Skip to content

Add 5 Metrics for AMOE#114

Draft
lebogg wants to merge 30 commits into
mainfrom
90-new-add-amoe-metrics
Draft

Add 5 Metrics for AMOE#114
lebogg wants to merge 30 commits into
mainfrom
90-new-add-amoe-metrics

Conversation

@lebogg

@lebogg lebogg commented Jul 23, 2025

Copy link
Copy Markdown
Collaborator

Closes #90

@lebogg lebogg linked an issue Jul 23, 2025 that may be closed by this pull request
anatheka and others added 7 commits July 23, 2025 21:37
* Add metric for PasswordRotationFrequency

* Add review comments

* Add merged ontology file [skip ci]

* Rename PasswordRotationFrequency to RotationFrequency; Update metric

* Add rotationFrequency to Authenticity

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Update metric and targetValue

* Update metric to check hours instead of a bool

* Add deleted yml file

* Add rotationFrequency to Authenticity

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Rename rotationFrequency -> rotationInterval

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Rename RotationFrequency -> PasswordRotationFrequency

* Update metric passwordRotationInterval

* Reaname

* Fix comment

* Add comment to ontology

* ++

* ++

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Fix rotation interval comment

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Fix typos

* Fix path

* Fix format; Check all resources, not only policy documents

* ++

* Remove comma

* Add category

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Nico Haas <nico.haas@aisec.fraunhofer.de>
Co-authored-by: Nico Haas <40119051+lebogg@users.noreply.github.com>
* Add metric yml, rego and data

* Update ontology

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Add `gitattributes` file

* Update gitattributes

* Fix gitattributes

* Add metric PasswordRotationInterval (#91)

* Add metric for PasswordRotationFrequency

* Add review comments

* Add merged ontology file [skip ci]

* Rename PasswordRotationFrequency to RotationFrequency; Update metric

* Add rotationFrequency to Authenticity

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Update metric and targetValue

* Update metric to check hours instead of a bool

* Add deleted yml file

* Add rotationFrequency to Authenticity

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Rename rotationFrequency -> rotationInterval

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Rename RotationFrequency -> PasswordRotationFrequency

* Update metric passwordRotationInterval

* Reaname

* Fix comment

* Add comment to ontology

* ++

* ++

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Fix rotation interval comment

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Fix typos

* Fix path

* Fix format; Check all resources, not only policy documents

* ++

* Remove comma

* Add category

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Nico Haas <nico.haas@aisec.fraunhofer.de>
Co-authored-by: Nico Haas <40119051+lebogg@users.noreply.github.com>

* save ontology file

* Fix metric

* Fix metric

* Ontology fix: Move feature to security owx

* Ontology: Use `scanInterval` as feature name

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Update metrics/LoggingMonitoring/AntimalwareScanFrequency/AntimalwareScanFrequency.yml

Co-authored-by: Angelika Schneider <aruppel@gmx.de>

* Update metrics/LoggingMonitoring/AntimalwareScanFrequency/metric.rego

Co-authored-by: Angelika Schneider <aruppel@gmx.de>

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Angelika Schneider <aruppel@gmx.de>
* Add data, metric and yml

* Ontology: Add length to password security feature

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Use normal int

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Add category

* Use actual AMOE question from XLS

* Add "default" to comment

* Move `length` feature to security owx

* Remove target value from comment

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

* Add keywords

* Revert keyword field. Add it in another PR

* Fix string

* Fix AMOE field

* Update target value for password characters from 5 to 8

* Move lentgth to Authenticity, so that all underlying classes can use the length property

* Add merged ontology file [skip ci]

* Add generated proto file [skip ci]

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Angelika Schneider <aruppel@gmx.de>
Co-authored-by: Angelika Schneider <angelika.schneider@aisec.fraunhofer.de>
@oxisto oxisto added the EMERALD label Sep 24, 2025

@anatheka anatheka left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some needed changes.

configuration:
p1:
operator: "<="
targetValue: 10 # in days? (TODO)

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

???

Comment thread metrics/LoggingMonitoring/AntimalwareScanFrequency/metric.rego Outdated
Comment thread ontology/v1/core/security.owx Outdated
Comment thread ontology/v1/core/security.owx Outdated
Comment thread ontology/v1/core/security.owx Outdated
Comment thread ontology/v1/core/security.owx Outdated
Comment thread ontology/v1/core/security.owx Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add AMOE metrics

3 participants