LikelihoodScores

Type:

Array of Objects

Description:

A list of numeric scores for each likelihood category.

Possible values:

Keys

Type

Description

Examples

CategoryId Integer ID of the likelihood category Must reference LikelihoodCategories.Id
Name

 

 

 

 

String

 

 

 

 

Name of the likelihood score

 

 

 

 

LE

  • Likelihood
  • Highly likely
  • Likely
  • Less likely
  • Unlikely

AP

  • Elapsed time
  • <= one day
  • <= one week
  • <= two weeks
  • <= one month
  • <= two months
  • <= three months
  • <= four months
  • <= five months
  • <= six months
  • > six months
  • Infeasible
  • Specialist expertise
  • Layman
  • Proficient
  • Expert
  • Multiple experts
  • Infeasible
  • Knowledge of the item or component
  • Public
  • Restricted
  • Confidential
  • Strictly Confidential
  • Infeasible
  • Window of opportunity
  • Remote and unlimited
  • Remote and limited

  • Easy Physical acces

  • Medium Physical access

  • Difficult Physical access

  • Infeasible

  • Equipment
  • Standard
  • Specialized
  • Bespoke
  • Multi bespoke
  • Infeasible

CVSS

  • Attack Vector
  • Network
  • Adjacent
  • Local
  • Physical
  • Attack Complexity
  • Low
  • High
  • Privileges Required
  • None
  • Low
  • High
  • User Interaction
  • None
  • Required
Value

 

Integer

 

Numeric score value of Name

 

LE

  • Likelihood
  • Highly likely = 0
  • Likely = 1
  • Less likely = 2
  • Unlikely = 3

AP

  • Elapsed time
  • <= one day = 0
  • <= one week = 1
  • <= two weeks = 2
  • <= one month = 4
  • ......

CVSS

  • Attack Vector
  • Network = 85
  • Adjacent = 62
  • Local = 55
  • Physical = 20
  • ......
Description String or Null Description of the score

String or null

Effect:

  • Used to calculate the final score for the methodology.
  • The result based on AP or CVSS formula is later mapped to a range.

Constraints:

  • CategoryId must refer to a valid category.
  • Values must match the selected methodology.
  • Score definitions must not conflict within the same methodology.