ER DIAGRAM

Vc_id id Vuln id

Vtyp e Url Infoi d

valu e type

Date

1:1

Dat e
Vulnnerability Specifications

Vulnerability

Vuln_id

h a s Environm ent

1:N
Include s

1:N
Assis ts

Envi d

type

Vuln _id type Appi d

valu e

PVF

url
Applicaion

Vuln id

Appid
h a s

Pvf_id

Pvf type

1:1 1:1
Conta ins

Serid

Services

Vuln_id

type

Ecploit

Exp id

na me

Vuln_Id

Desigcode

Entities:
Vulnerability Entity - names the vulnerability and links it to the specification of the
vulnerability and environment.

Vulnerability Specifications Entity - collects the vulnerability factors and the impact. Environment Specifications Entity - collects the environmental factors. Potential Vulnerability Functions Entity - vulnerability requirements originating from
the operating system.

Application Entity - vulnerability requirements specific to an application. Services Entity - vulnerability requirements specific to a service. Exploit Entity - details of exploits and impact.

Vulnerability Entity:

Column Name VULN_CODE_ID VULN_ID(PK) VULN_CODE_TYPE URL DATE_CREATED DATE_MODIFIED

Datatype varchar2(36) varchar2(36) varchar2(64)

Constraints Unique Primary key Not Null

VULN_CODE_VALUE varchar2(255) Not Null varchar2(512) Not Null date date

Vulnerability Specification: Vulnerability Specification references Vulneability table.

Column Name VULN_ID(FK) VULN_INFO_TYPE DATE_CREATED DATE_MODIFIED Datatype Primary key Foreign key references vulnerability table vuln_id Not Null varchar2(36) varchar2(36) date date Constraints

VULN_INFO_ID(PK) varchar2(36)

VULN_INFO_VALUE varchar2(2000) Not Null

Environment Entity: Environment references Vulnerability Vuln_id.

Column Name ENV_ID(PK) VULN_ID(FK) ENV_TYPE ENV_VALUE URL Datatype varchar2(36) varchar2(36) varchar2(64) Primary Key Foreign Key references vulnerability table Not Null Constraints

varchar2(255) Not Null varchar2(512) Not Null

DATE_CREATED date DATE_MODIFIED date

Potential Vulneability Functions: Potential Vulneability Functions references Vulnerabity.

Column Name PVF_ID(PK) Datatype varchar2(36) Primary Key Foreign Ky references vulnerability table Constraints

VULN_ID(FK) varchar2(36)

PVF_TYPE PVF_VALUE URL

varchar2(64) varchar2(512)

Not Null

varchar2(255) Not Null

Application Entity: Application Entity references vulnerability

Column Name APP_ID(PK) VULN_ID(FK) APP_CODE_TYPE URL DATE_CREATED DATE_MODIFIED Datatype varchar2(36) varchar2(36) varchar2(64) Primary Key Foreign key references vulnerability table Not Null Constraints

APP_CODE_VALUE varchar2(255) Not Null varchar2(512) Not Null date date

Services Entity: Services Entity references Application.

Column Name SER_ID(PK) App_ID(FK) SER_CODE_TYPE URL DATE_CREATED DATE_MODIFIED Datatype varchar2(36) varchar2(36) varchar2(64) Primary Key Foreign Key references Application table Not Null Constraints

SER_CODE_VALUE varchar2(255) Not Null varchar2(512) Not Null date date

Expolit Entity: Expolit Entity references Application.

Column Name EXP_ID(PK) Datatype varchar2(36) Primary Key Constraints

App_ID(FK) USER_INPUT STATS FUNCTIONS

varchar2(36) varchar2(64)

Foreign Key references Application table Not Null

varchar2(255) Not Null varchar2(512) Not Null

DATE_CREATED date DATE_MODIFIED date

Constraints:
Table name vulnerability Primary key Foreign Key Vuln_Id Vulninfo id Vuln_Id Vuln_Id Vuln_Id Vuln_Id App_Id App_Id

Vulnerability Specifications Vulnsepcid Environment Sepecifications Env id Pvf Application Entity Services Entity Exploit PVF id App id Ser id Exp id