BLANCA - Library extension

The library provides the following pieces of knowledge:

a collection of classes of assets
a collection of valuation criteria
a collection of typical threats
a collection of standard safeguards
a collection of standard items for a security policy
a collection of standard security procedures

as well as the knowledge of

the effect of a safeguard mitigating a threat

It is posible to extend the library by means of

new classes of assets
new criteria for valuation
new threats

New elements are regarded as refinements with respect to old ones, in such a way that

documentation is improved
the analysis can be taylored to a precise description

but the general features of the tools are not losed.

New classes of assets

In order to extend asset classes, an extension file is dropped on the library directory (to be loaded on startup.

... / bib_en /

The file uses the following XML systax:

 1  file ::=
 2    <library-extension>
 3      { classes }0+
 4    </library-extension>
 5  
 6  classes ::=
 7    <classes under="..." >
 8      { class }0+
 9    </classes>
10  
11  class ::=
12    <class code="..."> NAME </class>

where ...

{ x }0+ means zero or more occurrences of "x"
the attribute under in line #7 must refer to a class already in the library
the attribute code in line #12 must provide a unique code for the new class

It may be easier to see an example:

ext_classes.lle

In order to use the previous example, copy it on the library directory, from where it is loaded when PILAR starts.

There may be several ".lle" files in the directory; files are soerted in alphabetical order before loading.

New criteria of valuation

In order to extend valuation criteria, an extension file is dropped on the library directory (to be loaded on startup.

... / bib_en /

The file uses the following XML systax:

 1  file ::=
 2    <library-extension>
 3      { criteria }0+
 4    </library-extension>
 5  
 6  criteria ::=
 7    <criteria under="..." >
 8      { reason }0+
 9    </criteria>
10  
11  reason ::=
12    <reason code="..."> NAME </reason>

where ...

{ x }0+ means zero or more occurrences of "x"
the attribute under in line #7 must refer to a reason already in the library
the attribute code in line #12 must provide a unique code for the new reason

It may be easier to see an example:

ext_criteria_en.lle

In order to use the previous example, copy it on the library directory, from where it is loaded when PILAR starts.

There may be several ".lle" files in the directory; files are soerted in alphabetical order before loading.

New threats

In order to extend system threats, an extension file is dropped on the library directory (to be loaded on startup.

... / bib_en /

The file uses the following XML systax:

 1  file ::=
 2    <library-extension>
 3      { threats }0+
 4    </library-extension>
 5  
 6  threats ::=
 7    <threats under="..." >
 8      { threat }0+
 9    </threats>
10  
11  threat ::=
12    <threat code="..."> NAME </threat>

where ...

{ x }0+ means zero or more occurrences of "x"
the attribute under in line #7 must refer to a threat already in the library
the attribute code in line #12 must provide a unique code for the new threat

It may be easier to see an example:

ext_threats_en.lle

In order to use the previous example, copy it on the library directory, from where it is loaded when PILAR starts.

There may be several ".lle" files in the directory; files are soerted in alphabetical order before loading.