Threat Scenario

Potential cause of compromise of cybersecurity properties  of one or more assets  in order to realize a damage scenario.

Attack Path

Set of deliberate actions to realize a threat scenario.

Failure

Termination of an intended behavior of an element or an item due to a fault manifestation.

Creating a Threat Scenario

To create a Threat Scenario

  1. In the Containment tree, right-click Threat Scenario and select Create Element.



  2. Do one of the following:
    • In the dialog, expand ISO 21434 and select Threat Scenario.



    • In the search tab, type the keyword threat and then select Threat Scenario.



  3. Name the created Threat Scenario in the Containment tree and press Enter. The Threat Scenario has the suffix DS which denotes that the created element is a Threat Scenario; the number 1 indicates that it is the first Threat Scenario created.


Creating a Threat Scenario Table

To create a Threat Scenario Table

  1. In the Containment tree, right-click Threat Scenario and select Create Diagram.



  2. Do one of the following:
    • In the dialog, expand ISO 21434 and select Threat Scenario Table.



    • In the search tab, type the keyword threat and then select Threat Scenario Table.



      The Threat Scenario Table is now displayed in the diagram pane of the modeling tool.

Adding a Threat Scenario to the Threat Scenario Table

To add a new Threat Scenario to the Threat Scenario Table

  1. In the Threat Scenario Table, click Add New. A row is added in the Threat Scenario Table, which shows the new Threat Scenario.



  2. In the newly created Threat Scenario's row and the Name column, double-click the designated cell to name the Threat Scenario.



To add an existing Threat Scenario to the Threat Scenario Table

  1. In the Threat Scenario Table, click Add Existing.



  2. From the Select Threat Scenario dialog, select the required Threat Scenario. A row is added to the Threat Scenario Table, which shows the existing Threat Scenario.



  3.  In the existing Threat Scenario's row and the Name column, double-click the designated cell to rename the Threat Scenario.


Adding a Threat Type

To add a Threat Type

  • Double-click the designated cell in the Threat Scenario's row and the Threat Type column. From the drop-down list, select Threat Type.


    The Threat Type will be added to the Threat Scenarios Table.

Adding an Attack Path

You can add multiple attack paths for a given Threat Scenario.

To add an Attack Path

  1. Double-click the designated cell in the Attack Path column and the required Threat Scenario's row and click .



  2. From the Select Elements dialog, select Attack Path.



    The Attack Path is added to the Threat Scenario Table.


  • You can also drag and drop the Attack Paths from the Containment tree to the Threat Scenario Table.
  • The Aggregated Attack Feasibility Rating is added automatically after you add Attack Path.

Adding a Failure

To add a Failure

  1. Double-click the designated cell in the Failure column and the required Threat Scenario's row and click .



  2. From the Select Class dialog, select Failure.



    The Failure is now shown in the Threat Scenario Table.


You can also drag and drop the Failure modes from the Containment tree to the Threat Scenario Table.

Adding and Impacted Asset

You can add multiple Impacted Assets for a given Threat Scenario.

To add an Impacted Asset

  1. Double-click the designated cell in the Impacted Asset column and the required Threat Scenario's row and click .



  2. From the Select Element dialog, select Impacted Asset.



    The Impacted Asset is added to the Threat Scenario Table.


You can also drag and drop the Impacted Assets from the Containment tree to the Threat Scenario Table.

Threat Scenario Table Example