Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Optional "Service-Specific Threat Details" Attribute to Threat Schema #444

Open
mlysaght2017 opened this issue Oct 1, 2024 · 1 comment
Labels

Comments

@mlysaght2017
Copy link
Contributor

mlysaght2017 commented Oct 1, 2024

Feature Request

Description of Problem:

The current threat schema effectively captures general information about common threats, but lacks the ability to specify how those threats apply to individual cloud services (e.g., GCP, Azure). As we engage in detailed threat modelling of cloud services, it will becomes increasingly important to document nuances and service-specific considerations related to a threat. The absence of this attribute means these details are either not captured or inconsistently tracked outside the schema, potentially leading to gaps in understanding and mitigation.

Potential Solutions:

Propose adding a new optional attribute to the threat schema called "service_specific_threat_details". This field will allow for service-specific details to be captured when threats are applied to a particular cloud service. It will not be mandatory, maintaining the flexibility of the schema for general use, but will provide a mechanism to store additional detail when needed.

@mlysaght2017
Copy link
Contributor Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

1 participant