diff --git a/docs/_includes/automatable_cvss_ssvc.md b/docs/_includes/automatable_cvss_ssvc.md new file mode 100644 index 00000000..61cf80b2 --- /dev/null +++ b/docs/_includes/automatable_cvss_ssvc.md @@ -0,0 +1,8 @@ +!!! tip "CVSS:Automatable vs SSVC:Automatable" + + The [CVSS Automatable](../reference/decision_points/cvss/automatable.md) + vector element was developed alongside the identically named + [Automatable](../reference/decision_points/automatable.md) decision point in + SSVC. We intend for these two decision points to be interchangeable. + The main difference is that the CVSS Automatable accomodates an explicit + _Not Defined_ value, whereas the SSVC Automatable does not. diff --git a/docs/_includes/safety_cvss_ssvc.md b/docs/_includes/safety_cvss_ssvc.md new file mode 100644 index 00000000..9a2af5f4 --- /dev/null +++ b/docs/_includes/safety_cvss_ssvc.md @@ -0,0 +1,15 @@ +!!! tip "CVSS:Safety vs SSVC:Public Safety Impact vs SSVC:Safety Impact" + + The [CVSS Safety](../reference/decision_points/cvss/safety.md) vector element + is semantically interchangeable with the + [SSVC Public Safety Impact](../reference/decision_points/public_safety_impact.md) + decision point. + The main difference is that the [CVSS Safety](../reference/decision_points/cvss/safety.md) + vector element accomodates an explicit _Not Defined_ value, whereas the + [SSVC Public Safety Impact](../reference/decision_points/public_safety_impact.md) + does not. + + The [SSVC Safety Impact](../reference/decision_points/safety_impact.md) decision point provides a higher-resolution view of the safety impact. + The [SSVC Public Safety Impact](../reference/decision_points/public_safety_impact.md) and + [CVSS Safety](../reference/decision_points/cvss/safety.md) decision points are + lower-resolution views of the safety impact. diff --git a/docs/_includes/value_density_cvss_ssvc.md b/docs/_includes/value_density_cvss_ssvc.md new file mode 100644 index 00000000..11fb85e0 --- /dev/null +++ b/docs/_includes/value_density_cvss_ssvc.md @@ -0,0 +1,8 @@ +!!! tip "CVSS:Value Density vs SSVC:Value Density" + + The [CVSS Value Density](../reference/decision_points/cvss/value_density.md) + vector element was developed alongside the identically named + [Value Density](../reference/decision_points/value_density.md) decision + point in SSVC. We intend for these two decision points to be interchangeable. + The main difference is that the CVSS Value Density accomodates an explicit + _Not Defined_ value, whereas the SSVC Value Density does not. diff --git a/docs/reference/decision_points/automatable.md b/docs/reference/decision_points/automatable.md index f3b1cedd..69259cfa 100644 --- a/docs/reference/decision_points/automatable.md +++ b/docs/reference/decision_points/automatable.md @@ -1,4 +1,4 @@ -# Automatable +# Automatable (SSVC) ```python exec="true" idprefix="" from ssvc.decision_points.automatable import LATEST @@ -12,6 +12,8 @@ print(example_block(LATEST)) Automatable combines with [Value Density](./value_density.md) to inform [Utility](./utility.md) +{% include-markdown "../../_includes/automatable_cvss_ssvc.md" %} + *Automatable* captures the answer to the question “Can an attacker reliably automate creating exploitation events for this vulnerability?” !!! question "What are Steps 1-4 of the Kill Chain?" diff --git a/docs/reference/decision_points/cvss/attack_complexity.md b/docs/reference/decision_points/cvss/attack_complexity.md new file mode 100644 index 00000000..909f3a5a --- /dev/null +++ b/docs/reference/decision_points/cvss/attack_complexity.md @@ -0,0 +1,21 @@ +# Attack Complexity + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.attack_complexity import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.attack_complexity import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) +``` diff --git a/docs/reference/decision_points/cvss/attack_requirements.md b/docs/reference/decision_points/cvss/attack_requirements.md new file mode 100644 index 00000000..8474666b --- /dev/null +++ b/docs/reference/decision_points/cvss/attack_requirements.md @@ -0,0 +1,8 @@ +# Attack Requirements + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.attack_requirements import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` diff --git a/docs/reference/decision_points/cvss/attack_vector.md b/docs/reference/decision_points/cvss/attack_vector.md new file mode 100644 index 00000000..515e39d9 --- /dev/null +++ b/docs/reference/decision_points/cvss/attack_vector.md @@ -0,0 +1,22 @@ +# Attack Vector + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.attack_vector import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.attack_vector import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/authentication.md b/docs/reference/decision_points/cvss/authentication.md new file mode 100644 index 00000000..f7c92e09 --- /dev/null +++ b/docs/reference/decision_points/cvss/authentication.md @@ -0,0 +1,22 @@ +# Authentication + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.authentication import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.authentication import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/automatable.md b/docs/reference/decision_points/cvss/automatable.md new file mode 100644 index 00000000..cc3ccc25 --- /dev/null +++ b/docs/reference/decision_points/cvss/automatable.md @@ -0,0 +1,10 @@ +# Automatable (CVSS) + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.supplemental.automatable import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +{% include-markdown "../../../_includes/automatable_cvss_ssvc.md" %} diff --git a/docs/reference/decision_points/cvss/availability_impact.md b/docs/reference/decision_points/cvss/availability_impact.md new file mode 100644 index 00000000..5f71b52b --- /dev/null +++ b/docs/reference/decision_points/cvss/availability_impact.md @@ -0,0 +1,22 @@ +# Availability Impact to the Vulnerable System + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.availability_impact import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.availability_impact import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/availability_requirement.md b/docs/reference/decision_points/cvss/availability_requirement.md new file mode 100644 index 00000000..caf0730e --- /dev/null +++ b/docs/reference/decision_points/cvss/availability_requirement.md @@ -0,0 +1,22 @@ +# Availability Requirement + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.availability_requirement import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.availability_requirement import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/collateral_damage_potential.md b/docs/reference/decision_points/cvss/collateral_damage_potential.md new file mode 100644 index 00000000..b34cd7c5 --- /dev/null +++ b/docs/reference/decision_points/cvss/collateral_damage_potential.md @@ -0,0 +1,22 @@ +# Collateral Damage Potential + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.collateral_damage_potential import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.collateral_damage_potential import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/confidentiality_impact.md b/docs/reference/decision_points/cvss/confidentiality_impact.md new file mode 100644 index 00000000..a2d85474 --- /dev/null +++ b/docs/reference/decision_points/cvss/confidentiality_impact.md @@ -0,0 +1,22 @@ +# Confidentiality Impact to the Vulnerable System + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.confidentiality_impact import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.confidentiality_impact import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/confidentiality_requirement.md b/docs/reference/decision_points/cvss/confidentiality_requirement.md new file mode 100644 index 00000000..e65e354a --- /dev/null +++ b/docs/reference/decision_points/cvss/confidentiality_requirement.md @@ -0,0 +1,22 @@ +# Confidentiality Requirement + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.confidentiality_requirement import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.confidentiality_requirement import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/exploit_maturity.md b/docs/reference/decision_points/cvss/exploit_maturity.md new file mode 100644 index 00000000..5d8ddab2 --- /dev/null +++ b/docs/reference/decision_points/cvss/exploit_maturity.md @@ -0,0 +1,22 @@ +# Exploit Maturity + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.exploit_maturity import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.exploit_maturity import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/impact_bias.md b/docs/reference/decision_points/cvss/impact_bias.md new file mode 100644 index 00000000..65ac3599 --- /dev/null +++ b/docs/reference/decision_points/cvss/impact_bias.md @@ -0,0 +1,8 @@ +# Impact Bias + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.impact_bias import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` diff --git a/docs/reference/decision_points/cvss/index.md b/docs/reference/decision_points/cvss/index.md new file mode 100644 index 00000000..74c9fa53 --- /dev/null +++ b/docs/reference/decision_points/cvss/index.md @@ -0,0 +1,77 @@ +# CVSS Decision Points + +!!! tip inline end "For more information" + + For more information on the CVSS specification, please refer to the + [CVSS Specifications](https://www.first.org/cvss/). + +For convenience, we have provide a list of decision points that are based +on the CVSS specification. These decision points can be used to model various +decisions based on CVSS vector elements. + +## Decision Points + +The following list of CVSS vector elements have been modeled as SSVC decision +points for use in vulnerability response and security decision modeling. +We have organized them into groups according to where they belong in the +[CVSS v4.0 specification document](https://www.first.org/cvss/v4.0/specification-document). + +!!! info "About CVSS Decision Point Versions" + + We have modeled our CVSS-based decision points using the SSVC versioning scheme. + Therefore, some decision points may have multiple versions as the concepts have + been refined over different versions of the CVSS specification. These versions + do _not_ correspond the CVSS specification versions (2.0, 3.0, 3.1, 4.0 etc.). + +### Base Metrics + +
+- [Attack Vector](attack_vector.md) +- [Attack Complexity](attack_complexity.md) +- [Attack Requirements](attack_requirements.md) +- [Privileges Required](privileges_required.md) +- [User Interaction](user_interaction.md) +- [Confidentiality Impact](confidentiality_impact.md) +- [Subsequent Confidentiality Impact](subsequent_confidentiality_impact.md) +- [Integrity Impact](integrity_impact.md) +- [Subsequent Integrity Impact](subsequent_integrity_impact.md) +- [Availability Impact](availability_impact.md) +- [Subsequent Availability Impact](subsequent_availability_impact.md) +
+ +### Threat Metrics + +
+- [Exploit Maturity](exploit_maturity.md) +
+ +### Environmental Metrics + +
+- [Confidentiality Requirement](confidentiality_requirement.md) +- [Integrity Requirement](integrity_requirement.md) +- [Availability Requirement](availability_requirement.md) +
+ +### Supplemental Metrics + +
+- [Safety](safety.md) +- [Automatable](automatable.md) +- [Provider Urgency](provider_urgency.md) +- [Recovery](recovery.md) +- [Value Density](value_density.md) +- [Vulnerability Response Effort](vulnerability_response_effort.md) +
+ +### Older Metrics + +
+- [Authentication](authentication.md) +- [Collateral Damage Potential](collateral_damage_potential.md) +- [Impact Bias](impact_bias.md) +- [Remediation Level](remediation_level.md) +- [Report Confidence](report_confidence.md) +- [Scope](scope.md) +- [Target Distribution](target_distribution.md) +
diff --git a/docs/reference/decision_points/cvss/integrity_impact.md b/docs/reference/decision_points/cvss/integrity_impact.md new file mode 100644 index 00000000..f31dbdc3 --- /dev/null +++ b/docs/reference/decision_points/cvss/integrity_impact.md @@ -0,0 +1,22 @@ +# Integrity Impact to the Vulnerable System + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.integrity_impact import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.integrity_impact import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/integrity_requirement.md b/docs/reference/decision_points/cvss/integrity_requirement.md new file mode 100644 index 00000000..99e031f1 --- /dev/null +++ b/docs/reference/decision_points/cvss/integrity_requirement.md @@ -0,0 +1,22 @@ +# Integrity Requirement + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.integrity_requirement import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.integrity_requirement import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/privileges_required.md b/docs/reference/decision_points/cvss/privileges_required.md new file mode 100644 index 00000000..a3704e84 --- /dev/null +++ b/docs/reference/decision_points/cvss/privileges_required.md @@ -0,0 +1,22 @@ +# Privileges Required + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.privileges_required import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.privileges_required import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/provider_urgency.md b/docs/reference/decision_points/cvss/provider_urgency.md new file mode 100644 index 00000000..f0fd62fd --- /dev/null +++ b/docs/reference/decision_points/cvss/provider_urgency.md @@ -0,0 +1,8 @@ +# Provider Urgency + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.supplemental.provider_urgency import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` diff --git a/docs/reference/decision_points/cvss/recovery.md b/docs/reference/decision_points/cvss/recovery.md new file mode 100644 index 00000000..6798a108 --- /dev/null +++ b/docs/reference/decision_points/cvss/recovery.md @@ -0,0 +1,8 @@ +# Recovery + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.supplemental.recovery import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` diff --git a/docs/reference/decision_points/cvss/remediation_level.md b/docs/reference/decision_points/cvss/remediation_level.md new file mode 100644 index 00000000..0f06a9f1 --- /dev/null +++ b/docs/reference/decision_points/cvss/remediation_level.md @@ -0,0 +1,22 @@ +# Remediation Level + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.remediation_level import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.remediation_level import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/report_confidence.md b/docs/reference/decision_points/cvss/report_confidence.md new file mode 100644 index 00000000..a95ac406 --- /dev/null +++ b/docs/reference/decision_points/cvss/report_confidence.md @@ -0,0 +1,22 @@ +# Report Confidence + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.report_confidence import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.report_confidence import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/safety.md b/docs/reference/decision_points/cvss/safety.md new file mode 100644 index 00000000..e205d7b3 --- /dev/null +++ b/docs/reference/decision_points/cvss/safety.md @@ -0,0 +1,23 @@ +# Safety + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.supplemental.safety import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +{% include-markdown "../../../_includes/safety_cvss_ssvc.md" %} + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.supplemental.safety import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) +``` diff --git a/docs/reference/decision_points/cvss/scope.md b/docs/reference/decision_points/cvss/scope.md new file mode 100644 index 00000000..e7168659 --- /dev/null +++ b/docs/reference/decision_points/cvss/scope.md @@ -0,0 +1,8 @@ +# Scope + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.scope import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` diff --git a/docs/reference/decision_points/cvss/subsequent_availability_impact.md b/docs/reference/decision_points/cvss/subsequent_availability_impact.md new file mode 100644 index 00000000..3eb241b2 --- /dev/null +++ b/docs/reference/decision_points/cvss/subsequent_availability_impact.md @@ -0,0 +1,8 @@ +# Availability Impact to the Subsequent System + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.subsequent_availability_impact import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` diff --git a/docs/reference/decision_points/cvss/subsequent_confidentiality_impact.md b/docs/reference/decision_points/cvss/subsequent_confidentiality_impact.md new file mode 100644 index 00000000..e0b6e8a8 --- /dev/null +++ b/docs/reference/decision_points/cvss/subsequent_confidentiality_impact.md @@ -0,0 +1,8 @@ +# Confidentiality Impact to the Subsequent System + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.subsequent_confidentiality_impact import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` diff --git a/docs/reference/decision_points/cvss/subsequent_integrity_impact.md b/docs/reference/decision_points/cvss/subsequent_integrity_impact.md new file mode 100644 index 00000000..43083663 --- /dev/null +++ b/docs/reference/decision_points/cvss/subsequent_integrity_impact.md @@ -0,0 +1,8 @@ +# Integrity Impact to the Subsequent System + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.subsequent_integrity_impact import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` diff --git a/docs/reference/decision_points/cvss/target_distribution.md b/docs/reference/decision_points/cvss/target_distribution.md new file mode 100644 index 00000000..4c27649e --- /dev/null +++ b/docs/reference/decision_points/cvss/target_distribution.md @@ -0,0 +1,22 @@ +# Target Distribution + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.target_distribution import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.target_distribution import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/user_interaction.md b/docs/reference/decision_points/cvss/user_interaction.md new file mode 100644 index 00000000..0f03c589 --- /dev/null +++ b/docs/reference/decision_points/cvss/user_interaction.md @@ -0,0 +1,22 @@ +# User Interaction + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.user_interaction import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +## Previous Versions + +Following are the previous versions of the decision point: + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.user_interaction import VERSIONS +from ssvc.doc_helpers import example_block + +versions = VERSIONS[:-1] +for version in versions: + print(example_block(version)) + print("\n---\n") +``` diff --git a/docs/reference/decision_points/cvss/value_density.md b/docs/reference/decision_points/cvss/value_density.md new file mode 100644 index 00000000..885b3bf0 --- /dev/null +++ b/docs/reference/decision_points/cvss/value_density.md @@ -0,0 +1,10 @@ +# Value Density (CVSS) + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.supplemental.value_density import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` + +{% include-markdown "../../../_includes/value_density_cvss_ssvc.md" %} diff --git a/docs/reference/decision_points/cvss/vulnerability_response_effort.md b/docs/reference/decision_points/cvss/vulnerability_response_effort.md new file mode 100644 index 00000000..b9b49f93 --- /dev/null +++ b/docs/reference/decision_points/cvss/vulnerability_response_effort.md @@ -0,0 +1,8 @@ +# Vulnerability Response Effort + +```python exec="true" idprefix="" +from ssvc.decision_points.cvss.supplemental.vulnerability_response_effort import LATEST +from ssvc.doc_helpers import example_block + +print(example_block(LATEST)) +``` diff --git a/docs/reference/decision_points/public_safety_impact.md b/docs/reference/decision_points/public_safety_impact.md index 5564ac7f..44b774b0 100644 --- a/docs/reference/decision_points/public_safety_impact.md +++ b/docs/reference/decision_points/public_safety_impact.md @@ -7,9 +7,7 @@ from ssvc.doc_helpers import example_block print(example_block(LATEST)) ``` -!!! tip "See also" - - - [Safety Impact](./safety_impact.md) +{% include-markdown "../../_includes/safety_cvss_ssvc.md" %} This is a compound decision point, therefore it is a notational convenience. diff --git a/docs/reference/decision_points/safety_impact.md b/docs/reference/decision_points/safety_impact.md index 1601cde4..2c9418c4 100644 --- a/docs/reference/decision_points/safety_impact.md +++ b/docs/reference/decision_points/safety_impact.md @@ -7,12 +7,12 @@ from ssvc.doc_helpers import example_block print(example_block(LATEST)) ``` +{% include-markdown "../../_includes/safety_cvss_ssvc.md" %} + !!! tip "See also" - Safety Impact combines with [Mission Impact](./mission_impact.md) to inform [Human Impact](./human_impact.md). - - [Public Safety Impact](./public_safety_impact.md) provides a simplified - version of this decision point. We take an expansive view of safety, in which a safety violation is a violation of what the United States [Centers for Disease Control (CDC)](https://www.cdc.gov/hrqol/wellbeing.htm) calls **well-being**. Physical well-being violations are common safety violations, but we also consider economic, social, emotional, and psychological well-being to be important. Weighing fine differences among these categories is probably not possible, so we will not try. Each decision option lists examples of the effects that qualify for that value/answer in the various types of violations of well-being. These examples should not be considered comprehensive or exhaustive, but rather as suggestive.