In order to try the functionality of this section out, just create an empty model with two Host objects, a Service object and a Client object.
SoftwareProduct objects are defining specific properties, attacks and defenses, related to the type of software a client, service and host (operating system) is based on. Since SoftwareProduct object shall be shared by all similar objects on our model, they shall be added and connected separately. For instance, all Hosts based on Windows7 shall share the same Windows7 SoftwareProduct object. The reason to this is that when the attacker is facing the next Host based on Windows7, it already knows how to attack it.
Creating a SoftwareProduct overview
A good method for managing SoftwareProducts is to add a new empty canvas and use it to collect the SoftwareProducts there.
In our case, create a new canvas using the circled “+” button in the tool bar of securiCAD and then add “Ubuntu Linux”, “Windows 7”, “Gen GPL Srv” and “Google Chrome” to it.
Connecting the SoftwareProducts
Since in most cases (apart from our minimalist model), SoftwareProducts will be connected to several objects, I will take the opportunity to introduce a “batch” connection method. Start by selecting the “Ubuntu Linux” SoftwareProduct object. This will add content to the “ObjectView” pane to the lower left corner of securiCAD.
Since the “Ubuntu Linux” object shall be connected to Host objects, we shall unfold the “Host(0)” label in the ObjectView pane. This will show what Host objects “Ubuntu Linux” is currently connected to. (So far; none.) Proceeding by clicking the “Edit” button will bring up a new pane allowing for connecting the object.
This tool allows for making connections between objects in a list mode style. Please select the “Linux Server” label from the “Available Host(s) from the model” list. Clicking it will connect it to the “Ubuntu Linux” SoftwareProduct and also move it up to the “Current Host(s)” list.
Repeat the above steps to connect “Windows 7” to “Workstation” Host, “Gen GPL Srv” to the “sshd” Service and “Google Chrome” to the “Google Chrome” Client object.