Component Information Form

ThreatSpider 1.0

Automatically identify relevant threats, mitigations, and cybersecurity requirements for a specific functional system component based on its properties. ThreatSpider relies on community accepted Cyber Threat Intelligence (CTI) sources for up-to-date threat modelling and analysis processes.

"This tool processes your input using ThreatSpider APIs but does not store any data on our servers. Once the task is complete, your information is not retained in any way.

Component Templates Templates are pre-defined components. Good way to start testing the tool!
Communication Gateway in an Electric Grid Controller - PowerLogic HU250 A component of the PowerLogic T300 Remote Terminal Unit (RTU). The HU250 can be modelled as an Industrial Control System component of the type Data Gateway and Programmable Logic Controller (PLC). Additionally, it can also be modelled as an embedded system with specific properties as stated in the product manual.
Simplified Space Craft System (C&DH and TTC) This simplified spacecraft system consists of a Command and Data Handling (C&DH) and Payload Telemetry, Tracking, and Command (TCC) systems.

Enter Component Information

Component Information Component Name: Other Product Names: * Multiple names? separate using comma "," Manufacturer:

Component Class Choose Component Class(s): * Multiple Selections? Hold Ctrl and click

Embedded Properties

None
Microprocessor
Buses for external memory/storage
Discrete chips/devices that have access to the same physical memory
ROM, VRAM, or removable Storage
Random Access Memory (RAM) chips
DDR DRAM
Peripheral chips and integrated data buses
External peripheral interconnects (e.g., USB, Serial)
Hardware access port (e.g., UART, JTAG)
Bootloader
Debugging capabilities
OS/kernel
Operating system that uses drivers/modules that can be loaded
OS user accounts
Memory management model with protections of memory access (read-only, executable, writable)
Containers
Hypervisor
Physically accessible or is not immutable Root of Trust
Immutable Root of Trust
Firmware or software that is not cryptographically checked for integrity validation
Cryptographic firmware/software integrity protection mechanisms
Shared key for firmware integrity validation
Digitally signed firmware (with private key)
Unencrypted firmware updates
User firmware/software version selection during updates
Remotely-initiated firmware/software updates
Application-level software running on the device
Usage of web/HTTP applications
Support for object-oriented programming languages (e.g., Java, Python, PHP, C++)
Support for manual memory management programming languages (e.g., C, C++)
Ability to deploy custom or external programs (e.g., ladder logic, compiled binaries)
Ability to deploy custom programs from engineering software or IDE
Program runtime environment for custom or external programs
Ability to run custom/external programs as native binary without a confined/restricted environment
Ability to run custom/external programs/processes through an execution sandboxed environment
Support for "program uploads" to retrieve programs from the device from an engineering workstation
Authenticated Interactive Services (e.g., Telnet, SSH)
Passwords to authenticate the users
Cryptographic mechanisms to authenticate users and sessions
Cryptographic functions for sensitive data, such as encryption or authentication
Procedures to forward or route network messages
access enforcement/privilege mechanism
firmware/software update support
protocol support for message authentication
protocol support for message encryption
remote network services

Enter Component Information

Version Notes: