anchor.diff:  * link:#t20[T20] - VIN, configurations, financial information compromise
   * link:#t23[T23] - Compromise of sensitive data
   
  -===== Purpose
  +^.^h| Purpose a|
   
   deterrence
   
  -===== Goal
  -
  -===== Depends
  +^.^h| Goal a|
  +
  +^.^h| Depends a|
  +|====
   
   [[c04]]
  -== C04 Log transactions to and from SOTA Server
  -
  -===== Applicable threats
  -
  +=== C04 Log transactions to and from SOTA Server
  +
  +|====
  +^.^h| Applicable threats a|
   * link:#t07[T07] - Spoofing of External Resolver
   * link:#t15[T15] - Logistics & Provisioning API Spoofing
   * link:#t16[T16] - Associating a part number with a malicious package
  
positive.code: * link:#t08[T08] - Tampering of package dependencies
  * link:#t12[T12] - Denying the installation of a software package
  
  ===== Purpose
  
  monitoring
  
  ===== Goal
  
  ===== Depends
  
  [[c05]]
  == C05 Notify administrators for suspicious traffic patterns
  
  ===== Applicable threats
  
  * link:#t05[T05] - Web API Denial of Service attack
  * link:#t14[T14] - RVI Node Denial of Service attack
  * link:#t24[T24] - MariaDB Denial of Service attack
  
  ===== Purpose
  
  monitoring
  
  ===== Goal
  
  ===== Depends
  
  [[c06]]
  == C06 Limit login attempts per session
  
  ===== Applicable threats
  
  * link:#t01[T01] - Spoofing of Admin UI
  * link:#t15[T15] - Logistics & Provisioning API Spoofing
  * link:#t18[T18] - Charging & Billing API Spoofing
  
  ===== Purpose
  
  deterrence
  
  ===== Goal
  
  ===== Depends
  
  [[c07]]
  == C07 Log VIN and package creations
  
  ===== Applicable threats
  
  * link:#t01[T01] - Spoofing of Admin UI
  * link:#t03[T03] - Invalid package configuration injection
  
  ===== Purpose
  
  monitoring
  
  ===== Goal
  
  ===== Depends
  
  [[c08]]
  == C08 Avoid exposing unnecessary interfaces to public Internet
  
  ===== Applicable threats
  
  * link:#t02[T02] - Node sniffing
  * link:#t05[T05] - Web API Denial of Service attack
  * link:#t06[T06] - Brute force password cracking
  
negative.code: * link:#t24[T24] - MariaDB Denial of Service attack
  * link:#t26[T26] - Spoofing External Resolver
  
  ^.^h| Purpose a|
  
  prevention
  
  ^.^h| Goal a|
  
  ^.^h| Depends a|
  |====
  
  [[c09]]
  === C09 Verify the VIN/package filter sanity
  
  |====
  ^.^h| Applicable threats a|
  T03
  
  ^.^h| Purpose a|
  
  deterrence
  
  ^.^h| Goal a|
  
  ^.^h| Depends a|
  |====
  
  [[c10]]
  === C10 Allow only Intranet/VPN connections to MariaDB
  
  |====
  ^.^h| Applicable threats a|
  * link:#t22[T22] - Persistence of false data
  * link:#t23[T23] - Compromise of sensitive data
  * link:#t24[T24] - MariaDB Denial of Service attack
  * link:#t25[T25] - Getting admin rights
  
  ^.^h| Purpose a|
  
  deterrence
  
  ^.^h| Goal a|
  
  ^.^h| Depends a|
  |====
  
  [[c11]]
  === C11 Don’t use Admin account with MariaDB
  
  |====
  ^.^h| Applicable threats a|
  * link:#t22[T22] - Persistence of false data
  * link:#t23[T23] - Compromise of sensitive data
  * link:#t24[T24] - MariaDB Denial of Service attack
  * link:#t25[T25] - Getting admin rights
  
  ^.^h| Purpose a|
  
  deterrence
  
  ^.^h| Goal a|
  
  ^.^h| Depends a|
  |====
  
  [[c12]]
  === C12 SOTA Client should not accept any calls or requests from in-vehicle
  
  processes
  
  |====
  ^.^h| Applicable threats a|
  * link:#t27[T27] - In-vehicle process spoofing
  * link:#t28[T28] - SOTA Client sniffing
  * link:#t29[T29] - SOTA Client Denial of Service attack
  
  ^.^h| Purpose a|
  
  prevention
  
  ^.^h| Goal a|
  
  ^.^h| Depends a|
  |====
  
  [[c13]]
  === C13 SOTA Client should authenticate and communicate only with the
  
  Software Loading Manager (from in-vehicle software)
  
  |====
  ^.^h| Applicable threats a|
  * link:#t27[T27] - In-vehicle process spoofing
  * link:#t28[T28] - SOTA Client sniffing
  
  ^.^h| Purpose a|
  
  prevention
  
  ^.^h| Goal a|
  
  ^.^h| Depends a|
  |====
  
  [[c14]]
  === C14 SOTA Server-supplied checksum for every package send, recalculated
  
  it and verify it locally.
  
  |====
  ^.^h| Applicable threats a|
  * link:#t28[T28] - SOTA Client sniffing
  * link:#t11[T11] - Retrieving false package installation results
  * link:#t08[T08] - Tampering of package dependencies
  * link:#t03[T03] - Invalid package configuration injection
  
  ^.^h| Purpose a|
  
  deterrence
  
  ^.^h| Goal a|
  
  ^.^h| Depends a|
  |====
  
  [[c15]]
  === C15 In case that the SOTA Server is unavailable and a package download has been interrupted, set the download’s state as erroneous and update the Server with the information upon the next notification
  
  |====
  ^.^h| Applicable threats a|
  * link:#t28[T28] - SOTA Client sniffing
  * link:#t11[T11] - Retrieving false package installation results
  * link:#t08[T08] - Tampering of package dependencies
  * link:#t03[T03] - Invalid package configuration injection
  
  ^.^h| Purpose a|
  
  deterrence
  
  ^.^h| Goal a|
  
  ^.^h| Depends a|
  |====
  
  