NistVulnerabilityDatabase

java.lang.Object

org.palladiosimulator.pcm.confidentiality.reverseengineering.staticcodeanalysis.NistVulnerabilityDatabase

All Implemented Interfaces:: IVulnerabilityDatabase

public class NistVulnerabilityDatabase extends Object implements IVulnerabilityDatabase

A wrapper for the NIST National Vulnerability Database.

See Also:

https://nvd.nist.gov/

Constructor Summary

Constructors

Constructor

Description

NistVulnerabilityDatabase()

NistVulnerabilityDatabase(String apiKey)
Method Summary

Modifier and Type

Method

Description

org.palladiosimulator.pcm.confidentiality.attackerSpecification.CategorySpecification

getCategorySpecification()

Returns a CategorySpecification containing all AttackCategories (CVEs and CWEs) recorded until now.

org.palladiosimulator.pcm.confidentiality.attackerSpecification.attackSpecification.CVEVulnerability

getCVEVulnerability(String identifier, List<Integer> cweIdentifiers)

Returns a CVEVulnerability for the given identifier.

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details
- NistVulnerabilityDatabase
  
  public NistVulnerabilityDatabase()
- NistVulnerabilityDatabase
  
  public NistVulnerabilityDatabase(String apiKey)
Method Details
- getCVEVulnerability
  
  public org.palladiosimulator.pcm.confidentiality.attackerSpecification.attackSpecification.CVEVulnerability getCVEVulnerability(String identifier, List<Integer> cweIdentifiers) throws VulnerabilityDatabaseException
  
  Description copied from interface: IVulnerabilityDatabase
  
  Returns a CVEVulnerability for the given identifier.
  
  Specified by:
  
  getCVEVulnerability in interface IVulnerabilityDatabase
  
  Parameters:
  
  identifier - of the vulnerability database entry
  
  Returns:
  
  vulnerability
  
  Throws:
  
  VulnerabilityDatabaseException - iff the access to the database failed
- getCategorySpecification
  
  public org.palladiosimulator.pcm.confidentiality.attackerSpecification.CategorySpecification getCategorySpecification()
  
  Description copied from interface: IVulnerabilityDatabase
  
  Returns a CategorySpecification containing all AttackCategories (CVEs and CWEs) recorded until now.
  
  Specified by:
  
  getCategorySpecification in interface IVulnerabilityDatabase
  
  Returns:
  
  categorySpecification