MITRE D3FENDdefensive technique
D3-SYSDM System Dependency Mapping
- Tactic
- Model
Definition
System dependency mapping identifies and models the dependencies of system components on each other to carry out their function.
How it works
How it works
The organization collects and models architectural information about the software, hardware, and products and maps the dependencies between systems, including each system's internal components and dependencies.
Considerations
• Data exchanges identified in the network mapping efforts usually indicate such dependencies, but may not be part of the intended design.
• Architectural design artifacts and SMEs may need to be consulted to determine if dependencies are intended or otherwise essential.
• System dependency mapping can identify internal dependencies of standard and pre-built systems that should be incorporated into a complete system dependency model.
• System dependencies for critical systems--those supporting critical organizational activities--should be prioritized for supply chain risk analysis.
• System dependencies should identify the integral components of a given named system and their structure to form a system.
• System dependencies with a given system may be fixed by a particular product's configuration, and leveraging external knowledge bases about dependencies available (e.g., from package managers) is essential.
Related
Child of · MITRE D3FEND (1)
- D3-SYSM System Mapping defensive technique
References
- https://www.3ds.com/products-services/catia/products/no-magic/addons/uaf-plugin/ Catia UAF Plugin
- https://patents.google.com/patent/WO2020028535A1 Software vulnerability graph database
- https://www.ibm.com/docs/en/taddm/7.3.0?topic=model-dependencies-between-resources Tivoli Application Dependency Discovery Manager 7.3.0 - Dependencies between resources
- https://www.omg.org/spec/UAF/ Unified Architecture Framework (UAF)