From 1a5bc6277ab488aec8e97194073cb7ce5919132a Mon Sep 17 00:00:00 2001 From: "Allen D. Householder" Date: Thu, 1 Feb 2024 12:15:03 -0500 Subject: [PATCH 1/2] Add OutcomeGroup for TheParanoids PrioritizedRiskRemediation --- src/ssvc/outcomes/groups.py | 20 +++++++++++++++++++- 1 file changed, 19 insertions(+), 1 deletion(-) diff --git a/src/ssvc/outcomes/groups.py b/src/ssvc/outcomes/groups.py index e44444d7..b689afb6 100644 --- a/src/ssvc/outcomes/groups.py +++ b/src/ssvc/outcomes/groups.py @@ -2,7 +2,7 @@ """ Provides a set of outcome groups for use in SSVC. """ -# Copyright (c) 2023 Carnegie Mellon University and Contributors. +# Copyright (c) 2023-2024 Carnegie Mellon University and Contributors. # - see Contributors.md for a full list of Contributors # - see ContributionInstructions.md for information on how you can Contribute to this project # Stakeholder Specific Vulnerability Categorization (SSVC) is @@ -129,6 +129,24 @@ The Value/Complexity outcome group. """ +THE_PARANOIDS = OutcomeGroup( + name="theParanoids", + description="PrioritizedRiskRemediation outcome group based on TheParanoids.", + outcomes=( + OutcomeValue(name="Track", key="5", description="Track"), + OutcomeValue(name="Track Closely", key="4", description="Track Closely"), + OutcomeValue(name="Attend", key="3", description="Attend"), + OutcomeValue(name="Attend", key="2", description="Attend"), + OutcomeValue(name="Act", key="1", description="Act"), + OutcomeValue(name="Act ASAP", key="0", description="Act ASAP"), + ), +) +""" +Outcome group based on TheParanoids' PrioritizedRiskRemediation. +Their model is a 6-point scale, with 0 being the most urgent and 5 being the least. +See https://github.com/theparanoids/PrioritizedRiskRemediation +""" + def main(): pass From c1f383a0e8af95d3c6662602399a55e776971bea Mon Sep 17 00:00:00 2001 From: "Allen D. Householder" Date: Mon, 5 Feb 2024 09:54:18 -0500 Subject: [PATCH 2/2] add numbers to outcome value names to distinguish Attend 3 from Attend 2 --- src/ssvc/outcomes/groups.py | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/src/ssvc/outcomes/groups.py b/src/ssvc/outcomes/groups.py index b689afb6..4114b0be 100644 --- a/src/ssvc/outcomes/groups.py +++ b/src/ssvc/outcomes/groups.py @@ -133,12 +133,12 @@ name="theParanoids", description="PrioritizedRiskRemediation outcome group based on TheParanoids.", outcomes=( - OutcomeValue(name="Track", key="5", description="Track"), - OutcomeValue(name="Track Closely", key="4", description="Track Closely"), - OutcomeValue(name="Attend", key="3", description="Attend"), - OutcomeValue(name="Attend", key="2", description="Attend"), - OutcomeValue(name="Act", key="1", description="Act"), - OutcomeValue(name="Act ASAP", key="0", description="Act ASAP"), + OutcomeValue(name="Track 5", key="5", description="Track"), + OutcomeValue(name="Track Closely 4", key="4", description="Track Closely"), + OutcomeValue(name="Attend 3", key="3", description="Attend"), + OutcomeValue(name="Attend 2", key="2", description="Attend"), + OutcomeValue(name="Act 1", key="1", description="Act"), + OutcomeValue(name="Act ASAP 0", key="0", description="Act ASAP"), ), ) """