Package org.palladiosimulator.retriever.vulnerability.core

Class NistVulnerabilityDatabase

java.lang.Object

org.palladiosimulator.retriever.vulnerability.core.NistVulnerabilityDatabase

All Implemented Interfaces:

IVulnerabilityDatabase

public class NistVulnerabilityDatabase
extends Object
implements IVulnerabilityDatabase

A wrapper for the NIST National Vulnerability Database.

See Also:

• https://nvd.nist.gov/

Constructor Summary

Constructors

Constructor	Description
NistVulnerabilityDatabase()
NistVulnerabilityDatabase(String apiKey)

Method Summary

Modifier and Type	Method	Description
org.palladiosimulator.pcm.confidentiality.attackerSpecification.CategorySpecification	getCategorySpecification()	Returns a CategorySpecification containing all AttackCategories (CVEs and CWEs) recorded until now.
org.palladiosimulator.pcm.confidentiality.attackerSpecification.attackSpecification.CVEVulnerability	getCVEVulnerability(String identifier, List<Integer> cweIdentifiers)	Returns a CVEVulnerability for the given identifier.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

NistVulnerabilityDatabase

public NistVulnerabilityDatabase()

NistVulnerabilityDatabase

public NistVulnerabilityDatabase(String apiKey)

Method Details

getCVEVulnerability

public org.palladiosimulator.pcm.confidentiality.attackerSpecification.attackSpecification.CVEVulnerability getCVEVulnerability(String identifier,
 List<Integer> cweIdentifiers)
                                                                                                                         throws VulnerabilityDatabaseException

Description copied from interface: IVulnerabilityDatabase

Returns a CVEVulnerability for the given identifier.

Specified by:

getCVEVulnerability in interface IVulnerabilityDatabase

Parameters:

identifier - of the vulnerability database entry

Returns:

vulnerability

Throws:

VulnerabilityDatabaseException - iff the access to the database failed

getCategorySpecification

public org.palladiosimulator.pcm.confidentiality.attackerSpecification.CategorySpecification getCategorySpecification()

Description copied from interface: IVulnerabilityDatabase

Returns a CategorySpecification containing all AttackCategories (CVEs and CWEs) recorded until now.

Specified by:

getCategorySpecification in interface IVulnerabilityDatabase

Returns:

categorySpecification