Version 0.3.0
This new version of coreLang brings some breaking changes related to how the Credentials are modelled.
- Introduce security awareness defence on the User asset to represent the
possibility that the user performs unsafe actions. - Introduce malicious removable media attack on the User that propagates via
System assets. - Introduce
ConditionalAuthentication
association between Credentials assets
that can be used to represent multi-factor authentication. - Introduce
Replica
association between Data and Information assets to
represent information that is replicated across multiple data assets. Can be
used to implement data backups. - Fix data in transit to be written and deleted only if accessible via an
outgoing/bidirectional connection. - Fix
Filtered
defence on the ConnectionRule asset. RenameDisabled
and
Filtered
defences on the ConnectionRule asset toRestricted
and
PayloadInspection
, respectively. - Fix software supply chain attacks and introduce hardware supply chain
attacks on System. - Minor documentation improvements and typo fixes.
- Various other smaller fixes.