Skip to content

Version 0.3.0

Compare
Choose a tag to compare
@andrewbwm andrewbwm released this 16 Sep 12:23
· 140 commits to master since this release

This new version of coreLang brings some breaking changes related to how the Credentials are modelled.

  • Introduce security awareness defence on the User asset to represent the
    possibility that the user performs unsafe actions.
  • Introduce malicious removable media attack on the User that propagates via
    System assets.
  • Introduce ConditionalAuthentication association between Credentials assets
    that can be used to represent multi-factor authentication.
  • Introduce Replica association between Data and Information assets to
    represent information that is replicated across multiple data assets. Can be
    used to implement data backups.
  • Fix data in transit to be written and deleted only if accessible via an
    outgoing/bidirectional connection.
  • Fix Filtered defence on the ConnectionRule asset. Rename Disabled and
    Filtered defences on the ConnectionRule asset to Restricted and
    PayloadInspection, respectively.
  • Fix software supply chain attacks and introduce hardware supply chain
    attacks on System.
  • Minor documentation improvements and typo fixes.
  • Various other smaller fixes.