description "Confidentiality and integrity of network communications compromised through unauthorized traffic interception and potential modification at Layer 2" ; rdfs:label "Layer 2 Traffic Interception" . ### https://w3id.org/csro/ontology#Likely csro:Likely rdf:type owl:NamedIndividual , csro:Likelihood ; rdfs:label "Likely" . ### https://w3id.org/csro/ontology#LikelyLikelihoodAndCriticalImpact csro:LikelyLikelihoodAndCriticalImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Critical ; csro:hasLikelihoodRating csro:Likely ; csro:resultsIn csro:Significant . ### https://w3id.org/csro/ontology#LikelyLikelihoodAndDisastrousImpact csro:LikelyLikelihoodAndDisastrousImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Disastrous ; csro:hasLikelihoodRating csro:Likely ; csro:resultsIn csro:Major . ### https://w3id.org/csro/ontology#LikelyLikelihoodAndModerateImpact csro:LikelyLikelihoodAndModerateImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Moderate ; csro:hasLikelihoodRating csro:Likely ; csro:resultsIn csro:Moderate . ### https://w3id.org/csro/ontology#LikelyLikelihoodAndNegligibleImpact csro:LikelyLikelihoodAndNegligibleImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Negligible ; csro:hasLikelihoodRating csro:Likely ; csro:resultsIn csro:Minor . ### https://w3id.org/csro/ontology#Low csro:Low rdf:type owl:NamedIndividual , csro:DifficultyLevel ; csro:description "Low difficulty level for attack execution" . ### https://w3id.org/csro/ontology#LowExploitability csro:LowExploitability rdf:type owl:NamedIndividual , csro:ExploitabilityRating ; csro:description "Low exploitability rating" . ### https://w3id.org/csro/ontology#LowExploitabilityAndHighExposure csro:LowExploitabilityAndHighExposure rdf:type owl:NamedIndividual , csro:LikelihoodCalculationRule ; csro:hasExploitabilityRating csro:LowExploitability ; csro:hasExposureRating csro:HighExposure ; csro:resultsIn csro:Possible . ### https://w3id.org/csro/ontology#LowExploitabilityAndLowExposure csro:LowExploitabilityAndLowExposure rdf:type owl:NamedIndividual , csro:LikelihoodCalculationRule ; csro:hasExploitabilityRating csro:LowExploitability ; csro:hasExposureRating csro:LowExposure ; csro:resultsIn csro:VeryUnlikely . ### https://w3id.org/csro/ontology#LowExploitabilityAndMediumExposure csro:LowExploitabilityAndMediumExposure rdf:type owl:NamedIndividual , csro:LikelihoodCalculationRule ; csro:hasExploitabilityRating csro:LowExploitability ; csro:hasExposureRating csro:MediumExposure ; csro:resultsIn csro:Unlikely . ### https://w3id.org/csro/ontology#LowExposure csro:LowExposure rdf:type owl:NamedIndividual , csro:ExposureRating ; csro:description "Low exposure rating" . ### https://w3id.org/csro/ontology#MON_1 csro:MON_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:MonitoringDetectionResponse ; csro:originatesFrom csro:CIS_Docker_Benchmark_1_1 , csro:CIS_Docker_Benchmark_2_3 , csro:NIST_SP_800_190_Section_4_4_4 , csro:OWASP_Docker_Security_Cheat_Sheet_10 , csro:OWASP_Docker_Top_10_D10 ; csro:assumptionId "MON-1" ; csro:description "Container-level logging is enabled" . ### https://w3id.org/csro/ontology#MON_2 csro:MON_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:MonitoringDetectionResponse ; csro:originatesFrom csro:NIST_SP_800_190_Section_4_4_4 ; csro:assumptionId "MON-2" ; csro:description "Processes on the host device are monitored for anomalous behavior" . ### https://w3id.org/csro/ontology#MON_3 csro:MON_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:MonitoringDetectionResponse ; csro:originatesFrom csro:CIS_Docker_Benchmark_2_17 , csro:CIS_Docker_Benchmark_5_2 , csro:CIS_Docker_Benchmark_5_22 , csro:CIS_Docker_Benchmark_5_3 , csro:NIST_SP_800_190_Section_4_4_4 ; csro:assumptionId "MON-3" ; csro:description "Runtime security tools (e.g. Falco, Trivy) are used" . ### https://w3id.org/csro/ontology#MON_4 csro:MON_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:MonitoringDetectionResponse ; csro:originatesFrom csro:CIS_Docker_Benchmark_4_6 , csro:CIS_Docker_Benchmark_5_27 , csro:NIST_SP_800_190_Section_4_4_4 ; csro:assumptionId "MON-4" ; csro:description "Incident response procedures are implemented" . ### https://w3id.org/csro/ontology#MON_5 csro:MON_5 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:MonitoringDetectionResponse ; csro:originatesFrom csro:CIS_Docker_Benchmark_2_13 , csro:NIST_SP_800_190_Section_4_4_4 , csro:OWASP_Docker_Top_10_D10 ; csro:assumptionId "MON-5" ; csro:description "Logs are centralized and protected" . ### https://w3id.org/csro/ontology#MON_6 csro:MON_6 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:MonitoringDetectionResponse ; csro:originatesFrom csro:NIST_SP_800_190_Section_4_4_4 ; csro:assumptionId "MON-6" ; csro:description "Decoy containers (honeypots) are deployed on the device to detect malicious activity" . ### https://w3id.org/csro/ontology#MON_7 csro:MON_7 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:MonitoringDetectionResponse ; csro:originatesFrom csro:NIST_SP_800_190_Section_4_4_4 ; csro:assumptionId "MON-7" ; csro:description "Container API calls and orchestration events are monitored for anomalies" . ### https://w3id.org/csro/ontology#MON_8 csro:MON_8 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:MonitoringDetectionResponse ; csro:originatesFrom csro:NIST_SP_800_190_Section_4_4_4 ; csro:assumptionId "MON-8" ; csro:description "Alerts are triggered for unauthorized access attempts to container registries or APIs" . ### https://w3id.org/csro/ontology#MaintainAssetInventory csro:MaintainAssetInventory rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:CRM_2 ; csro:description "Maintain comprehensive asset inventory for container infrastructure" ; rdfs:label "Maintain Asset Inventory" . ### https://w3id.org/csro/ontology#Major csro:Major rdf:type owl:NamedIndividual , csro:RiskLevel ; rdfs:label "Major" . ### https://w3id.org/csro/ontology#Medium csro:Medium rdf:type owl:NamedIndividual , csro:DifficultyLevel ; csro:description "Medium difficulty level for attack execution" . ### https://w3id.org/csro/ontology#MediumExploitability csro:MediumExploitability rdf:type owl:NamedIndividual , csro:ExploitabilityRating ; csro:description "Medium exploitability rating" . ### https://w3id.org/csro/ontology#MediumExploitabilityAndHighExposure csro:MediumExploitabilityAndHighExposure rdf:type owl:NamedIndividual , csro:LikelihoodCalculationRule ; csro:hasExploitabilityRating csro:MediumExploitability ; csro:hasExposureRating csro:HighExposure ; csro:resultsIn csro:Likely . ### https://w3id.org/csro/ontology#MediumExploitabilityAndLowExposure csro:MediumExploitabilityAndLowExposure rdf:type owl:NamedIndividual , csro:LikelihoodCalculationRule ; csro:hasExploitabilityRating csro:MediumExploitability ; csro:hasExposureRating csro:LowExposure ; csro:resultsIn csro:Unlikely . ### https://w3id.org/csro/ontology#MediumExploitabilityAndMediumExposure csro:MediumExploitabilityAndMediumExposure rdf:type owl:NamedIndividual , csro:LikelihoodCalculationRule ; csro:hasExploitabilityRating csro:MediumExploitability ; csro:hasExposureRating csro:MediumExposure ; csro:resultsIn csro:Possible . ### https://w3id.org/csro/ontology#MediumExposure csro:MediumExposure rdf:type owl:NamedIndividual , csro:ExposureRating ; csro:description "Medium exposure rating" . ### https://w3id.org/csro/ontology#MicroservicesScenario csro:MicroservicesScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:MicroservicesScenario_AUTH_1 , csro:MicroservicesScenario_AUTH_2 , csro:MicroservicesScenario_AUTH_3 , csro:MicroservicesScenario_CIC_1 , csro:MicroservicesScenario_CIC_2 , csro:MicroservicesScenario_CIC_3 , csro:MicroservicesScenario_CIC_4 , csro:MicroservicesScenario_CIC_5 , csro:MicroservicesScenario_CIC_6 , csro:MicroservicesScenario_CRM_1 , csro:MicroservicesScenario_CRM_2 , csro:MicroservicesScenario_CRM_3 , csro:MicroservicesScenario_CRM_4 , csro:MicroservicesScenario_HIS_1 , csro:MicroservicesScenario_HIS_2 , csro:MicroservicesScenario_HIS_3 , csro:MicroservicesScenario_IMG_1 , csro:MicroservicesScenario_IMG_2 , csro:MicroservicesScenario_IMG_3 , csro:MicroservicesScenario_IMG_4 , csro:MicroservicesScenario_IMG_5 , csro:MicroservicesScenario_IMG_6 , csro:MicroservicesScenario_MON_1 , csro:MicroservicesScenario_MON_2 , csro:MicroservicesScenario_MON_3 , csro:MicroservicesScenario_MON_4 , csro:MicroservicesScenario_MON_5 , csro:MicroservicesScenario_MON_6 , csro:MicroservicesScenario_MON_7 , csro:MicroservicesScenario_MON_8 , csro:MicroservicesScenario_NET_1 , csro:MicroservicesScenario_NET_2 , csro:MicroservicesScenario_NET_3 , csro:MicroservicesScenario_NET_4 , csro:MicroservicesScenario_RTS_1 , csro:MicroservicesScenario_RTS_2 , csro:MicroservicesScenario_RTS_3 , csro:MicroservicesScenario_RTS_4 , csro:MicroservicesScenario_RTS_5 , csro:MicroservicesScenario_RTS_6 , csro:MicroservicesScenario_RTS_7 , csro:MicroservicesScenario_SCM_1 , csro:MicroservicesScenario_SCM_2 , csro:MicroservicesScenario_SCM_3 , csro:MicroservicesScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Microservices architecture with service-to-service authentication but limited runtime protection" ; rdfs:label "Microservices Scenario" . ### https://w3id.org/csro/ontology#MicroservicesScenario_AUTH_1 csro:MicroservicesScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_AUTH_2 csro:MicroservicesScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_AUTH_3 csro:MicroservicesScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_CIC_1 csro:MicroservicesScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_CIC_2 csro:MicroservicesScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_CIC_3 csro:MicroservicesScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_CIC_4 csro:MicroservicesScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_CIC_5 csro:MicroservicesScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_CIC_6 csro:MicroservicesScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_CRM_1 csro:MicroservicesScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_CRM_2 csro:MicroservicesScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_CRM_3 csro:MicroservicesScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_CRM_4 csro:MicroservicesScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_HIS_1 csro:MicroservicesScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_HIS_2 csro:MicroservicesScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_HIS_3 csro:MicroservicesScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_IMG_1 csro:MicroservicesScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_IMG_2 csro:MicroservicesScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_IMG_3 csro:MicroservicesScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_IMG_4 csro:MicroservicesScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_IMG_5 csro:MicroservicesScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_IMG_6 csro:MicroservicesScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_MON_1 csro:MicroservicesScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_MON_2 csro:MicroservicesScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_MON_3 csro:MicroservicesScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_MON_4 csro:MicroservicesScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_MON_5 csro:MicroservicesScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_MON_6 csro:MicroservicesScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_MON_7 csro:MicroservicesScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_MON_8 csro:MicroservicesScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_NET_1 csro:MicroservicesScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_NET_2 csro:MicroservicesScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_NET_3 csro:MicroservicesScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_NET_4 csro:MicroservicesScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_RTS_1 csro:MicroservicesScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_RTS_2 csro:MicroservicesScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_RTS_3 csro:MicroservicesScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_RTS_4 csro:MicroservicesScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_RTS_5 csro:MicroservicesScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_RTS_6 csro:MicroservicesScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_RTS_7 csro:MicroservicesScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MicroservicesScenario_SCM_1 csro:MicroservicesScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_SCM_2 csro:MicroservicesScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_SCM_3 csro:MicroservicesScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MicroservicesScenario_SCM_4 csro:MicroservicesScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MinimizeCapabilities csro:MinimizeCapabilities rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:RTS_3 ; csro:hasGuideline csro:GuidelineCapabilities ; csro:isImplementedBy csro:cap_drop_all ; csro:description "Deploy containers with minimal Linux capabilities to reduce attack surface" ; rdfs:label "Minimize Capabilities" . ### https://w3id.org/csro/ontology#MinimizeHostResourceAccess csro:MinimizeHostResourceAccess rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:RTS_7 ; csro:description "Minimize container access to host resources through proper isolation and restrictions" ; rdfs:label "Minimize Host Resource Access" . ### https://w3id.org/csro/ontology#Minor csro:Minor rdf:type owl:NamedIndividual , csro:RiskLevel ; rdfs:label "Minor" . ### https://w3id.org/csro/ontology#MixedScenario csro:MixedScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:MixedScenario_IMG_1 , csro:MixedScenario_NET_1 , csro:MixedScenario_NET_2 , csro:MixedScenario_RTS_1 , csro:MixedScenario_RTS_2 , csro:MixedScenario_RTS_3 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Mixed container deployment scenario with partial security measures implemented to demonstrate medium ratings." ; rdfs:label "Mixed Scenario" . ### https://w3id.org/csro/ontology#MixedScenario_IMG_1 csro:MixedScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MixedScenario_NET_1 csro:MixedScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MixedScenario_NET_2 csro:MixedScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#MixedScenario_RTS_1 csro:MixedScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#MixedScenario_RTS_2 csro:MixedScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#MixedScenario_RTS_3 csro:MixedScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#Moderate csro:Moderate rdf:type owl:NamedIndividual , csro:ImpactRating , csro:RiskLevel ; csro:description "Moderate impact rating indicating significant but manageable consequences." ; rdfs:label "Moderate" . ### https://w3id.org/csro/ontology#MonitorAPIAndOrchestration csro:MonitorAPIAndOrchestration rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:MON_7 ; csro:description "Monitor container API calls and orchestration events for anomalous patterns" ; rdfs:label "Monitor API And Orchestration" . ### https://w3id.org/csro/ontology#MonitorHostForChanges csro:MonitorHostForChanges rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:HIS_3 ; csro:description "Monitor host devices for unauthorized changes and configuration drift" ; rdfs:label "Monitor Host For Changes" . ### https://w3id.org/csro/ontology#MonitorProcessBehavior csro:MonitorProcessBehavior rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:MON_2 ; csro:description "Monitor host processes for anomalous behavior and suspicious activities" ; rdfs:label "Monitor Process Behavior" . ### https://w3id.org/csro/ontology#MonitoringDetectionResponse csro:MonitoringDetectionResponse rdf:type owl:NamedIndividual , csro:AssumptionCategory ; csro:description "Security assumptions related to monitoring, detection and response." ; rdfs:label "Monitoring, Detection & Response" . ### https://w3id.org/csro/ontology#NET_1 csro:NET_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:NetworkSecurity ; csro:isVerifiableByAbsence csro:external_network ; csro:originatesFrom csro:CIS_Docker_Benchmark_5_10 , csro:CIS_Docker_Benchmark_5_30 , csro:NIST_SP_800_190_Section_4_3_3 , csro:OWASP_Docker_Security_Cheat_Sheet_5 , csro:OWASP_Docker_Top_10_D03 ; csro:assumptionId "NET-1" ; csro:description "App container networks are segmented" . ### https://w3id.org/csro/ontology#NET_2 csro:NET_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:NetworkSecurity ; csro:isVerifiableBy csro:host-level_firewall ; csro:originatesFrom csro:CIS_Docker_Benchmark_2_2 , csro:CIS_Docker_Benchmark_5_14 , csro:OWASP_Docker_Security_Cheat_Sheet_5 , csro:OWASP_Docker_Top_10_D03 ; csro:assumptionId "NET-2" ; csro:description "Host-level firewall rules and network policies are applied" . ### https://w3id.org/csro/ontology#NET_3 csro:NET_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:NetworkSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_7_3 , csro:NIST_SP_800_190_Section_4_3_3 ; csro:assumptionId "NET-3" ; csro:description "Inter-container communication is encrypted" . ### https://w3id.org/csro/ontology#NET_4 csro:NET_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:NetworkSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_2_2 , csro:CIS_Docker_Benchmark_5_14 , csro:NIST_SP_800_190_Section_4_4_2 , csro:OWASP_Docker_Top_10_D03 , csro:OWASP_Docker_Top_10_D04 ; csro:assumptionId "NET-4" ; csro:description "Ingress/egress controls for containers are implemented" . ### https://w3id.org/csro/ontology#NISTCompliantScenario csro:NISTCompliantScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:NISTCompliantScenario_AUTH_1 , csro:NISTCompliantScenario_AUTH_2 , csro:NISTCompliantScenario_AUTH_3 , csro:NISTCompliantScenario_CIC_1 , csro:NISTCompliantScenario_CIC_2 , csro:NISTCompliantScenario_CIC_3 , csro:NISTCompliantScenario_CIC_4 , csro:NISTCompliantScenario_CIC_5 , csro:NISTCompliantScenario_CIC_6 , csro:NISTCompliantScenario_CRM_1 , csro:NISTCompliantScenario_CRM_2 , csro:NISTCompliantScenario_CRM_3 , csro:NISTCompliantScenario_CRM_4 , csro:NISTCompliantScenario_HIS_1 , csro:NISTCompliantScenario_HIS_2 , csro:NISTCompliantScenario_HIS_3 , csro:NISTCompliantScenario_IMG_1 , csro:NISTCompliantScenario_IMG_2 , csro:NISTCompliantScenario_IMG_3 , csro:NISTCompliantScenario_IMG_4 , csro:NISTCompliantScenario_IMG_5 , csro:NISTCompliantScenario_IMG_6 , csro:NISTCompliantScenario_MON_1 , csro:NISTCompliantScenario_MON_2 , csro:NISTCompliantScenario_MON_3 , csro:NISTCompliantScenario_MON_4 , csro:NISTCompliantScenario_MON_5 , csro:NISTCompliantScenario_MON_6 , csro:NISTCompliantScenario_MON_7 , csro:NISTCompliantScenario_MON_8 , csro:NISTCompliantScenario_NET_1 , csro:NISTCompliantScenario_NET_2 , csro:NISTCompliantScenario_NET_3 , csro:NISTCompliantScenario_NET_4 , csro:NISTCompliantScenario_RTS_1 , csro:NISTCompliantScenario_RTS_2 , csro:NISTCompliantScenario_RTS_3 , csro:NISTCompliantScenario_RTS_4 , csro:NISTCompliantScenario_RTS_5 , csro:NISTCompliantScenario_RTS_6 , csro:NISTCompliantScenario_RTS_7 , csro:NISTCompliantScenario_SCM_1 , csro:NISTCompliantScenario_SCM_2 , csro:NISTCompliantScenario_SCM_3 , csro:NISTCompliantScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Scenario following NIST SP 800-190 Application Container Security Guide recommendations" ; rdfs:label "NIST Compliant Scenario" . ### https://w3id.org/csro/ontology#NISTCompliantScenario_AUTH_1 csro:NISTCompliantScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_AUTH_2 csro:NISTCompliantScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_AUTH_3 csro:NISTCompliantScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_CIC_1 csro:NISTCompliantScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NISTCompliantScenario_CIC_2 csro:NISTCompliantScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NISTCompliantScenario_CIC_3 csro:NISTCompliantScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NISTCompliantScenario_CIC_4 csro:NISTCompliantScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_CIC_5 csro:NISTCompliantScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NISTCompliantScenario_CIC_6 csro:NISTCompliantScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_CRM_1 csro:NISTCompliantScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_CRM_2 csro:NISTCompliantScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_CRM_3 csro:NISTCompliantScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_CRM_4 csro:NISTCompliantScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_HIS_1 csro:NISTCompliantScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_HIS_2 csro:NISTCompliantScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_HIS_3 csro:NISTCompliantScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_IMG_1 csro:NISTCompliantScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_IMG_2 csro:NISTCompliantScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_IMG_3 csro:NISTCompliantScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_IMG_4 csro:NISTCompliantScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_IMG_5 csro:NISTCompliantScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_IMG_6 csro:NISTCompliantScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_MON_1 csro:NISTCompliantScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_MON_2 csro:NISTCompliantScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_MON_3 csro:NISTCompliantScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_MON_4 csro:NISTCompliantScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_MON_5 csro:NISTCompliantScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_MON_6 csro:NISTCompliantScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_MON_7 csro:NISTCompliantScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_MON_8 csro:NISTCompliantScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_NET_1 csro:NISTCompliantScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_NET_2 csro:NISTCompliantScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NISTCompliantScenario_NET_3 csro:NISTCompliantScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_NET_4 csro:NISTCompliantScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_RTS_1 csro:NISTCompliantScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_RTS_2 csro:NISTCompliantScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_RTS_3 csro:NISTCompliantScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_RTS_4 csro:NISTCompliantScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_RTS_5 csro:NISTCompliantScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_RTS_6 csro:NISTCompliantScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_RTS_7 csro:NISTCompliantScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_SCM_1 csro:NISTCompliantScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_SCM_2 csro:NISTCompliantScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_SCM_3 csro:NISTCompliantScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NISTCompliantScenario_SCM_4 csro:NISTCompliantScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NIST_SP_800_190 csro:NIST_SP_800_190 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandard ; csro:description "NIST Special Publication 800-190: Application Container Security Guide" ; csro:publicationYear "2017"^^xsd:gYear ; csro:publishedBy "National Institute of Standards and Technology" ; csro:standardId "NIST SP 800-190" ; rdfs:label "NIST SP 800-190" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_1_1 csro:NIST_SP_800_190_Section_4_1_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Image vulnerabilities" ; csro:sectionId "ยง4.1.1" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_1_2 csro:NIST_SP_800_190_Section_4_1_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Image configuration defects" ; csro:sectionId "ยง4.1.2" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_1_4 csro:NIST_SP_800_190_Section_4_1_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Embedded malware" ; csro:sectionId "ยง4.1.4" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_1_5 csro:NIST_SP_800_190_Section_4_1_5 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Embedded clear text secrets" ; csro:sectionId "ยง4.1.5" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_2 csro:NIST_SP_800_190_Section_4_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Registry risks" ; csro:sectionId "ยง4.2" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_2_2 csro:NIST_SP_800_190_Section_4_2_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Countermeasures for Registry Threats" ; csro:sectionId "ยง4.2.2" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_3_1 csro:NIST_SP_800_190_Section_4_3_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Insecure user access rights" ; csro:sectionId "ยง4.3.1" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_3_2 csro:NIST_SP_800_190_Section_4_3_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Insecure inter-container network traffic" ; csro:sectionId "ยง4.3.2" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_3_3 csro:NIST_SP_800_190_Section_4_3_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Insecure data in transit and at rest" ; csro:sectionId "ยง4.3.3" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_4_2 csro:NIST_SP_800_190_Section_4_4_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Unrestricted network access" ; csro:sectionId "ยง4.4.2" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_4_3 csro:NIST_SP_800_190_Section_4_4_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Insecure container runtime configurations" ; csro:sectionId "ยง4.4.3" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_4_4 csro:NIST_SP_800_190_Section_4_4_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Unrestricted resource consumption" ; csro:sectionId "ยง4.4.4" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_4_5 csro:NIST_SP_800_190_Section_4_4_5 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Insecure secrets management" ; csro:sectionId "ยง4.4.5" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_5_3 csro:NIST_SP_800_190_Section_4_5_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Inadequate host OS hardening" ; csro:sectionId "ยง4.5.3" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_4_5_5 csro:NIST_SP_800_190_Section_4_5_5 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Inadequate monitoring and logging" ; csro:sectionId "ยง4.5.5" . ### https://w3id.org/csro/ontology#NIST_SP_800_190_Section_6 csro:NIST_SP_800_190_Section_6 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:NIST_SP_800_190 ; csro:description "Threat Modeling and Risk Assessment" ; csro:sectionId "ยง6" . ### https://w3id.org/csro/ontology#Negligible csro:Negligible rdf:type owl:NamedIndividual , csro:ImpactRating ; csro:description "Negligible impact rating indicating minimal consequences." . ### https://w3id.org/csro/ontology#NetworkCommunicationCompromiseRisk csro:NetworkCommunicationCompromiseRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of confidentiality and integrity breach through man-in-the-middle attacks on network communications" ; rdfs:label "Network Communication Compromise Risk" . ### https://w3id.org/csro/ontology#NetworkHardenedScenario csro:NetworkHardenedScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:NetworkHardenedScenario_AUTH_1 , csro:NetworkHardenedScenario_AUTH_2 , csro:NetworkHardenedScenario_AUTH_3 , csro:NetworkHardenedScenario_CIC_1 , csro:NetworkHardenedScenario_CIC_2 , csro:NetworkHardenedScenario_CIC_3 , csro:NetworkHardenedScenario_CIC_4 , csro:NetworkHardenedScenario_CIC_5 , csro:NetworkHardenedScenario_CIC_6 , csro:NetworkHardenedScenario_CRM_1 , csro:NetworkHardenedScenario_CRM_2 , csro:NetworkHardenedScenario_CRM_3 , csro:NetworkHardenedScenario_CRM_4 , csro:NetworkHardenedScenario_HIS_1 , csro:NetworkHardenedScenario_HIS_2 , csro:NetworkHardenedScenario_HIS_3 , csro:NetworkHardenedScenario_IMG_1 , csro:NetworkHardenedScenario_IMG_2 , csro:NetworkHardenedScenario_IMG_3 , csro:NetworkHardenedScenario_IMG_4 , csro:NetworkHardenedScenario_IMG_5 , csro:NetworkHardenedScenario_IMG_6 , csro:NetworkHardenedScenario_MON_1 , csro:NetworkHardenedScenario_MON_2 , csro:NetworkHardenedScenario_MON_3 , csro:NetworkHardenedScenario_MON_4 , csro:NetworkHardenedScenario_MON_5 , csro:NetworkHardenedScenario_MON_6 , csro:NetworkHardenedScenario_MON_7 , csro:NetworkHardenedScenario_MON_8 , csro:NetworkHardenedScenario_NET_1 , csro:NetworkHardenedScenario_NET_2 , csro:NetworkHardenedScenario_NET_3 , csro:NetworkHardenedScenario_NET_4 , csro:NetworkHardenedScenario_RTS_1 , csro:NetworkHardenedScenario_RTS_2 , csro:NetworkHardenedScenario_RTS_3 , csro:NetworkHardenedScenario_RTS_4 , csro:NetworkHardenedScenario_RTS_5 , csro:NetworkHardenedScenario_RTS_6 , csro:NetworkHardenedScenario_RTS_7 , csro:NetworkHardenedScenario_SCM_1 , csro:NetworkHardenedScenario_SCM_2 , csro:NetworkHardenedScenario_SCM_3 , csro:NetworkHardenedScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Scenario with strong network security controls including network policies, segmentation, and egress filtering" ; rdfs:label "Network Hardened Scenario" . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_AUTH_1 csro:NetworkHardenedScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_AUTH_2 csro:NetworkHardenedScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_AUTH_3 csro:NetworkHardenedScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_CIC_1 csro:NetworkHardenedScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_CIC_2 csro:NetworkHardenedScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_CIC_3 csro:NetworkHardenedScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_CIC_4 csro:NetworkHardenedScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_CIC_5 csro:NetworkHardenedScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_CIC_6 csro:NetworkHardenedScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_CRM_1 csro:NetworkHardenedScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_CRM_2 csro:NetworkHardenedScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_CRM_3 csro:NetworkHardenedScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_CRM_4 csro:NetworkHardenedScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_HIS_1 csro:NetworkHardenedScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_HIS_2 csro:NetworkHardenedScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_HIS_3 csro:NetworkHardenedScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_IMG_1 csro:NetworkHardenedScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_IMG_2 csro:NetworkHardenedScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_IMG_3 csro:NetworkHardenedScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_IMG_4 csro:NetworkHardenedScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_IMG_5 csro:NetworkHardenedScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_IMG_6 csro:NetworkHardenedScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_MON_1 csro:NetworkHardenedScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_MON_2 csro:NetworkHardenedScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_MON_3 csro:NetworkHardenedScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_MON_4 csro:NetworkHardenedScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_MON_5 csro:NetworkHardenedScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_MON_6 csro:NetworkHardenedScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_MON_7 csro:NetworkHardenedScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_MON_8 csro:NetworkHardenedScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_NET_1 csro:NetworkHardenedScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_NET_2 csro:NetworkHardenedScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_NET_3 csro:NetworkHardenedScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_NET_4 csro:NetworkHardenedScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_RTS_1 csro:NetworkHardenedScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_RTS_2 csro:NetworkHardenedScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_RTS_3 csro:NetworkHardenedScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_RTS_4 csro:NetworkHardenedScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_RTS_5 csro:NetworkHardenedScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_RTS_6 csro:NetworkHardenedScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_RTS_7 csro:NetworkHardenedScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_SCM_1 csro:NetworkHardenedScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_SCM_2 csro:NetworkHardenedScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_SCM_3 csro:NetworkHardenedScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkHardenedScenario_SCM_4 csro:NetworkHardenedScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#NetworkIsolationBreachRisk csro:NetworkIsolationBreachRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of integrity violation in network segmentation enabling unauthorized access and confidentiality breach" ; rdfs:label "Network Isolation Breach Risk" . ### https://w3id.org/csro/ontology#NetworkSecurity csro:NetworkSecurity rdf:type owl:NamedIndividual , csro:AssumptionCategory ; csro:description "Security assumptions related to network security and segmentation." ; rdfs:label "Network Security" . ### https://w3id.org/csro/ontology#NetworkSecurityControlsRemovalRisk csro:NetworkSecurityControlsRemovalRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of integrity violation in network security controls exposing system to comprehensive network-based attacks" ; rdfs:label "Network Security Controls Removal Risk" . ### https://w3id.org/csro/ontology#NetworkSegmentationBypass csro:NetworkSegmentationBypass rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Critical ; csro:indicates csro:NetworkIsolationBreachRisk ; csro:description "Integrity of network isolation controls compromised, enabling unauthorized network access to segmented assets and confidentiality breach across network boundaries" ; rdfs:label "Network Segmentation Bypass" . ### https://w3id.org/csro/ontology#OTSystemCompromise csro:OTSystemCompromise rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Disastrous ; csro:indicates csro:IndustrialSystemCompromiseRisk ; csro:description "Integrity and availability of operational technology systems compromised, potentially causing physical process disruption, equipment damage, or safety-critical failures" ; rdfs:label "OT System Compromise" . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario csro:OWASPCheatSheetCompliantScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:OWASPCheatSheetCompliantScenario_AUTH_1 , csro:OWASPCheatSheetCompliantScenario_AUTH_2 , csro:OWASPCheatSheetCompliantScenario_AUTH_3 , csro:OWASPCheatSheetCompliantScenario_CIC_1 , csro:OWASPCheatSheetCompliantScenario_CIC_2 , csro:OWASPCheatSheetCompliantScenario_CIC_3 , csro:OWASPCheatSheetCompliantScenario_CIC_4 , csro:OWASPCheatSheetCompliantScenario_CIC_5 , csro:OWASPCheatSheetCompliantScenario_CIC_6 , csro:OWASPCheatSheetCompliantScenario_CRM_1 , csro:OWASPCheatSheetCompliantScenario_CRM_2 , csro:OWASPCheatSheetCompliantScenario_CRM_3 , csro:OWASPCheatSheetCompliantScenario_CRM_4 , csro:OWASPCheatSheetCompliantScenario_HIS_1 , csro:OWASPCheatSheetCompliantScenario_HIS_2 , csro:OWASPCheatSheetCompliantScenario_HIS_3 , csro:OWASPCheatSheetCompliantScenario_IMG_1 , csro:OWASPCheatSheetCompliantScenario_IMG_2 , csro:OWASPCheatSheetCompliantScenario_IMG_3 , csro:OWASPCheatSheetCompliantScenario_IMG_4 , csro:OWASPCheatSheetCompliantScenario_IMG_5 , csro:OWASPCheatSheetCompliantScenario_IMG_6 , csro:OWASPCheatSheetCompliantScenario_MON_1 , csro:OWASPCheatSheetCompliantScenario_MON_2 , csro:OWASPCheatSheetCompliantScenario_MON_3 , csro:OWASPCheatSheetCompliantScenario_MON_4 , csro:OWASPCheatSheetCompliantScenario_MON_5 , csro:OWASPCheatSheetCompliantScenario_MON_6 , csro:OWASPCheatSheetCompliantScenario_MON_7 , csro:OWASPCheatSheetCompliantScenario_MON_8 , csro:OWASPCheatSheetCompliantScenario_NET_1 , csro:OWASPCheatSheetCompliantScenario_NET_2 , csro:OWASPCheatSheetCompliantScenario_NET_3 , csro:OWASPCheatSheetCompliantScenario_NET_4 , csro:OWASPCheatSheetCompliantScenario_RTS_1 , csro:OWASPCheatSheetCompliantScenario_RTS_2 , csro:OWASPCheatSheetCompliantScenario_RTS_3 , csro:OWASPCheatSheetCompliantScenario_RTS_4 , csro:OWASPCheatSheetCompliantScenario_RTS_5 , csro:OWASPCheatSheetCompliantScenario_RTS_6 , csro:OWASPCheatSheetCompliantScenario_RTS_7 , csro:OWASPCheatSheetCompliantScenario_SCM_1 , csro:OWASPCheatSheetCompliantScenario_SCM_2 , csro:OWASPCheatSheetCompliantScenario_SCM_3 , csro:OWASPCheatSheetCompliantScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Scenario following OWASP Docker Security Cheat Sheet recommendations" ; rdfs:label "OWASP Cheat Sheet Compliant Scenario" . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_AUTH_1 csro:OWASPCheatSheetCompliantScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_AUTH_2 csro:OWASPCheatSheetCompliantScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_AUTH_3 csro:OWASPCheatSheetCompliantScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_CIC_1 csro:OWASPCheatSheetCompliantScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_CIC_2 csro:OWASPCheatSheetCompliantScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_CIC_3 csro:OWASPCheatSheetCompliantScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_CIC_4 csro:OWASPCheatSheetCompliantScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_CIC_5 csro:OWASPCheatSheetCompliantScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_CIC_6 csro:OWASPCheatSheetCompliantScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_CRM_1 csro:OWASPCheatSheetCompliantScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_CRM_2 csro:OWASPCheatSheetCompliantScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_CRM_3 csro:OWASPCheatSheetCompliantScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_CRM_4 csro:OWASPCheatSheetCompliantScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_HIS_1 csro:OWASPCheatSheetCompliantScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_HIS_2 csro:OWASPCheatSheetCompliantScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_HIS_3 csro:OWASPCheatSheetCompliantScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_IMG_1 csro:OWASPCheatSheetCompliantScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_IMG_2 csro:OWASPCheatSheetCompliantScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_IMG_3 csro:OWASPCheatSheetCompliantScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_IMG_4 csro:OWASPCheatSheetCompliantScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_IMG_5 csro:OWASPCheatSheetCompliantScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_IMG_6 csro:OWASPCheatSheetCompliantScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_MON_1 csro:OWASPCheatSheetCompliantScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_MON_2 csro:OWASPCheatSheetCompliantScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_MON_3 csro:OWASPCheatSheetCompliantScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_MON_4 csro:OWASPCheatSheetCompliantScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_MON_5 csro:OWASPCheatSheetCompliantScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_MON_6 csro:OWASPCheatSheetCompliantScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_MON_7 csro:OWASPCheatSheetCompliantScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_MON_8 csro:OWASPCheatSheetCompliantScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_NET_1 csro:OWASPCheatSheetCompliantScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_NET_2 csro:OWASPCheatSheetCompliantScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_NET_3 csro:OWASPCheatSheetCompliantScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_NET_4 csro:OWASPCheatSheetCompliantScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_RTS_1 csro:OWASPCheatSheetCompliantScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_RTS_2 csro:OWASPCheatSheetCompliantScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_RTS_3 csro:OWASPCheatSheetCompliantScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_RTS_4 csro:OWASPCheatSheetCompliantScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_RTS_5 csro:OWASPCheatSheetCompliantScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_RTS_6 csro:OWASPCheatSheetCompliantScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_RTS_7 csro:OWASPCheatSheetCompliantScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_SCM_1 csro:OWASPCheatSheetCompliantScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_SCM_2 csro:OWASPCheatSheetCompliantScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_SCM_3 csro:OWASPCheatSheetCompliantScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPCheatSheetCompliantScenario_SCM_4 csro:OWASPCheatSheetCompliantScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario csro:OWASPTop10CompliantScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:OWASPTop10CompliantScenario_AUTH_1 , csro:OWASPTop10CompliantScenario_AUTH_2 , csro:OWASPTop10CompliantScenario_AUTH_3 , csro:OWASPTop10CompliantScenario_CIC_1 , csro:OWASPTop10CompliantScenario_CIC_2 , csro:OWASPTop10CompliantScenario_CIC_3 , csro:OWASPTop10CompliantScenario_CIC_4 , csro:OWASPTop10CompliantScenario_CIC_5 , csro:OWASPTop10CompliantScenario_CIC_6 , csro:OWASPTop10CompliantScenario_CRM_1 , csro:OWASPTop10CompliantScenario_CRM_2 , csro:OWASPTop10CompliantScenario_CRM_3 , csro:OWASPTop10CompliantScenario_CRM_4 , csro:OWASPTop10CompliantScenario_HIS_1 , csro:OWASPTop10CompliantScenario_HIS_2 , csro:OWASPTop10CompliantScenario_HIS_3 , csro:OWASPTop10CompliantScenario_IMG_1 , csro:OWASPTop10CompliantScenario_IMG_2 , csro:OWASPTop10CompliantScenario_IMG_3 , csro:OWASPTop10CompliantScenario_IMG_4 , csro:OWASPTop10CompliantScenario_IMG_5 , csro:OWASPTop10CompliantScenario_IMG_6 , csro:OWASPTop10CompliantScenario_MON_1 , csro:OWASPTop10CompliantScenario_MON_2 , csro:OWASPTop10CompliantScenario_MON_3 , csro:OWASPTop10CompliantScenario_MON_4 , csro:OWASPTop10CompliantScenario_MON_5 , csro:OWASPTop10CompliantScenario_MON_6 , csro:OWASPTop10CompliantScenario_MON_7 , csro:OWASPTop10CompliantScenario_MON_8 , csro:OWASPTop10CompliantScenario_NET_1 , csro:OWASPTop10CompliantScenario_NET_2 , csro:OWASPTop10CompliantScenario_NET_3 , csro:OWASPTop10CompliantScenario_NET_4 , csro:OWASPTop10CompliantScenario_RTS_1 , csro:OWASPTop10CompliantScenario_RTS_2 , csro:OWASPTop10CompliantScenario_RTS_3 , csro:OWASPTop10CompliantScenario_RTS_4 , csro:OWASPTop10CompliantScenario_RTS_5 , csro:OWASPTop10CompliantScenario_RTS_6 , csro:OWASPTop10CompliantScenario_RTS_7 , csro:OWASPTop10CompliantScenario_SCM_1 , csro:OWASPTop10CompliantScenario_SCM_2 , csro:OWASPTop10CompliantScenario_SCM_3 , csro:OWASPTop10CompliantScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Scenario following OWASP Docker Top 10 security risks mitigation recommendations" ; rdfs:label "OWASP Top 10 Compliant Scenario" . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_AUTH_1 csro:OWASPTop10CompliantScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_AUTH_2 csro:OWASPTop10CompliantScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_AUTH_3 csro:OWASPTop10CompliantScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_CIC_1 csro:OWASPTop10CompliantScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_CIC_2 csro:OWASPTop10CompliantScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_CIC_3 csro:OWASPTop10CompliantScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_CIC_4 csro:OWASPTop10CompliantScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_CIC_5 csro:OWASPTop10CompliantScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_CIC_6 csro:OWASPTop10CompliantScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_CRM_1 csro:OWASPTop10CompliantScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_CRM_2 csro:OWASPTop10CompliantScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_CRM_3 csro:OWASPTop10CompliantScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_CRM_4 csro:OWASPTop10CompliantScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_HIS_1 csro:OWASPTop10CompliantScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_HIS_2 csro:OWASPTop10CompliantScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_HIS_3 csro:OWASPTop10CompliantScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_IMG_1 csro:OWASPTop10CompliantScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_IMG_2 csro:OWASPTop10CompliantScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_IMG_3 csro:OWASPTop10CompliantScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_IMG_4 csro:OWASPTop10CompliantScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_IMG_5 csro:OWASPTop10CompliantScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_IMG_6 csro:OWASPTop10CompliantScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_MON_1 csro:OWASPTop10CompliantScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_MON_2 csro:OWASPTop10CompliantScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_MON_3 csro:OWASPTop10CompliantScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_MON_4 csro:OWASPTop10CompliantScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_MON_5 csro:OWASPTop10CompliantScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_MON_6 csro:OWASPTop10CompliantScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_MON_7 csro:OWASPTop10CompliantScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_MON_8 csro:OWASPTop10CompliantScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_NET_1 csro:OWASPTop10CompliantScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_NET_2 csro:OWASPTop10CompliantScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_NET_3 csro:OWASPTop10CompliantScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_NET_4 csro:OWASPTop10CompliantScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_RTS_1 csro:OWASPTop10CompliantScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_RTS_2 csro:OWASPTop10CompliantScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_RTS_3 csro:OWASPTop10CompliantScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_RTS_4 csro:OWASPTop10CompliantScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_RTS_5 csro:OWASPTop10CompliantScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_RTS_6 csro:OWASPTop10CompliantScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_RTS_7 csro:OWASPTop10CompliantScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_SCM_1 csro:OWASPTop10CompliantScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_SCM_2 csro:OWASPTop10CompliantScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_SCM_3 csro:OWASPTop10CompliantScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#OWASPTop10CompliantScenario_SCM_4 csro:OWASPTop10CompliantScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet csro:OWASP_Docker_Security_Cheat_Sheet rdf:type owl:NamedIndividual , csro:ContainerSecurityStandard ; csro:description "OWASP Docker Security Cheat Sheet: Security best practices for Docker" ; csro:publishedBy "Open Web Application Security Project" ; csro:standardId "OWASP Docker Security Cheat Sheet" ; rdfs:label "OWASP Docker Security Cheat Sheet" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_0 csro:OWASP_Docker_Security_Cheat_Sheet_0 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Rule #0 - Keep Host and Docker up to date" ; csro:sectionId "#0" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_1 csro:OWASP_Docker_Security_Cheat_Sheet_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Keep Host and Docker up to date" ; csro:sectionId "#1" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_10 csro:OWASP_Docker_Security_Cheat_Sheet_10 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Set up appropriate logging" ; csro:sectionId "#10" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_11 csro:OWASP_Docker_Security_Cheat_Sheet_11 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Use official docker images" ; csro:sectionId "#11" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_12 csro:OWASP_Docker_Security_Cheat_Sheet_12 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Include health / liveness checks" ; csro:sectionId "#12" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_13 csro:OWASP_Docker_Security_Cheat_Sheet_13 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Verify container images" ; csro:sectionId "#13" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_2 csro:OWASP_Docker_Security_Cheat_Sheet_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Do not expose the Docker daemon socket" ; csro:sectionId "#2" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_3 csro:OWASP_Docker_Security_Cheat_Sheet_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Limit capabilities (Grant only specific capabilities, needed by a container)" ; csro:sectionId "#3" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_5 csro:OWASP_Docker_Security_Cheat_Sheet_5 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Set filesystem and volumes to read-only" ; csro:sectionId "#5" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_6 csro:OWASP_Docker_Security_Cheat_Sheet_6 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Complete lifecycle management" ; csro:sectionId "#6" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_7 csro:OWASP_Docker_Security_Cheat_Sheet_7 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Restrict system calls from within containers" ; csro:sectionId "#7" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_8 csro:OWASP_Docker_Security_Cheat_Sheet_8 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Set filesystem and volumes to read-only" ; csro:sectionId "#8" . ### https://w3id.org/csro/ontology#OWASP_Docker_Security_Cheat_Sheet_9 csro:OWASP_Docker_Security_Cheat_Sheet_9 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Security_Cheat_Sheet ; csro:description "Use minimal base images" ; csro:sectionId "#9" . ### https://w3id.org/csro/ontology#OWASP_Docker_Top_10 csro:OWASP_Docker_Top_10 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandard ; csro:description "OWASP Docker Top 10: Top 10 Docker security risks" ; csro:publicationYear "2019"^^xsd:gYear ; csro:publishedBy "Open Web Application Security Project" ; csro:standardId "OWASP Docker Top 10" ; rdfs:label "OWASP Docker Top 10" . ### https://w3id.org/csro/ontology#OWASP_Docker_Top_10_D01 csro:OWASP_Docker_Top_10_D01 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Top_10 ; csro:description "Secure User Mapping" ; csro:sectionId "D01" . ### https://w3id.org/csro/ontology#OWASP_Docker_Top_10_D02 csro:OWASP_Docker_Top_10_D02 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Top_10 ; csro:description "Patch Management Strategy" ; csro:sectionId "D02" . ### https://w3id.org/csro/ontology#OWASP_Docker_Top_10_D03 csro:OWASP_Docker_Top_10_D03 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Top_10 ; csro:description "Network Segmentation and Firewalling" ; csro:sectionId "D03" . ### https://w3id.org/csro/ontology#OWASP_Docker_Top_10_D04 csro:OWASP_Docker_Top_10_D04 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Top_10 ; csro:description "Secure Defaults and Hardening" ; csro:sectionId "D04" . ### https://w3id.org/csro/ontology#OWASP_Docker_Top_10_D05 csro:OWASP_Docker_Top_10_D05 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Top_10 ; csro:description "Maintain Security Contexts" ; csro:sectionId "D05" . ### https://w3id.org/csro/ontology#OWASP_Docker_Top_10_D06 csro:OWASP_Docker_Top_10_D06 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Top_10 ; csro:description "Protect Secrets" ; csro:sectionId "D06" . ### https://w3id.org/csro/ontology#OWASP_Docker_Top_10_D07 csro:OWASP_Docker_Top_10_D07 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Top_10 ; csro:description "Resource Protection" ; csro:sectionId "D07" . ### https://w3id.org/csro/ontology#OWASP_Docker_Top_10_D08 csro:OWASP_Docker_Top_10_D08 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Top_10 ; csro:description "Container Image Integrity and Origin" ; csro:sectionId "D08" . ### https://w3id.org/csro/ontology#OWASP_Docker_Top_10_D09 csro:OWASP_Docker_Top_10_D09 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Top_10 ; csro:description "Follow Immutable Paradigm" ; csro:sectionId "D09" . ### https://w3id.org/csro/ontology#OWASP_Docker_Top_10_D10 csro:OWASP_Docker_Top_10_D10 rdf:type owl:NamedIndividual , csro:ContainerSecurityStandardSection ; csro:belongsToStandard csro:OWASP_Docker_Top_10 ; csro:description "Logging" ; csro:sectionId "D10" . ### https://w3id.org/csro/ontology#OtherApplications csro:OtherApplications rdf:type owl:NamedIndividual , csro:Component ; csro:description "Other applications and processes running on the host system outside of containers." ; rdfs:label "Other Applications" . ### https://w3id.org/csro/ontology#OutdatedContainersScenario csro:OutdatedContainersScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:OutdatedContainersScenario_AUTH_1 , csro:OutdatedContainersScenario_AUTH_2 , csro:OutdatedContainersScenario_AUTH_3 , csro:OutdatedContainersScenario_CIC_1 , csro:OutdatedContainersScenario_CIC_2 , csro:OutdatedContainersScenario_CIC_3 , csro:OutdatedContainersScenario_CIC_4 , csro:OutdatedContainersScenario_CIC_5 , csro:OutdatedContainersScenario_CIC_6 , csro:OutdatedContainersScenario_CRM_1 , csro:OutdatedContainersScenario_CRM_2 , csro:OutdatedContainersScenario_CRM_3 , csro:OutdatedContainersScenario_CRM_4 , csro:OutdatedContainersScenario_HIS_1 , csro:OutdatedContainersScenario_HIS_2 , csro:OutdatedContainersScenario_HIS_3 , csro:OutdatedContainersScenario_IMG_1 , csro:OutdatedContainersScenario_IMG_2 , csro:OutdatedContainersScenario_IMG_3 , csro:OutdatedContainersScenario_IMG_4 , csro:OutdatedContainersScenario_IMG_5 , csro:OutdatedContainersScenario_IMG_6 , csro:OutdatedContainersScenario_MON_1 , csro:OutdatedContainersScenario_MON_2 , csro:OutdatedContainersScenario_MON_3 , csro:OutdatedContainersScenario_MON_4 , csro:OutdatedContainersScenario_MON_5 , csro:OutdatedContainersScenario_MON_6 , csro:OutdatedContainersScenario_MON_7 , csro:OutdatedContainersScenario_MON_8 , csro:OutdatedContainersScenario_NET_1 , csro:OutdatedContainersScenario_NET_2 , csro:OutdatedContainersScenario_NET_3 , csro:OutdatedContainersScenario_NET_4 , csro:OutdatedContainersScenario_RTS_1 , csro:OutdatedContainersScenario_RTS_2 , csro:OutdatedContainersScenario_RTS_3 , csro:OutdatedContainersScenario_RTS_4 , csro:OutdatedContainersScenario_RTS_5 , csro:OutdatedContainersScenario_RTS_6 , csro:OutdatedContainersScenario_RTS_7 , csro:OutdatedContainersScenario_SCM_1 , csro:OutdatedContainersScenario_SCM_2 , csro:OutdatedContainersScenario_SCM_3 , csro:OutdatedContainersScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Legacy container deployment with outdated security practices and limited monitoring" ; rdfs:label "Outdated Containers Scenario" . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_AUTH_1 csro:OutdatedContainersScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_AUTH_2 csro:OutdatedContainersScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_AUTH_3 csro:OutdatedContainersScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_CIC_1 csro:OutdatedContainersScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_CIC_2 csro:OutdatedContainersScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_CIC_3 csro:OutdatedContainersScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_CIC_4 csro:OutdatedContainersScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_CIC_5 csro:OutdatedContainersScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_CIC_6 csro:OutdatedContainersScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_CRM_1 csro:OutdatedContainersScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_CRM_2 csro:OutdatedContainersScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_CRM_3 csro:OutdatedContainersScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_CRM_4 csro:OutdatedContainersScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_HIS_1 csro:OutdatedContainersScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_HIS_2 csro:OutdatedContainersScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_HIS_3 csro:OutdatedContainersScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_IMG_1 csro:OutdatedContainersScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_IMG_2 csro:OutdatedContainersScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_IMG_3 csro:OutdatedContainersScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_IMG_4 csro:OutdatedContainersScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_IMG_5 csro:OutdatedContainersScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_IMG_6 csro:OutdatedContainersScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_MON_1 csro:OutdatedContainersScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_MON_2 csro:OutdatedContainersScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_MON_3 csro:OutdatedContainersScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_MON_4 csro:OutdatedContainersScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_MON_5 csro:OutdatedContainersScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_MON_6 csro:OutdatedContainersScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_MON_7 csro:OutdatedContainersScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_MON_8 csro:OutdatedContainersScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_NET_1 csro:OutdatedContainersScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_NET_2 csro:OutdatedContainersScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_NET_3 csro:OutdatedContainersScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_NET_4 csro:OutdatedContainersScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_RTS_1 csro:OutdatedContainersScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_RTS_2 csro:OutdatedContainersScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_RTS_3 csro:OutdatedContainersScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_RTS_4 csro:OutdatedContainersScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_RTS_5 csro:OutdatedContainersScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_RTS_6 csro:OutdatedContainersScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_RTS_7 csro:OutdatedContainersScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_SCM_1 csro:OutdatedContainersScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_SCM_2 csro:OutdatedContainersScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_SCM_3 csro:OutdatedContainersScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#OutdatedContainersScenario_SCM_4 csro:OutdatedContainersScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#PerformRegularRiskAssessments csro:PerformRegularRiskAssessments rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:CRM_1 ; csro:description "Perform regular risk assessments of applications and host infrastructure" ; rdfs:label "Perform Regular Risk Assessments" . ### https://w3id.org/csro/ontology#PinBaseImageVersions csro:PinBaseImageVersions rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:IMG_4 ; csro:description "Pin base image versions in Dockerfiles to ensure reproducibility and control updates" ; rdfs:label "Pin Base Image Versions" . ### https://w3id.org/csro/ontology#PortHijackingDoS csro:PortHijackingDoS rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Moderate ; csro:indicates csro:ServiceDisruptionRisk ; csro:description "Availability of network services compromised through port blocking, preventing legitimate applications from accepting connections" ; rdfs:label "Port Hijacking DoS" . ### https://w3id.org/csro/ontology#Possible csro:Possible rdf:type owl:NamedIndividual , csro:Likelihood ; rdfs:label "Possible" . ### https://w3id.org/csro/ontology#PossibleLikelihoodAndCriticalImpact csro:PossibleLikelihoodAndCriticalImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Critical ; csro:hasLikelihoodRating csro:Possible ; csro:resultsIn csro:Moderate . ### https://w3id.org/csro/ontology#PossibleLikelihoodAndDisastrousImpact csro:PossibleLikelihoodAndDisastrousImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Disastrous ; csro:hasLikelihoodRating csro:Possible ; csro:resultsIn csro:Significant . ### https://w3id.org/csro/ontology#PossibleLikelihoodAndModerateImpact csro:PossibleLikelihoodAndModerateImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Moderate ; csro:hasLikelihoodRating csro:Possible ; csro:resultsIn csro:Moderate . ### https://w3id.org/csro/ontology#PossibleLikelihoodAndNegligibleImpact csro:PossibleLikelihoodAndNegligibleImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Negligible ; csro:hasLikelihoodRating csro:Possible ; csro:resultsIn csro:Minor . ### https://w3id.org/csro/ontology#ProductionScenario csro:ProductionScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:ProductionScenario_AUTH_1 , csro:ProductionScenario_AUTH_2 , csro:ProductionScenario_AUTH_3 , csro:ProductionScenario_CIC_1 , csro:ProductionScenario_CIC_2 , csro:ProductionScenario_CIC_3 , csro:ProductionScenario_CIC_4 , csro:ProductionScenario_CIC_5 , csro:ProductionScenario_CIC_6 , csro:ProductionScenario_CRM_1 , csro:ProductionScenario_CRM_2 , csro:ProductionScenario_CRM_3 , csro:ProductionScenario_CRM_4 , csro:ProductionScenario_HIS_1 , csro:ProductionScenario_HIS_2 , csro:ProductionScenario_HIS_3 , csro:ProductionScenario_IMG_1 , csro:ProductionScenario_IMG_2 , csro:ProductionScenario_IMG_3 , csro:ProductionScenario_IMG_4 , csro:ProductionScenario_IMG_5 , csro:ProductionScenario_IMG_6 , csro:ProductionScenario_MON_1 , csro:ProductionScenario_MON_2 , csro:ProductionScenario_MON_3 , csro:ProductionScenario_MON_4 , csro:ProductionScenario_MON_5 , csro:ProductionScenario_MON_6 , csro:ProductionScenario_MON_7 , csro:ProductionScenario_MON_8 , csro:ProductionScenario_NET_1 , csro:ProductionScenario_NET_2 , csro:ProductionScenario_NET_3 , csro:ProductionScenario_NET_4 , csro:ProductionScenario_RTS_1 , csro:ProductionScenario_RTS_2 , csro:ProductionScenario_RTS_3 , csro:ProductionScenario_RTS_4 , csro:ProductionScenario_RTS_5 , csro:ProductionScenario_RTS_6 , csro:ProductionScenario_RTS_7 , csro:ProductionScenario_SCM_1 , csro:ProductionScenario_SCM_2 , csro:ProductionScenario_SCM_3 , csro:ProductionScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Production deployment with comprehensive security controls implemented according to best practices" ; rdfs:label "Production Scenario" . ### https://w3id.org/csro/ontology#ProductionScenario_AUTH_1 csro:ProductionScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_AUTH_2 csro:ProductionScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_AUTH_3 csro:ProductionScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_CIC_1 csro:ProductionScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_CIC_2 csro:ProductionScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_CIC_3 csro:ProductionScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_CIC_4 csro:ProductionScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_CIC_5 csro:ProductionScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_CIC_6 csro:ProductionScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_CRM_1 csro:ProductionScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_CRM_2 csro:ProductionScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_CRM_3 csro:ProductionScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_CRM_4 csro:ProductionScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_HIS_1 csro:ProductionScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_HIS_2 csro:ProductionScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_HIS_3 csro:ProductionScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_IMG_1 csro:ProductionScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_IMG_2 csro:ProductionScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_IMG_3 csro:ProductionScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_IMG_4 csro:ProductionScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_IMG_5 csro:ProductionScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_IMG_6 csro:ProductionScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_MON_1 csro:ProductionScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_MON_2 csro:ProductionScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_MON_3 csro:ProductionScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_MON_4 csro:ProductionScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_MON_5 csro:ProductionScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_MON_6 csro:ProductionScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_MON_7 csro:ProductionScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_MON_8 csro:ProductionScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_NET_1 csro:ProductionScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_NET_2 csro:ProductionScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_NET_3 csro:ProductionScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_NET_4 csro:ProductionScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_RTS_1 csro:ProductionScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_RTS_2 csro:ProductionScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_RTS_3 csro:ProductionScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_RTS_4 csro:ProductionScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_RTS_5 csro:ProductionScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_RTS_6 csro:ProductionScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_RTS_7 csro:ProductionScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_SCM_1 csro:ProductionScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_SCM_2 csro:ProductionScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_SCM_3 csro:ProductionScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProductionScenario_SCM_4 csro:ProductionScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#ProhibitHardcodedSecrets csro:ProhibitHardcodedSecrets rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:SCM_2 ; csro:description "Prohibit hardcoded secrets in application code and container images" ; rdfs:label "Prohibit Hardcoded Secrets" . ### https://w3id.org/csro/ontology#RTS_1 csro:RTS_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:RuntimeSecurity ; csro:isVerifiableBy csro:non-root_user ; csro:originatesFrom csro:CIS_Docker_Benchmark_4_1 , csro:CIS_Docker_Benchmark_5_24 , csro:CIS_Docker_Benchmark_5_31 , csro:NIST_SP_800_190_Section_4_1_2 , csro:OWASP_Docker_Security_Cheat_Sheet_11 , csro:OWASP_Docker_Security_Cheat_Sheet_2 , csro:OWASP_Docker_Security_Cheat_Sheet_9 , csro:OWASP_Docker_Top_10_D01 ; csro:assumptionId "RTS-1" ; csro:description "App containers are run as non-root user" . ### https://w3id.org/csro/ontology#RTS_2 csro:RTS_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:RuntimeSecurity ; csro:isVerifiableBy csro:read_only_filesystem ; csro:originatesFrom csro:CIS_Docker_Benchmark_5_13 , csro:NIST_SP_800_190_Section_4_4_4 , csro:OWASP_Docker_Security_Cheat_Sheet_8 , csro:OWASP_Docker_Top_10_D09 ; csro:assumptionId "RTS-2" ; csro:description "App containers use read-only file systems" . ### https://w3id.org/csro/ontology#RTS_3 csro:RTS_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:RuntimeSecurity ; csro:isVerifiableBy csro:cap_drop_all ; csro:isVerifiableByAbsence csro:cap_add_CAP_NET_ADMIN , csro:cap_add_CAP_SYS_ADMIN ; csro:originatesFrom csro:CIS_Docker_Benchmark_4_8 , csro:CIS_Docker_Benchmark_5_4 , csro:NIST_SP_800_190_Section_4_4_3 , csro:OWASP_Docker_Security_Cheat_Sheet_3 , csro:OWASP_Docker_Top_10_D04 ; csro:assumptionId "RTS-3" ; csro:description "App containers are deployed with minimal Linux capabilities" . ### https://w3id.org/csro/ontology#RTS_4 csro:RTS_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:RuntimeSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_2_17 , csro:CIS_Docker_Benchmark_5_22 , csro:NIST_SP_800_190_Section_4_4_3 , csro:OWASP_Docker_Security_Cheat_Sheet_6 , csro:OWASP_Docker_Top_10_D04 ; csro:assumptionId "RTS-4" ; csro:description "Seccomp is implemented on the device" . ### https://w3id.org/csro/ontology#RTS_5 csro:RTS_5 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:RuntimeSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_5_2 , csro:NIST_SP_800_190_Section_4_4_3 , csro:OWASP_Docker_Security_Cheat_Sheet_6 , csro:OWASP_Docker_Top_10_D04 ; csro:assumptionId "RTS-5" ; csro:description "AppArmor is implemented on the device" . ### https://w3id.org/csro/ontology#RTS_6 csro:RTS_6 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:RuntimeSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_5_3 , csro:NIST_SP_800_190_Section_4_4_3 , csro:OWASP_Docker_Security_Cheat_Sheet_6 , csro:OWASP_Docker_Top_10_D04 ; csro:assumptionId "RTS-6" ; csro:description "SELinux is implemented on the device" . ### https://w3id.org/csro/ontology#RTS_7 csro:RTS_7 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:RuntimeSecurity ; csro:originatesFrom csro:CIS_Docker_Benchmark_5_10 , csro:CIS_Docker_Benchmark_5_11 , csro:CIS_Docker_Benchmark_5_12 , csro:CIS_Docker_Benchmark_5_16 , csro:CIS_Docker_Benchmark_5_17 , csro:CIS_Docker_Benchmark_5_18 , csro:CIS_Docker_Benchmark_5_21 , csro:CIS_Docker_Benchmark_5_25 , csro:CIS_Docker_Benchmark_5_31 , csro:CIS_Docker_Benchmark_5_6 , csro:NIST_SP_800_190_Section_4_4_3 , csro:OWASP_Docker_Security_Cheat_Sheet_11 , csro:OWASP_Docker_Security_Cheat_Sheet_7 , csro:OWASP_Docker_Top_10_D07 ; csro:assumptionId "RTS-7" ; csro:description "App containers have minimal access to host resources" . ### https://w3id.org/csro/ontology#RapidPrototypeScenario csro:RapidPrototypeScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:RapidPrototypeScenario_AUTH_1 , csro:RapidPrototypeScenario_AUTH_2 , csro:RapidPrototypeScenario_AUTH_3 , csro:RapidPrototypeScenario_CIC_1 , csro:RapidPrototypeScenario_CIC_2 , csro:RapidPrototypeScenario_CIC_3 , csro:RapidPrototypeScenario_CIC_4 , csro:RapidPrototypeScenario_CIC_5 , csro:RapidPrototypeScenario_CIC_6 , csro:RapidPrototypeScenario_CRM_1 , csro:RapidPrototypeScenario_CRM_2 , csro:RapidPrototypeScenario_CRM_3 , csro:RapidPrototypeScenario_CRM_4 , csro:RapidPrototypeScenario_HIS_1 , csro:RapidPrototypeScenario_HIS_2 , csro:RapidPrototypeScenario_HIS_3 , csro:RapidPrototypeScenario_IMG_1 , csro:RapidPrototypeScenario_IMG_2 , csro:RapidPrototypeScenario_IMG_3 , csro:RapidPrototypeScenario_IMG_4 , csro:RapidPrototypeScenario_IMG_5 , csro:RapidPrototypeScenario_IMG_6 , csro:RapidPrototypeScenario_MON_1 , csro:RapidPrototypeScenario_MON_2 , csro:RapidPrototypeScenario_MON_3 , csro:RapidPrototypeScenario_MON_4 , csro:RapidPrototypeScenario_MON_5 , csro:RapidPrototypeScenario_MON_6 , csro:RapidPrototypeScenario_MON_7 , csro:RapidPrototypeScenario_MON_8 , csro:RapidPrototypeScenario_NET_1 , csro:RapidPrototypeScenario_NET_2 , csro:RapidPrototypeScenario_NET_3 , csro:RapidPrototypeScenario_NET_4 , csro:RapidPrototypeScenario_RTS_1 , csro:RapidPrototypeScenario_RTS_2 , csro:RapidPrototypeScenario_RTS_3 , csro:RapidPrototypeScenario_RTS_4 , csro:RapidPrototypeScenario_RTS_5 , csro:RapidPrototypeScenario_RTS_6 , csro:RapidPrototypeScenario_RTS_7 , csro:RapidPrototypeScenario_SCM_1 , csro:RapidPrototypeScenario_SCM_2 , csro:RapidPrototypeScenario_SCM_3 , csro:RapidPrototypeScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Rapid prototyping environment prioritizing speed over security with minimal controls" ; rdfs:label "Rapid Prototype Scenario" . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_AUTH_1 csro:RapidPrototypeScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_AUTH_2 csro:RapidPrototypeScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_AUTH_3 csro:RapidPrototypeScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_CIC_1 csro:RapidPrototypeScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_CIC_2 csro:RapidPrototypeScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_CIC_3 csro:RapidPrototypeScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_CIC_4 csro:RapidPrototypeScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_CIC_5 csro:RapidPrototypeScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_CIC_6 csro:RapidPrototypeScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_CRM_1 csro:RapidPrototypeScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_CRM_2 csro:RapidPrototypeScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_CRM_3 csro:RapidPrototypeScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_CRM_4 csro:RapidPrototypeScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_HIS_1 csro:RapidPrototypeScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_HIS_2 csro:RapidPrototypeScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_HIS_3 csro:RapidPrototypeScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_IMG_1 csro:RapidPrototypeScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_IMG_2 csro:RapidPrototypeScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_IMG_3 csro:RapidPrototypeScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_IMG_4 csro:RapidPrototypeScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_IMG_5 csro:RapidPrototypeScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_IMG_6 csro:RapidPrototypeScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_MON_1 csro:RapidPrototypeScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_MON_2 csro:RapidPrototypeScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_MON_3 csro:RapidPrototypeScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_MON_4 csro:RapidPrototypeScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_MON_5 csro:RapidPrototypeScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_MON_6 csro:RapidPrototypeScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_MON_7 csro:RapidPrototypeScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_MON_8 csro:RapidPrototypeScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_NET_1 csro:RapidPrototypeScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_NET_2 csro:RapidPrototypeScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_NET_3 csro:RapidPrototypeScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_NET_4 csro:RapidPrototypeScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_RTS_1 csro:RapidPrototypeScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_RTS_2 csro:RapidPrototypeScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_RTS_3 csro:RapidPrototypeScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_RTS_4 csro:RapidPrototypeScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_RTS_5 csro:RapidPrototypeScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_RTS_6 csro:RapidPrototypeScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_RTS_7 csro:RapidPrototypeScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_SCM_1 csro:RapidPrototypeScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_SCM_2 csro:RapidPrototypeScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_SCM_3 csro:RapidPrototypeScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RapidPrototypeScenario_SCM_4 csro:RapidPrototypeScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RebuildImagesRegularly csro:RebuildImagesRegularly rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:IMG_5 ; csro:description "Rebuild and update container images regularly to address vulnerabilities and apply patches" ; rdfs:label "Rebuild Images Regularly" . ### https://w3id.org/csro/ontology#ResourceExhaustionDoS csro:ResourceExhaustionDoS rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Critical ; csro:indicates csro:ServiceAvailabilityLossRisk ; csro:description "Complete loss of availability for host system and all hosted applications due to critical resource exhaustion" ; rdfs:label "Resource Exhaustion DoS" . ### https://w3id.org/csro/ontology#ResourceMisuseRisk csro:ResourceMisuseRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of availability degradation through unauthorized compute resource consumption" ; rdfs:label "Resource Misuse Risk" . ### https://w3id.org/csro/ontology#RestrictManagementAccess csro:RestrictManagementAccess rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:AUTH_3 ; csro:description "Restrict access to container management interfaces to authorized users and processes" ; rdfs:label "Restrict Management Access" . ### https://w3id.org/csro/ontology#RootkitPersistence csro:RootkitPersistence rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Disastrous ; csro:indicates csro:StealthyPersistenceRisk ; csro:description "Integrity of kernel compromised through rootkit installation, providing undetectable persistent access bypassing all user-space security controls" ; rdfs:label "Rootkit Persistence" . ### https://w3id.org/csro/ontology#RunAsNonRootUser csro:RunAsNonRootUser rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:RTS_1 ; csro:hasGuideline csro:GuidelineUserConfiguration ; csro:isImplementedBy csro:non-root_user ; csro:description "Configure containers to run with non-root user privileges to limit potential damage" ; rdfs:label "Run As Non Root User" . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario csro:RuntimeHardenedScenario rdf:type owl:NamedIndividual , csro:ContextScenario ; csro:includesAssumption csro:RuntimeHardenedScenario_AUTH_1 , csro:RuntimeHardenedScenario_AUTH_2 , csro:RuntimeHardenedScenario_AUTH_3 , csro:RuntimeHardenedScenario_CIC_1 , csro:RuntimeHardenedScenario_CIC_2 , csro:RuntimeHardenedScenario_CIC_3 , csro:RuntimeHardenedScenario_CIC_4 , csro:RuntimeHardenedScenario_CIC_5 , csro:RuntimeHardenedScenario_CIC_6 , csro:RuntimeHardenedScenario_CRM_1 , csro:RuntimeHardenedScenario_CRM_2 , csro:RuntimeHardenedScenario_CRM_3 , csro:RuntimeHardenedScenario_CRM_4 , csro:RuntimeHardenedScenario_HIS_1 , csro:RuntimeHardenedScenario_HIS_2 , csro:RuntimeHardenedScenario_HIS_3 , csro:RuntimeHardenedScenario_IMG_1 , csro:RuntimeHardenedScenario_IMG_2 , csro:RuntimeHardenedScenario_IMG_3 , csro:RuntimeHardenedScenario_IMG_4 , csro:RuntimeHardenedScenario_IMG_5 , csro:RuntimeHardenedScenario_IMG_6 , csro:RuntimeHardenedScenario_MON_1 , csro:RuntimeHardenedScenario_MON_2 , csro:RuntimeHardenedScenario_MON_3 , csro:RuntimeHardenedScenario_MON_4 , csro:RuntimeHardenedScenario_MON_5 , csro:RuntimeHardenedScenario_MON_6 , csro:RuntimeHardenedScenario_MON_7 , csro:RuntimeHardenedScenario_MON_8 , csro:RuntimeHardenedScenario_NET_1 , csro:RuntimeHardenedScenario_NET_2 , csro:RuntimeHardenedScenario_NET_3 , csro:RuntimeHardenedScenario_NET_4 , csro:RuntimeHardenedScenario_RTS_1 , csro:RuntimeHardenedScenario_RTS_2 , csro:RuntimeHardenedScenario_RTS_3 , csro:RuntimeHardenedScenario_RTS_4 , csro:RuntimeHardenedScenario_RTS_5 , csro:RuntimeHardenedScenario_RTS_6 , csro:RuntimeHardenedScenario_RTS_7 , csro:RuntimeHardenedScenario_SCM_1 , csro:RuntimeHardenedScenario_SCM_2 , csro:RuntimeHardenedScenario_SCM_3 , csro:RuntimeHardenedScenario_SCM_4 ; csro:includesComponent csro:Application , csro:Device , csro:DeviceContainerRuntime , csro:DeviceOperatingSystem , csro:OtherApplications ; csro:description "Scenario with strong runtime security controls including AppArmor, Seccomp, and read-only filesystems" ; rdfs:label "Runtime Hardened Scenario" . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_AUTH_1 csro:RuntimeHardenedScenario_AUTH_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_AUTH_2 csro:RuntimeHardenedScenario_AUTH_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_AUTH_3 csro:RuntimeHardenedScenario_AUTH_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:AUTH_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_CIC_1 csro:RuntimeHardenedScenario_CIC_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_CIC_2 csro:RuntimeHardenedScenario_CIC_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_CIC_3 csro:RuntimeHardenedScenario_CIC_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_CIC_4 csro:RuntimeHardenedScenario_CIC_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_CIC_5 csro:RuntimeHardenedScenario_CIC_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_5 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_CIC_6 csro:RuntimeHardenedScenario_CIC_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CIC_6 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_CRM_1 csro:RuntimeHardenedScenario_CRM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_CRM_2 csro:RuntimeHardenedScenario_CRM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_CRM_3 csro:RuntimeHardenedScenario_CRM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_CRM_4 csro:RuntimeHardenedScenario_CRM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:CRM_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_HIS_1 csro:RuntimeHardenedScenario_HIS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_HIS_2 csro:RuntimeHardenedScenario_HIS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_HIS_3 csro:RuntimeHardenedScenario_HIS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:HIS_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_IMG_1 csro:RuntimeHardenedScenario_IMG_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_IMG_2 csro:RuntimeHardenedScenario_IMG_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_IMG_3 csro:RuntimeHardenedScenario_IMG_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_IMG_4 csro:RuntimeHardenedScenario_IMG_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_IMG_5 csro:RuntimeHardenedScenario_IMG_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_IMG_6 csro:RuntimeHardenedScenario_IMG_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:IMG_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_MON_1 csro:RuntimeHardenedScenario_MON_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_MON_2 csro:RuntimeHardenedScenario_MON_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_MON_3 csro:RuntimeHardenedScenario_MON_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_MON_4 csro:RuntimeHardenedScenario_MON_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_MON_5 csro:RuntimeHardenedScenario_MON_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_MON_6 csro:RuntimeHardenedScenario_MON_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_MON_7 csro:RuntimeHardenedScenario_MON_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_MON_8 csro:RuntimeHardenedScenario_MON_8 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:MON_8 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_NET_1 csro:RuntimeHardenedScenario_NET_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_1 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_NET_2 csro:RuntimeHardenedScenario_NET_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_2 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_NET_3 csro:RuntimeHardenedScenario_NET_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_3 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_NET_4 csro:RuntimeHardenedScenario_NET_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:NET_4 ; csro:hasSatisfactionState csro:Unknown . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_RTS_1 csro:RuntimeHardenedScenario_RTS_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_1 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_RTS_2 csro:RuntimeHardenedScenario_RTS_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_2 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_RTS_3 csro:RuntimeHardenedScenario_RTS_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_3 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_RTS_4 csro:RuntimeHardenedScenario_RTS_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_4 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_RTS_5 csro:RuntimeHardenedScenario_RTS_5 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_5 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_RTS_6 csro:RuntimeHardenedScenario_RTS_6 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_6 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_RTS_7 csro:RuntimeHardenedScenario_RTS_7 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:RTS_7 ; csro:hasSatisfactionState csro:Satisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_SCM_1 csro:RuntimeHardenedScenario_SCM_1 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_1 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_SCM_2 csro:RuntimeHardenedScenario_SCM_2 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_2 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_SCM_3 csro:RuntimeHardenedScenario_SCM_3 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_3 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeHardenedScenario_SCM_4 csro:RuntimeHardenedScenario_SCM_4 rdf:type owl:NamedIndividual , csro:AssumptionInScenario ; csro:forAssumption csro:SCM_4 ; csro:hasSatisfactionState csro:Dissatisfied . ### https://w3id.org/csro/ontology#RuntimeSecurity csro:RuntimeSecurity rdf:type owl:NamedIndividual , csro:AssumptionCategory ; csro:description "Security assumptions related to container runtime configuration and behavior." ; rdfs:label "Runtime Security" . ### https://w3id.org/csro/ontology#SCM_1 csro:SCM_1 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:SecretsConfigManagement ; csro:originatesFrom csro:CIS_Docker_Benchmark_7_4 , csro:NIST_SP_800_190_Section_4_1_4 , csro:OWASP_Docker_Security_Cheat_Sheet_12 , csro:OWASP_Docker_Top_10_D06 ; csro:assumptionId "SCM-1" ; csro:description "Secure secrets management tools (e.g. vaults or secrets manager) are used" . ### https://w3id.org/csro/ontology#SCM_2 csro:SCM_2 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:SecretsConfigManagement ; csro:originatesFrom csro:CIS_Docker_Benchmark_4_10 , csro:NIST_SP_800_190_Section_4_1_4 , csro:OWASP_Docker_Security_Cheat_Sheet_12 , csro:OWASP_Docker_Top_10_D06 ; csro:assumptionId "SCM-2" ; csro:description "Apps do not contain any hardcoded secrets" . ### https://w3id.org/csro/ontology#SCM_3 csro:SCM_3 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:SecretsConfigManagement ; csro:originatesFrom csro:NIST_SP_800_190_Section_4_1_4 , csro:OWASP_Docker_Security_Cheat_Sheet_12 , csro:OWASP_Docker_Top_10_D06 ; csro:assumptionId "SCM-3" ; csro:description "Secrets at rest and in transit are encrypted" . ### https://w3id.org/csro/ontology#SCM_4 csro:SCM_4 rdf:type owl:NamedIndividual , csro:ContainerSecurityAssumption ; csro:belongsToCategory csro:SecretsConfigManagement ; csro:originatesFrom csro:CIS_Docker_Benchmark_7_6 , csro:CIS_Docker_Benchmark_7_7 , csro:CIS_Docker_Benchmark_7_8 , csro:NIST_SP_800_190_Section_4_1_4 ; csro:assumptionId "SCM-4" ; csro:description "Automatic secret rotation and revocation policies are implemented" . ### https://w3id.org/csro/ontology#Satisfied csro:Satisfied rdf:type owl:NamedIndividual , csro:SatisfactionState ; csro:description "The security assumption is satisfied/implemented." . ### https://w3id.org/csro/ontology#ScanContainerImages csro:ScanContainerImages rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:IMG_1 ; csro:isImplementedBy csro:dockerfile_analyzed , csro:dockerfile_no_findings ; csro:description "Perform vulnerability scanning on container images to identify and address security issues" ; rdfs:label "Scan Container Images" . ### https://w3id.org/csro/ontology#SecretsConfigManagement csro:SecretsConfigManagement rdf:type owl:NamedIndividual , csro:AssumptionCategory ; csro:description "Security assumptions related to secrets and configuration management." ; rdfs:label "Secrets & Config Management" . ### https://w3id.org/csro/ontology#SecureCICDPipeline csro:SecureCICDPipeline rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:CIC_1 ; csro:description "Secure CI/CD pipeline to prevent supply chain attacks and ensure build integrity" ; rdfs:label "Secure CI/CD Pipeline" . ### https://w3id.org/csro/ontology#SegmentNetworks csro:SegmentNetworks rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:NET_1 ; csro:hasGuideline csro:GuidelineNetworking ; csro:description "Implement network segmentation to limit container communication and reduce attack spread" ; rdfs:label "Segment Networks" . ### https://w3id.org/csro/ontology#SeparateDevelopmentProduction csro:SeparateDevelopmentProduction rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:CIC_6 ; csro:description "Separate development and production environments to reduce security risks" ; rdfs:label "Separate Development Production" . ### https://w3id.org/csro/ontology#ServiceAvailabilityLossRisk csro:ServiceAvailabilityLossRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of total availability loss through system resource exhaustion" ; rdfs:label "Service Availability Loss Risk" . ### https://w3id.org/csro/ontology#ServiceDisruptionRisk csro:ServiceDisruptionRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of availability loss for network services through port resource denial" ; rdfs:label "Service Disruption Risk" . ### https://w3id.org/csro/ontology#ServiceImpersonation csro:ServiceImpersonation rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Critical ; csro:indicates csro:AuthenticationBypassRisk ; csro:description "Integrity and confidentiality of service authentication compromised through impersonation, enabling unauthorized access and credential theft" ; rdfs:label "Service Impersonation" . ### https://w3id.org/csro/ontology#SignAndVerifyImages csro:SignAndVerifyImages rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:IMG_3 ; csro:description "Sign and verify container images to ensure authenticity and integrity" ; rdfs:label "Sign And Verify Images" . ### https://w3id.org/csro/ontology#Significant csro:Significant rdf:type owl:NamedIndividual , csro:RiskLevel ; rdfs:label "Significant" . ### https://w3id.org/csro/ontology#StealthyPersistenceRisk csro:StealthyPersistenceRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of undetectable persistent compromise with complete system integrity violation" ; rdfs:label "Stealthy Persistence Risk" . ### https://w3id.org/csro/ontology#SystemInformationExposureRisk csro:SystemInformationExposureRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of confidentiality breach through unauthorized access to host process details enabling targeted attacks" ; rdfs:label "System Information Exposure Risk" . ### https://w3id.org/csro/ontology#SystemIntegrityLossRisk csro:SystemIntegrityLossRisk rdf:type owl:NamedIndividual , csro:Risk ; csro:description "Risk of total system integrity and confidentiality compromise through persistent kernel-level access" ; rdfs:label "System Integrity Loss Risk" . ### https://w3id.org/csro/ontology#TrafficInterception csro:TrafficInterception rdf:type owl:NamedIndividual , csro:Impact ; csro:hasImpactRating csro:Critical ; csro:indicates csro:CredentialTheftRisk ; csro:description "Confidentiality of network communications compromised through unauthorized interception, exposing credentials, sensitive data, and application secrets" ; rdfs:label "Traffic Interception" . ### https://w3id.org/csro/ontology#Unknown csro:Unknown rdf:type owl:NamedIndividual , csro:SatisfactionState ; csro:description "The satisfaction state of the security assumption is unknown." . ### https://w3id.org/csro/ontology#Unlikely csro:Unlikely rdf:type owl:NamedIndividual , csro:Likelihood ; rdfs:label "Unlikely" . ### https://w3id.org/csro/ontology#UnlikelyLikelihoodAndCriticalImpact csro:UnlikelyLikelihoodAndCriticalImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Critical ; csro:hasLikelihoodRating csro:Unlikely ; csro:resultsIn csro:Moderate . ### https://w3id.org/csro/ontology#UnlikelyLikelihoodAndDisastrousImpact csro:UnlikelyLikelihoodAndDisastrousImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Disastrous ; csro:hasLikelihoodRating csro:Unlikely ; csro:resultsIn csro:Moderate . ### https://w3id.org/csro/ontology#UnlikelyLikelihoodAndModerateImpact csro:UnlikelyLikelihoodAndModerateImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Moderate ; csro:hasLikelihoodRating csro:Unlikely ; csro:resultsIn csro:Moderate . ### https://w3id.org/csro/ontology#UnlikelyLikelihoodAndNegligibleImpact csro:UnlikelyLikelihoodAndNegligibleImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Negligible ; csro:hasLikelihoodRating csro:Unlikely ; csro:resultsIn csro:Minor . ### https://w3id.org/csro/ontology#UpdateContainerRuntime csro:UpdateContainerRuntime rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:HIS_1 ; csro:description "Keep container runtime on host devices up to date with security patches" ; rdfs:label "Update Container Runtime" . ### https://w3id.org/csro/ontology#UseMinimalBaseImages csro:UseMinimalBaseImages rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:IMG_2 ; csro:description "Use minimal base images to reduce attack surface and container footprint" ; rdfs:label "Use Minimal Base Images" . ### https://w3id.org/csro/ontology#UseRuntimeSecurityTools csro:UseRuntimeSecurityTools rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:MON_3 ; csro:description "Deploy runtime security tools to detect and respond to container threats" ; rdfs:label "Use Runtime Security Tools" . ### https://w3id.org/csro/ontology#UseSBOMs csro:UseSBOMs rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:CIC_2 ; csro:description "Use Software Bill of Materials to track and manage application dependencies" ; rdfs:label "Use SBOMs" . ### https://w3id.org/csro/ontology#UseSecureSecretsManagement csro:UseSecureSecretsManagement rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:SCM_1 ; csro:description "Use secure secrets management tools for credential storage and handling" ; rdfs:label "Use Secure Secrets Management" . ### https://w3id.org/csro/ontology#UseTrustedRegistries csro:UseTrustedRegistries rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:IMG_6 ; csro:description "Use only trusted and verified image registries for container deployment" ; rdfs:label "Use Trusted Registries" . ### https://w3id.org/csro/ontology#ValidateThirdPartyComponents csro:ValidateThirdPartyComponents rdf:type owl:NamedIndividual , csro:RiskTreatment ; csro:addresses csro:CIC_4 ; csro:description "Validate third-party components for security vulnerabilities and trustworthiness" ; rdfs:label "Validate Third Party Components" . ### https://w3id.org/csro/ontology#VeryLikely csro:VeryLikely rdf:type owl:NamedIndividual , csro:Likelihood ; rdfs:label "Very Likely" . ### https://w3id.org/csro/ontology#VeryLikelyLikelihoodAndCriticalImpact csro:VeryLikelyLikelihoodAndCriticalImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Critical ; csro:hasLikelihoodRating csro:VeryLikely ; csro:resultsIn csro:Major . ### https://w3id.org/csro/ontology#VeryLikelyLikelihoodAndDisastrousImpact csro:VeryLikelyLikelihoodAndDisastrousImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Disastrous ; csro:hasLikelihoodRating csro:VeryLikely ; csro:resultsIn csro:Major . ### https://w3id.org/csro/ontology#VeryLikelyLikelihoodAndModerateImpact csro:VeryLikelyLikelihoodAndModerateImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Moderate ; csro:hasLikelihoodRating csro:VeryLikely ; csro:resultsIn csro:Significant . ### https://w3id.org/csro/ontology#VeryLikelyLikelihoodAndNegligibleImpact csro:VeryLikelyLikelihoodAndNegligibleImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Negligible ; csro:hasLikelihoodRating csro:VeryLikely ; csro:resultsIn csro:Moderate . ### https://w3id.org/csro/ontology#VeryUnlikely csro:VeryUnlikely rdf:type owl:NamedIndividual , csro:Likelihood ; rdfs:label "Very Unlikely" . ### https://w3id.org/csro/ontology#VeryUnlikelyLikelihoodAndCriticalImpact csro:VeryUnlikelyLikelihoodAndCriticalImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Critical ; csro:hasLikelihoodRating csro:VeryUnlikely ; csro:resultsIn csro:Minor . ### https://w3id.org/csro/ontology#VeryUnlikelyLikelihoodAndDisastrousImpact csro:VeryUnlikelyLikelihoodAndDisastrousImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Disastrous ; csro:hasLikelihoodRating csro:VeryUnlikely ; csro:resultsIn csro:Moderate . ### https://w3id.org/csro/ontology#VeryUnlikelyLikelihoodAndModerateImpact csro:VeryUnlikelyLikelihoodAndModerateImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Moderate ; csro:hasLikelihoodRating csro:VeryUnlikely ; csro:resultsIn csro:Minor . ### https://w3id.org/csro/ontology#VeryUnlikelyLikelihoodAndNegligibleImpact csro:VeryUnlikelyLikelihoodAndNegligibleImpact rdf:type owl:NamedIndividual , csro:RiskCalculationRule ; csro:hasImpactRating csro:Negligible ; csro:hasLikelihoodRating csro:VeryUnlikely ; csro:resultsIn csro:Minor . ### https://w3id.org/csro/ontology#cap_add csro:cap_add rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding Linux capabilities to a container" ; rdfs:label "cap_add" . ### https://w3id.org/csro/ontology#cap_add_ALL csro:cap_add_ALL rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding all Linux capabilities to a container (equivalent to privileged mode)" ; rdfs:label "cap_add_ALL" . ### https://w3id.org/csro/ontology#cap_add_CAP_AUDIT_CONTROL csro:cap_add_CAP_AUDIT_CONTROL rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_AUDIT_CONTROL capability to control kernel audit subsystem" ; rdfs:label "cap_add_CAP_AUDIT_CONTROL" . ### https://w3id.org/csro/ontology#cap_add_CAP_AUDIT_READ csro:cap_add_CAP_AUDIT_READ rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_AUDIT_READ capability to read audit log via multicast netlink socket" ; rdfs:label "cap_add_CAP_AUDIT_READ" . ### https://w3id.org/csro/ontology#cap_add_CAP_AUDIT_WRITE csro:cap_add_CAP_AUDIT_WRITE rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_AUDIT_WRITE capability to write records to kernel audit log" ; rdfs:label "cap_add_CAP_AUDIT_WRITE" . ### https://w3id.org/csro/ontology#cap_add_CAP_BLOCK_SUSPEND csro:cap_add_CAP_BLOCK_SUSPEND rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_BLOCK_SUSPEND capability to employ features that can block system suspend" ; rdfs:label "cap_add_CAP_BLOCK_SUSPEND" . ### https://w3id.org/csro/ontology#cap_add_CAP_BPF csro:cap_add_CAP_BPF rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_BPF capability to employ privileged BPF operations" ; rdfs:label "cap_add_CAP_BPF" . ### https://w3id.org/csro/ontology#cap_add_CAP_CHECKPOINT_RESTORE csro:cap_add_CAP_CHECKPOINT_RESTORE rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_CHECKPOINT_RESTORE capability to checkpoint and restore processes" ; rdfs:label "cap_add_CAP_CHECKPOINT_RESTORE" . ### https://w3id.org/csro/ontology#cap_add_CAP_CHOWN csro:cap_add_CAP_CHOWN rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_CHOWN capability to make arbitrary changes to file UIDs and GIDs" ; rdfs:label "cap_add_CAP_CHOWN" . ### https://w3id.org/csro/ontology#cap_add_CAP_DAC_OVERRIDE csro:cap_add_CAP_DAC_OVERRIDE rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_DAC_OVERRIDE capability to bypass file read, write, and execute permission checks" ; rdfs:label "cap_add_CAP_DAC_OVERRIDE" . ### https://w3id.org/csro/ontology#cap_add_CAP_DAC_READ_SEARCH csro:cap_add_CAP_DAC_READ_SEARCH rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_DAC_READ_SEARCH capability to bypass file read permission checks and directory read and execute permission checks" ; rdfs:label "cap_add_CAP_DAC_READ_SEARCH" . ### https://w3id.org/csro/ontology#cap_add_CAP_FOWNER csro:cap_add_CAP_FOWNER rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_FOWNER capability to bypass permission checks on operations that normally require the filesystem UID of the process to match the UID of the file" ; rdfs:label "cap_add_CAP_FOWNER" . ### https://w3id.org/csro/ontology#cap_add_CAP_FSETID csro:cap_add_CAP_FSETID rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_FSETID capability to don't clear set-user-ID and set-group-ID mode bits when a file is modified" ; rdfs:label "cap_add_CAP_FSETID" . ### https://w3id.org/csro/ontology#cap_add_CAP_IPC_LOCK csro:cap_add_CAP_IPC_LOCK rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_IPC_LOCK capability to lock memory (mlock, mlockall, mmap, shmctl)" ; rdfs:label "cap_add_CAP_IPC_LOCK" . ### https://w3id.org/csro/ontology#cap_add_CAP_IPC_OWNER csro:cap_add_CAP_IPC_OWNER rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_IPC_OWNER capability to bypass permission checks for operations on System V IPC objects" ; rdfs:label "cap_add_CAP_IPC_OWNER" . ### https://w3id.org/csro/ontology#cap_add_CAP_KILL csro:cap_add_CAP_KILL rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_KILL capability to bypass permission checks for sending signals" ; rdfs:label "cap_add_CAP_KILL" . ### https://w3id.org/csro/ontology#cap_add_CAP_LEASE csro:cap_add_CAP_LEASE rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_LEASE capability to establish leases on arbitrary files" ; rdfs:label "cap_add_CAP_LEASE" . ### https://w3id.org/csro/ontology#cap_add_CAP_LINUX_IMMUTABLE csro:cap_add_CAP_LINUX_IMMUTABLE rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_LINUX_IMMUTABLE capability to set the FS_APPEND_FL and FS_IMMUTABLE_FL inode flags" ; rdfs:label "cap_add_CAP_LINUX_IMMUTABLE" . ### https://w3id.org/csro/ontology#cap_add_CAP_MAC_ADMIN csro:cap_add_CAP_MAC_ADMIN rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_MAC_ADMIN capability to allow MAC configuration or state changes" ; rdfs:label "cap_add_CAP_MAC_ADMIN" . ### https://w3id.org/csro/ontology#cap_add_CAP_MAC_OVERRIDE csro:cap_add_CAP_MAC_OVERRIDE rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_MAC_OVERRIDE capability to override Mandatory Access Control (MAC)" ; rdfs:label "cap_add_CAP_MAC_OVERRIDE" . ### https://w3id.org/csro/ontology#cap_add_CAP_MKNOD csro:cap_add_CAP_MKNOD rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_MKNOD capability to create special files using mknod" ; rdfs:label "cap_add_CAP_MKNOD" . ### https://w3id.org/csro/ontology#cap_add_CAP_NET_ADMIN csro:cap_add_CAP_NET_ADMIN rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding the CAP_NET_ADMIN capability to a container" ; rdfs:label "cap_add_CAP_NET_ADMIN" . ### https://w3id.org/csro/ontology#cap_add_CAP_NET_BIND_SERVICE csro:cap_add_CAP_NET_BIND_SERVICE rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_NET_BIND_SERVICE capability to bind a socket to Internet domain privileged ports (port numbers less than 1024)" ; rdfs:label "cap_add_CAP_NET_BIND_SERVICE" . ### https://w3id.org/csro/ontology#cap_add_CAP_NET_BROADCAST csro:cap_add_CAP_NET_BROADCAST rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_NET_BROADCAST capability to make socket broadcasts and listen to multicasts" ; rdfs:label "cap_add_CAP_NET_BROADCAST" . ### https://w3id.org/csro/ontology#cap_add_CAP_NET_RAW csro:cap_add_CAP_NET_RAW rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_NET_RAW capability to use RAW and PACKET sockets" ; rdfs:label "cap_add_CAP_NET_RAW" . ### https://w3id.org/csro/ontology#cap_add_CAP_PERFMON csro:cap_add_CAP_PERFMON rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_PERFMON capability to employ various performance-monitoring mechanisms" ; rdfs:label "cap_add_CAP_PERFMON" . ### https://w3id.org/csro/ontology#cap_add_CAP_SETFCAP csro:cap_add_CAP_SETFCAP rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SETFCAP capability to set file capabilities" ; rdfs:label "cap_add_CAP_SETFCAP" . ### https://w3id.org/csro/ontology#cap_add_CAP_SETGID csro:cap_add_CAP_SETGID rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SETGID capability to make arbitrary manipulations of process GIDs and supplementary GID list" ; rdfs:label "cap_add_CAP_SETGID" . ### https://w3id.org/csro/ontology#cap_add_CAP_SETPCAP csro:cap_add_CAP_SETPCAP rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SETPCAP capability to modify process capabilities" ; rdfs:label "cap_add_CAP_SETPCAP" . ### https://w3id.org/csro/ontology#cap_add_CAP_SETUID csro:cap_add_CAP_SETUID rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SETUID capability to make arbitrary manipulations of process UIDs" ; rdfs:label "cap_add_CAP_SETUID" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYSLOG csro:cap_add_CAP_SYSLOG rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SYSLOG capability to perform privileged syslog operations" ; rdfs:label "cap_add_CAP_SYSLOG" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYS_ADMIN csro:cap_add_CAP_SYS_ADMIN rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding the CAP_SYS_ADMIN capability to a container" ; rdfs:label "cap_add_CAP_SYS_ADMIN" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYS_BOOT csro:cap_add_CAP_SYS_BOOT rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SYS_BOOT capability to use reboot and kexec_load system calls" ; rdfs:label "cap_add_CAP_SYS_BOOT" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYS_CHROOT csro:cap_add_CAP_SYS_CHROOT rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SYS_CHROOT capability to use chroot system call" ; rdfs:label "cap_add_CAP_SYS_CHROOT" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYS_MODULE csro:cap_add_CAP_SYS_MODULE rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SYS_MODULE capability to load and unload kernel modules" ; rdfs:label "cap_add_CAP_SYS_MODULE" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYS_NICE csro:cap_add_CAP_SYS_NICE rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SYS_NICE capability to raise process nice value and change the nice value for arbitrary processes" ; rdfs:label "cap_add_CAP_SYS_NICE" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYS_PACCT csro:cap_add_CAP_SYS_PACCT rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SYS_PACCT capability to use acct system call" ; rdfs:label "cap_add_CAP_SYS_PACCT" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYS_PTRACE csro:cap_add_CAP_SYS_PTRACE rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SYS_PTRACE capability to trace arbitrary processes using ptrace" ; rdfs:label "cap_add_CAP_SYS_PTRACE" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYS_RAWIO csro:cap_add_CAP_SYS_RAWIO rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SYS_RAWIO capability to perform I/O port operations and access /proc/kcore" ; rdfs:label "cap_add_CAP_SYS_RAWIO" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYS_RESOURCE csro:cap_add_CAP_SYS_RESOURCE rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SYS_RESOURCE capability to override resource limits" ; rdfs:label "cap_add_CAP_SYS_RESOURCE" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYS_TIME csro:cap_add_CAP_SYS_TIME rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SYS_TIME capability to set system clock and real-time hardware clock" ; rdfs:label "cap_add_CAP_SYS_TIME" . ### https://w3id.org/csro/ontology#cap_add_CAP_SYS_TTY_CONFIG csro:cap_add_CAP_SYS_TTY_CONFIG rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_SYS_TTY_CONFIG capability to use vhangup and employ various privileged ioctl operations on virtual terminals" ; rdfs:label "cap_add_CAP_SYS_TTY_CONFIG" . ### https://w3id.org/csro/ontology#cap_add_CAP_WAKE_ALARM csro:cap_add_CAP_WAKE_ALARM rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Adding CAP_WAKE_ALARM capability to trigger something that will wake up the system" ; rdfs:label "cap_add_CAP_WAKE_ALARM" . ### https://w3id.org/csro/ontology#cap_drop csro:cap_drop rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Dropping Linux capabilities from a container" ; rdfs:label "cap_drop" . ### https://w3id.org/csro/ontology#cap_drop_all csro:cap_drop_all rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Docker deployment trait to drop all Linux capabilities." ; rdfs:label "cap_drop: ALL" . ### https://w3id.org/csro/ontology#container_image_name csro:container_image_name rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container image identifier and name specification" ; rdfs:label "container_image_name" . ### https://w3id.org/csro/ontology#depends_on csro:depends_on rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container has dependencies on other containers or services" ; rdfs:label "depends_on" . ### https://w3id.org/csro/ontology#dockerfile_analyzed csro:dockerfile_analyzed rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container image has been analyzed for vulnerabilities with vulnerability scanner" ; rdfs:label "dockerfile_analyzed" . ### https://w3id.org/csro/ontology#dockerfile_no_findings csro:dockerfile_no_findings rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container image vulnerability analysis found zero security findings" ; rdfs:label "dockerfile_no_findings" . ### https://w3id.org/csro/ontology#dockerfile_template csro:dockerfile_template rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container image built from a Dockerfile template" ; rdfs:label "dockerfile_template" . ### https://w3id.org/csro/ontology#external_network csro:external_network rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container is connected to external network interfaces" ; rdfs:label "external_network" . ### https://w3id.org/csro/ontology#host-level_firewall csro:host-level_firewall rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Host-level firewall rules and network policies are configured and active" ; rdfs:label "host-level_firewall" . ### https://w3id.org/csro/ontology#host_cgroup csro:host_cgroup rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container shares cgroup namespace with host" ; rdfs:label "host_cgroup" . ### https://w3id.org/csro/ontology#host_network csro:host_network rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container uses host network namespace" ; rdfs:label "host_network" . ### https://w3id.org/csro/ontology#host_pid csro:host_pid rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container shares PID namespace with host" ; rdfs:label "host_pid" . ### https://w3id.org/csro/ontology#internal_network csro:internal_network rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container is connected to internal network interfaces only" ; rdfs:label "internal_network" . ### https://w3id.org/csro/ontology#internal_port csro:internal_port rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container exposes ports only to internal networks" ; rdfs:label "internal_port" . ### https://w3id.org/csro/ontology#layer2_network csro:layer2_network rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container has layer 2 network connectivity" ; rdfs:label "layer2_network" . ### https://w3id.org/csro/ontology#named_volume csro:named_volume rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container uses Docker named volumes for data persistence" ; rdfs:label "named_volume" . ### https://w3id.org/csro/ontology#non-root_user csro:non-root_user rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container runs with non-root user privileges" ; rdfs:label "non-root_user" . ### https://w3id.org/csro/ontology#privileged_flag csro:privileged_flag rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container is run in privileged mode with extended capabilities" ; rdfs:label "privileged_flag" . ### https://w3id.org/csro/ontology#privileged_host_volume csro:privileged_host_volume rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container mounts privileged host directories as volumes" ; rdfs:label "privileged_host_volume" . ### https://w3id.org/csro/ontology#privileged_port csro:privileged_port rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container binds to privileged ports (below 1024)" ; rdfs:label "privileged_port" . ### https://w3id.org/csro/ontology#proxy-redirect_network csro:proxy-redirect_network rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container network traffic is routed through a proxy or redirect service" ; rdfs:label "proxy-redirect_network" . ### https://w3id.org/csro/ontology#read_only_filesystem csro:read_only_filesystem rdf:type owl:NamedIndividual , csro:ContainerDeploymentTrait ; csro:description "Container filesystem is mounted as read-only" ; rdfs:label "read_only_filesystem" . ################################################################# # General axioms ################################################################# [ rdf:type owl:AllDisjointClasses ; owl:members ( csro:DifficultyLevel csro:ExploitabilityRating csro:ExposureRating csro:Likelihood csro:RiskLevel ) ] . [ rdf:type owl:AllDisjointClasses ; owl:members ( csro:ExploitabilityCalculationRule csro:ExposureCalculationRule csro:LikelihoodCalculationRule csro:RiskCalculationRule ) ] . ### Generated by the OWL API (version 4.5.25.2023-02-15T19:15:49Z) https://github.com/owlcs/owlapi