Trustworthiness Attribute Benevolence

URI: Benevolence

Package: Users

Description: Free of malicious motives or desires to cause adverse effects without external provocation.

This attribute is undermined by the misbehaviour LossOfBenevolence

Represents an entity with motives for engaging in the modelled system. Note that systems are modelled as socio-cyber-physical systems, so users and various organisational actors are considered part of a system they are using.

DC.RTW.StDC.1

Operator Operator compromises resource management at DataCentre: since Operator cis the operator of the data centre DataCentre, if they have adverse motives, they can misallocate resources within the data centre.

H.L.HuiHoSt.1

Insider attack by Human abusing access to Host: if the user Human of device Host is untrustworthy, they can abuse their privileges on that device.

H.L.HuiHSt.1

Insider attack by employee of Employer abusing access to Host: user Human of device Host may be persuaded by an untrustworthy employer Employer to abuse their privileges on that device.

H.M.HumHoSt.1

Insider attack by HostManager abusing admin rights on Host: if the manager HostManager of device Host is untrustworthy, they can use their privileges to enable attacks involving Host.

H.M.HumHSt.1

Insider attack by employee HostManager of Employer abusing admin rights on Host: the manager HostManager of device Host may be persuaded by an untrustworthy employer Employer to abuse their rights and enable attacks involving Host.

H.RTW.StH.1

Operator Operator compromises resource management at Host: Operator is the operator of (the class of devices) Host, so if they have adverse motives, they can misallocate instances or refuse to allocate instances.

P.L.HuiPoSt.1

Insider attack by Human abusing their control of Process: if the legitimate user Human of process Process is malicious, they can abuse the privileges assigned to Process.

P.L.HuiPSt.1

Insider attack by employee of Employer abusing their control of Process: the legitimate user Human of process Process may be persuaded by an untrustworthy employer Employer to abuse the privileges assigned to Process.

S.L.HuPSoSt.1

Insider intrusion by Human into Space: user Human has physical access to the private space Space, and could carry out malicious acts in that space.

S.L.HuPSSt.1

Insider intrusion by employee of Employer into Space: user Human has physical access to the private space Space, and may be persuaded by an untrustworthy employer Employer to carry out malicious acts in that space.

S.L.PScSt.1

Stakeholder Stakeholder compromises physical security of space Space: since Stakeholder controls access to the private space Space, if they have adverse motives, they can allow attackers to access the space.

CC.L.CSCCHuoSt.1

Malicious action by insider Human controlling Service affects Client: if the user Human controling service Service is malicious, they can make it mishandle requests sent from Client.

CC.L.CSCCHuSt.1

Malicious action by employee of Employer controlling Service affects Client: the user Human controling service Service may be persuaded by their employer Employer to make the service mishandle requests sent from Client.

CC.R.HuoStCCCS.1

Malicious action by insider Human using Client to access Service: if user Human of client process Client is malicious, they can abuse the right of Client to access service Service.

CC.R.HuStCCCS.1

Malicious action by employee of Employer using Client to access Service: user Human of client process Client may be persuaded by their employer Employer to abuse the right of Client to access service Service.